Sep 29 04:21:40 nativespace-cdp sshd[25001]: Connection closed by 159.100.136.21 port 52006 [preauth]
Sep 29 04:26:33 nativespace-cdp sshd[26053]: Connection closed by 159.100.136.21 port 33200 [preauth]
Sep 29 04:31:34 nativespace-cdp sshd[27116]: Connection closed by 159.100.136.21 port 41748 [preauth]
Sep 29 04:32:35 nativespace-cdp sshd[27391]: Invalid user radix from 182.93.7.194 port 43770
Sep 29 04:32:35 nativespace-cdp sshd[27391]: input_userauth_request: invalid user radix [preauth]
Sep 29 04:32:35 nativespace-cdp sshd[27391]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:32:35 nativespace-cdp sshd[27391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.7.194
Sep 29 04:32:37 nativespace-cdp sshd[27391]: Failed password for invalid user radix from 182.93.7.194 port 43770 ssh2
Sep 29 04:32:37 nativespace-cdp sshd[27391]: Received disconnect from 182.93.7.194 port 43770:11: Bye Bye [preauth]
Sep 29 04:32:37 nativespace-cdp sshd[27391]: Disconnected from 182.93.7.194 port 43770 [preauth]
Sep 29 04:34:13 nativespace-cdp sshd[27763]: Invalid user smart from 103.149.28.105 port 54964
Sep 29 04:34:13 nativespace-cdp sshd[27763]: input_userauth_request: invalid user smart [preauth]
Sep 29 04:34:13 nativespace-cdp sshd[27763]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:34:13 nativespace-cdp sshd[27763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105
Sep 29 04:34:15 nativespace-cdp sshd[27763]: Failed password for invalid user smart from 103.149.28.105 port 54964 ssh2
Sep 29 04:34:16 nativespace-cdp sshd[27763]: Received disconnect from 103.149.28.105 port 54964:11: Bye Bye [preauth]
Sep 29 04:34:16 nativespace-cdp sshd[27763]: Disconnected from 103.149.28.105 port 54964 [preauth]
Sep 29 04:34:33 nativespace-cdp sshd[27822]: Invalid user jenkins from 141.94.223.12 port 38598
Sep 29 04:34:33 nativespace-cdp sshd[27822]: input_userauth_request: invalid user jenkins [preauth]
Sep 29 04:34:33 nativespace-cdp sshd[27822]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:34:33 nativespace-cdp sshd[27822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.94.223.12
Sep 29 04:34:35 nativespace-cdp sshd[27822]: Failed password for invalid user jenkins from 141.94.223.12 port 38598 ssh2
Sep 29 04:34:35 nativespace-cdp sshd[27822]: Received disconnect from 141.94.223.12 port 38598:11: Bye Bye [preauth]
Sep 29 04:34:35 nativespace-cdp sshd[27822]: Disconnected from 141.94.223.12 port 38598 [preauth]
Sep 29 04:34:55 nativespace-cdp sshd[27985]: Invalid user postgres from 68.183.80.132 port 40360
Sep 29 04:34:55 nativespace-cdp sshd[27985]: input_userauth_request: invalid user postgres [preauth]
Sep 29 04:34:55 nativespace-cdp sshd[27985]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:34:55 nativespace-cdp sshd[27985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.80.132
Sep 29 04:34:58 nativespace-cdp sshd[27985]: Failed password for invalid user postgres from 68.183.80.132 port 40360 ssh2
Sep 29 04:34:58 nativespace-cdp sshd[27985]: Received disconnect from 68.183.80.132 port 40360:11: Bye Bye [preauth]
Sep 29 04:34:58 nativespace-cdp sshd[27985]: Disconnected from 68.183.80.132 port 40360 [preauth]
Sep 29 04:35:37 nativespace-cdp sshd[28204]: Invalid user server from 164.132.56.147 port 37790
Sep 29 04:35:37 nativespace-cdp sshd[28204]: input_userauth_request: invalid user server [preauth]
Sep 29 04:35:37 nativespace-cdp sshd[28204]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:35:37 nativespace-cdp sshd[28204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.56.147
Sep 29 04:35:39 nativespace-cdp sshd[28204]: Failed password for invalid user server from 164.132.56.147 port 37790 ssh2
Sep 29 04:35:39 nativespace-cdp sshd[28204]: Received disconnect from 164.132.56.147 port 37790:11: Bye Bye [preauth]
Sep 29 04:35:39 nativespace-cdp sshd[28204]: Disconnected from 164.132.56.147 port 37790 [preauth]
Sep 29 04:36:33 nativespace-cdp sshd[28411]: Connection closed by 159.100.136.21 port 51692 [preauth]
Sep 29 04:36:40 nativespace-cdp sshd[28441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.94.223.12  user=root
Sep 29 04:36:40 nativespace-cdp sshd[28441]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 04:36:42 nativespace-cdp sshd[28441]: Failed password for root from 141.94.223.12 port 40692 ssh2
Sep 29 04:36:42 nativespace-cdp sshd[28441]: Received disconnect from 141.94.223.12 port 40692:11: Bye Bye [preauth]
Sep 29 04:36:42 nativespace-cdp sshd[28441]: Disconnected from 141.94.223.12 port 40692 [preauth]
Sep 29 04:36:58 nativespace-cdp sshd[28515]: Invalid user minecraft from 164.132.56.147 port 57960
Sep 29 04:36:58 nativespace-cdp sshd[28515]: input_userauth_request: invalid user minecraft [preauth]
Sep 29 04:36:58 nativespace-cdp sshd[28515]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:36:58 nativespace-cdp sshd[28515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.56.147
Sep 29 04:37:00 nativespace-cdp sshd[28515]: Failed password for invalid user minecraft from 164.132.56.147 port 57960 ssh2
Sep 29 04:37:03 nativespace-cdp sshd[28515]: Received disconnect from 164.132.56.147 port 57960:11: Bye Bye [preauth]
Sep 29 04:37:03 nativespace-cdp sshd[28515]: Disconnected from 164.132.56.147 port 57960 [preauth]
Sep 29 04:37:14 nativespace-cdp sshd[28602]: Invalid user mosquitto from 68.183.80.132 port 40388
Sep 29 04:37:14 nativespace-cdp sshd[28602]: input_userauth_request: invalid user mosquitto [preauth]
Sep 29 04:37:14 nativespace-cdp sshd[28602]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:37:14 nativespace-cdp sshd[28602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.80.132
Sep 29 04:37:15 nativespace-cdp sshd[28602]: Failed password for invalid user mosquitto from 68.183.80.132 port 40388 ssh2
Sep 29 04:37:15 nativespace-cdp sshd[28602]: Received disconnect from 68.183.80.132 port 40388:11: Bye Bye [preauth]
Sep 29 04:37:15 nativespace-cdp sshd[28602]: Disconnected from 68.183.80.132 port 40388 [preauth]
Sep 29 04:37:16 nativespace-cdp sshd[28638]: Invalid user nextcloud from 103.149.28.105 port 58744
Sep 29 04:37:16 nativespace-cdp sshd[28638]: input_userauth_request: invalid user nextcloud [preauth]
Sep 29 04:37:16 nativespace-cdp sshd[28638]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:37:16 nativespace-cdp sshd[28638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105
Sep 29 04:37:17 nativespace-cdp sshd[28716]: Invalid user postgres from 141.94.223.12 port 49492
Sep 29 04:37:17 nativespace-cdp sshd[28716]: input_userauth_request: invalid user postgres [preauth]
Sep 29 04:37:17 nativespace-cdp sshd[28716]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:37:17 nativespace-cdp sshd[28716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.94.223.12
Sep 29 04:37:18 nativespace-cdp sshd[28638]: Failed password for invalid user nextcloud from 103.149.28.105 port 58744 ssh2
Sep 29 04:37:18 nativespace-cdp sshd[28638]: Received disconnect from 103.149.28.105 port 58744:11: Bye Bye [preauth]
Sep 29 04:37:18 nativespace-cdp sshd[28638]: Disconnected from 103.149.28.105 port 58744 [preauth]
Sep 29 04:37:19 nativespace-cdp sshd[28716]: Failed password for invalid user postgres from 141.94.223.12 port 49492 ssh2
Sep 29 04:37:19 nativespace-cdp sshd[28716]: Received disconnect from 141.94.223.12 port 49492:11: Bye Bye [preauth]
Sep 29 04:37:19 nativespace-cdp sshd[28716]: Disconnected from 141.94.223.12 port 49492 [preauth]
Sep 29 04:37:35 nativespace-cdp sshd[29036]: Invalid user postgres from 164.132.56.147 port 34452
Sep 29 04:37:35 nativespace-cdp sshd[29036]: input_userauth_request: invalid user postgres [preauth]
Sep 29 04:37:35 nativespace-cdp sshd[29036]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:37:35 nativespace-cdp sshd[29036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.56.147
Sep 29 04:37:37 nativespace-cdp sshd[29036]: Failed password for invalid user postgres from 164.132.56.147 port 34452 ssh2
Sep 29 04:37:37 nativespace-cdp sshd[29036]: Received disconnect from 164.132.56.147 port 34452:11: Bye Bye [preauth]
Sep 29 04:37:37 nativespace-cdp sshd[29036]: Disconnected from 164.132.56.147 port 34452 [preauth]
Sep 29 04:38:00 nativespace-cdp sshd[29280]: Invalid user ionguest from 68.183.80.132 port 51072
Sep 29 04:38:00 nativespace-cdp sshd[29280]: input_userauth_request: invalid user ionguest [preauth]
Sep 29 04:38:00 nativespace-cdp sshd[29280]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:38:00 nativespace-cdp sshd[29280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.80.132
Sep 29 04:38:01 nativespace-cdp sshd[29280]: Failed password for invalid user ionguest from 68.183.80.132 port 51072 ssh2
Sep 29 04:38:02 nativespace-cdp sshd[29280]: Received disconnect from 68.183.80.132 port 51072:11: Bye Bye [preauth]
Sep 29 04:38:02 nativespace-cdp sshd[29280]: Disconnected from 68.183.80.132 port 51072 [preauth]
Sep 29 04:38:18 nativespace-cdp sshd[29615]: Connection closed by 103.149.28.105 port 45078 [preauth]
Sep 29 04:39:08 nativespace-cdp sshd[30276]: Invalid user sysadmin from 103.149.28.105 port 59642
Sep 29 04:39:08 nativespace-cdp sshd[30276]: input_userauth_request: invalid user sysadmin [preauth]
Sep 29 04:39:08 nativespace-cdp sshd[30276]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:39:08 nativespace-cdp sshd[30276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.149.28.105
Sep 29 04:39:10 nativespace-cdp sshd[30276]: Failed password for invalid user sysadmin from 103.149.28.105 port 59642 ssh2
Sep 29 04:39:10 nativespace-cdp sshd[30276]: Received disconnect from 103.149.28.105 port 59642:11: Bye Bye [preauth]
Sep 29 04:39:10 nativespace-cdp sshd[30276]: Disconnected from 103.149.28.105 port 59642 [preauth]
Sep 29 04:40:56 nativespace-cdp sshd[31180]: Invalid user sysadmin from 182.93.7.194 port 53744
Sep 29 04:40:56 nativespace-cdp sshd[31180]: input_userauth_request: invalid user sysadmin [preauth]
Sep 29 04:40:56 nativespace-cdp sshd[31180]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:40:56 nativespace-cdp sshd[31180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.7.194
Sep 29 04:40:58 nativespace-cdp sshd[31180]: Failed password for invalid user sysadmin from 182.93.7.194 port 53744 ssh2
Sep 29 04:40:58 nativespace-cdp sshd[31180]: Received disconnect from 182.93.7.194 port 53744:11: Bye Bye [preauth]
Sep 29 04:40:58 nativespace-cdp sshd[31180]: Disconnected from 182.93.7.194 port 53744 [preauth]
Sep 29 04:41:37 nativespace-cdp sshd[31346]: Did not receive identification string from 159.100.136.21 port 33210
Sep 29 04:41:51 nativespace-cdp sshd[31392]: Invalid user kafka from 182.93.7.194 port 50326
Sep 29 04:41:51 nativespace-cdp sshd[31392]: input_userauth_request: invalid user kafka [preauth]
Sep 29 04:41:52 nativespace-cdp sshd[31392]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 04:41:52 nativespace-cdp sshd[31392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.93.7.194
Sep 29 04:41:54 nativespace-cdp sshd[31392]: Failed password for invalid user kafka from 182.93.7.194 port 50326 ssh2
Sep 29 04:41:54 nativespace-cdp sshd[31392]: Received disconnect from 182.93.7.194 port 50326:11: Bye Bye [preauth]
Sep 29 04:41:54 nativespace-cdp sshd[31392]: Disconnected from 182.93.7.194 port 50326 [preauth]
Sep 29 04:46:35 nativespace-cdp sshd[32656]: Connection closed by 159.100.136.21 port 42546 [preauth]
Sep 29 04:51:32 nativespace-cdp sshd[1460]: Connection closed by 159.100.136.21 port 51604 [preauth]
Sep 29 04:56:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 04:56:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:56:20 nativespace-cdp sudo[2523]: pam_unix(sudo:session): session closed for user root
Sep 29 04:56:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 04:56:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:56:20 nativespace-cdp sudo[2531]: pam_unix(sudo:session): session closed for user root
Sep 29 04:56:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 04:56:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:56:24 nativespace-cdp sudo[2538]: pam_unix(sudo:session): session closed for user root
Sep 29 04:56:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hubmaster user-2=fetch user-3=carsinyo user-4=gilpin user-5=milloyco user-6=elecleis user-7=connectedshoppin user-8=thqkgnbz user-9=accooper user-10=ianrayne user-11=opaiscyx user-12=coursemc user-13=ultbcrra user-14=jonhartl user-15=seftvta user-16=firstres user-17=firstred user-18=highlegh user-19=southlon user-20=firstrel user-21=clarkass user-22=costestimatorco user-23=skyfirec user-24=alexadmin user-25=nativene user-26=innovat1 user-27=stuartge user-28=askhform user-29=vivienn1 user-30=firstre2 user-31=oneoarco user-32=battlere user-33=nstriton user-34=brighto1 user-35=newstoda user-36=belle user-37=ggaaorgu user-38=bemadonn user-39=bedfords user-40=spectrum user-41=theblack user-42=hodgesonweb user-43=jarvisin user-44=stephani user-45=leereyn1 user-46=agproduc user-47=still
Sep 29 04:56:24 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=vantagep user-49=connect9 user-50=athenare user-51=lbscrmod user-52=maflemin user-53=markward user-54=booff user-55=foundation user-56=ulsukarm user-57=dickemery123 user-58=ptkxhsbt user-59=martsblo user-60=magichat user-61=hhdugcor user-62=lbhyisi user-63=strathar user-64=atestord user-65=sarafoundation user-66=lakesan1 user-67=brmrjxl user-68=megacards user-69=musorguk user-70=wilsonsw user-71=onlycont user-72=lucy user-73=attlebor user-74=romaldki user-75=hodgsonmail user-76=outdoorc user-77=ranxterc user-78=branko user-79=jennimil user-80=tomandle user-81=david user-82=nbhavers user-83=careers user-84=chrisdal user-85=mcdermos user-86=havantho user-87=cath user-88=sketchy user-89=nvihkvu user-90=oubpgvbx user-91=tstardom user-92=what user-93=design user-94=stagingerris user-95=dancinggardener user-96=ladburyp user-97=kategilpin user-98=boldover user-99=nove user-100=bakery user-101=crrtipdl
Sep 29 04:56:24 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=sosevalu user-103=nsceres user-104=fawcettd user-105=burydropin user-106=dhyana user-107=beauty user-108=darkstar user-109=eatspam user-110=asandcoc user-111=sibtoncc user-112=steve user-113=bwppodcast user-114=zebrapho user-115=cwsocial user-116=paulmca1 user-117=howardon user-118=pugwash user-119=cambria1 user-120=cathski user-121=reliable user-122=ninejimm user-123=eugincou user-124=courseme user-125=hirefootballgame user-126=lkpier user-127=donnychicago user-128=steakbridieme user-129=firstre5 user-130=ctedorgu user-131=philmcph user-132=nscdp user-133=leftie user-134=foods user-135=fortunaz user-136=health2045 user-137=nomistakes user-138=hidden user-139=tigerlet user-140=barbersh user-141=smrszyqg user-142=isleofwi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 29 04:56:24 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 04:56:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:56:25 nativespace-cdp sudo[2543]: pam_unix(sudo:session): session closed for user root
Sep 29 04:56:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 29 04:56:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:56:26 nativespace-cdp sudo[2556]: pam_unix(sudo:session): session closed for user root
Sep 29 04:56:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 29 04:56:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:56:27 nativespace-cdp sudo[2560]: pam_unix(sudo:session): session closed for user root
Sep 29 04:56:34 nativespace-cdp sshd[2591]: Connection closed by 159.100.136.21 port 32962 [preauth]
Sep 29 04:56:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 29 04:56:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 29 04:56:58 nativespace-cdp sudo[2673]: pam_unix(sudo:session): session closed for user onlycont
Sep 29 04:56:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 29 04:56:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:56:59 nativespace-cdp sudo[2680]: pam_unix(sudo:session): session closed for user root
Sep 29 04:56:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 29 04:56:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:00 nativespace-cdp sudo[2686]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 29 04:57:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:02 nativespace-cdp sudo[2691]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 29 04:57:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:03 nativespace-cdp sudo[2718]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 29 04:57:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:05 nativespace-cdp sudo[2731]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 29 04:57:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:09 nativespace-cdp sudo[2742]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 29 04:57:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:10 nativespace-cdp sudo[2760]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 29 04:57:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:10 nativespace-cdp sudo[2765]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 29 04:57:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:15 nativespace-cdp sudo[2831]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 29 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 29 04:57:18 nativespace-cdp sudo[2894]: pam_unix(sudo:session): session closed for user onlycont
Sep 29 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 29 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 29 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 29 04:57:18 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 29 04:57:19 nativespace-cdp sudo[2902]: pam_unix(sudo:session): session closed for user onlycont
Sep 29 04:57:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 29 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 29 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 29 04:57:19 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:57:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 29 04:57:20 nativespace-cdp sudo[2908]: pam_unix(sudo:session): session closed for user onlycont
Sep 29 04:57:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 29 04:57:20 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 29 04:57:20 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 29 04:57:20 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:57:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 29 04:57:22 nativespace-cdp sudo[2918]: pam_unix(sudo:session): session closed for user onlycont
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 29 04:57:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 29 04:57:31 nativespace-cdp sudo[3029]: pam_unix(sudo:session): session closed for user onlycont
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:57:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 29 04:57:31 nativespace-cdp sudo[3035]: pam_unix(sudo:session): session closed for user onlycont
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:57:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 29 04:57:31 nativespace-cdp sudo[3042]: pam_unix(sudo:session): session closed for user onlycont
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 29 04:57:31 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:57:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 29 04:57:31 nativespace-cdp sudo[3048]: pam_unix(sudo:session): session closed for user onlycont
Sep 29 04:57:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 29 04:57:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:34 nativespace-cdp sudo[3084]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 29 04:57:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:34 nativespace-cdp sudo[3090]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 29 04:57:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 04:57:53 nativespace-cdp sudo[3258]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 04:57:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 29 04:57:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:53 nativespace-cdp sudo[3266]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 29 04:57:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:54 nativespace-cdp sudo[3270]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 29 04:57:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:55 nativespace-cdp sudo[3276]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 29 04:57:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:55 nativespace-cdp sudo[3283]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 29 04:57:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:58 nativespace-cdp sudo[3297]: pam_unix(sudo:session): session closed for user root
Sep 29 04:57:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 29 04:57:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:57:58 nativespace-cdp sudo[3303]: pam_unix(sudo:session): session closed for user root
Sep 29 04:58:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 29 04:58:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:58:06 nativespace-cdp sudo[3467]: pam_unix(sudo:session): session closed for user root
Sep 29 04:58:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 29 04:58:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 04:58:09 nativespace-cdp sudo[3526]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 04:58:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 29 04:58:09 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 29 04:58:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 29 04:58:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:58:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 04:58:09 nativespace-cdp sudo[3532]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 04:58:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 29 04:58:09 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 29 04:58:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 29 04:58:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:58:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 04:58:31 nativespace-cdp sudo[3541]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 04:58:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 29 04:58:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 04:58:40 nativespace-cdp sudo[3719]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 04:58:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 29 04:58:40 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 29 04:58:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 29 04:58:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:58:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 04:58:41 nativespace-cdp sudo[3725]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 04:58:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 29 04:58:41 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 29 04:58:41 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 29 04:58:41 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:58:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 04:58:41 nativespace-cdp sudo[3731]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 04:58:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 29 04:58:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:58:43 nativespace-cdp sudo[3777]: pam_unix(sudo:session): session closed for user root
Sep 29 04:58:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 29 04:58:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:58:44 nativespace-cdp sudo[3781]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 29 04:59:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 29 04:59:03 nativespace-cdp sudo[3883]: pam_unix(sudo:session): session closed for user lkpier
Sep 29 04:59:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 29 04:59:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:04 nativespace-cdp sudo[3890]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 29 04:59:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:04 nativespace-cdp sudo[3896]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 29 04:59:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:04 nativespace-cdp sudo[3901]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 29 04:59:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:06 nativespace-cdp sudo[3915]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 29 04:59:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:06 nativespace-cdp sudo[3920]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 29 04:59:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:12 nativespace-cdp sudo[3987]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 29 04:59:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 29 04:59:14 nativespace-cdp sudo[4050]: pam_unix(sudo:session): session closed for user lkpier
Sep 29 04:59:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 29 04:59:14 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 29 04:59:14 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 29 04:59:14 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:59:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 29 04:59:15 nativespace-cdp sudo[4056]: pam_unix(sudo:session): session closed for user lkpier
Sep 29 04:59:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 29 04:59:15 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 29 04:59:15 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 29 04:59:15 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:59:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 29 04:59:27 nativespace-cdp sudo[4064]: pam_unix(sudo:session): session closed for user lkpier
Sep 29 04:59:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 29 04:59:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 29 04:59:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 29 04:59:27 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:59:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 29 04:59:29 nativespace-cdp sudo[4102]: pam_unix(sudo:session): session closed for user lkpier
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 29 04:59:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 29 04:59:35 nativespace-cdp sudo[4217]: pam_unix(sudo:session): session closed for user lkpier
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:59:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 29 04:59:35 nativespace-cdp sudo[4223]: pam_unix(sudo:session): session closed for user lkpier
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:59:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 29 04:59:35 nativespace-cdp sudo[4229]: pam_unix(sudo:session): session closed for user lkpier
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 29 04:59:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 04:59:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 29 04:59:35 nativespace-cdp sudo[4235]: pam_unix(sudo:session): session closed for user lkpier
Sep 29 04:59:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 29 04:59:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:38 nativespace-cdp sudo[4277]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 29 04:59:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:38 nativespace-cdp sudo[4281]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 29 04:59:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:39 nativespace-cdp sudo[4294]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 29 04:59:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:39 nativespace-cdp sudo[4299]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 29 04:59:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 29 04:59:40 nativespace-cdp sudo[4310]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 29 04:59:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 29 04:59:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:40 nativespace-cdp sudo[4316]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 29 04:59:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:41 nativespace-cdp sudo[4321]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 29 04:59:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:41 nativespace-cdp sudo[4325]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 29 04:59:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 04:59:53 nativespace-cdp sudo[4392]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 04:59:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 29 04:59:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:54 nativespace-cdp sudo[4398]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 29 04:59:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:54 nativespace-cdp sudo[4404]: pam_unix(sudo:session): session closed for user root
Sep 29 04:59:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 29 04:59:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 04:59:55 nativespace-cdp sudo[4417]: pam_unix(sudo:session): session closed for user root
Sep 29 05:00:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 29 05:00:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:00:00 nativespace-cdp sudo[4488]: pam_unix(sudo:session): session closed for user root
Sep 29 05:00:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 29 05:00:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 05:00:04 nativespace-cdp sudo[4714]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 05:00:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 29 05:00:04 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 29 05:00:04 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 29 05:00:04 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 05:00:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 05:00:05 nativespace-cdp sudo[4721]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 05:00:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 29 05:00:05 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 29 05:00:05 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 29 05:00:05 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 05:00:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 05:00:19 nativespace-cdp sudo[4732]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 05:00:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 29 05:00:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 05:00:28 nativespace-cdp sudo[4894]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 05:00:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 29 05:00:28 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 29 05:00:28 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 29 05:00:28 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 05:00:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 05:00:28 nativespace-cdp sudo[4900]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 05:00:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 29 05:00:28 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 29 05:00:28 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 29 05:00:28 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 29 05:00:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 05:00:28 nativespace-cdp sudo[4906]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 05:00:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 29 05:00:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:00:31 nativespace-cdp sudo[4955]: pam_unix(sudo:session): session closed for user root
Sep 29 05:00:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 29 05:00:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:00:32 nativespace-cdp sudo[4963]: pam_unix(sudo:session): session closed for user root
Sep 29 05:00:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 29 05:00:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 29 05:00:44 nativespace-cdp sudo[5078]: pam_unix(sudo:session): session closed for user fortunaz
Sep 29 05:00:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 29 05:00:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:00:45 nativespace-cdp sudo[5084]: pam_unix(sudo:session): session closed for user root
Sep 29 05:00:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 29 05:00:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:00:45 nativespace-cdp sudo[5092]: pam_unix(sudo:session): session closed for user root
Sep 29 05:00:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 29 05:00:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:00:45 nativespace-cdp sudo[5096]: pam_unix(sudo:session): session closed for user root
Sep 29 05:00:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 29 05:00:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:00:48 nativespace-cdp sudo[5122]: pam_unix(sudo:session): session closed for user root
Sep 29 05:00:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 29 05:00:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:00:48 nativespace-cdp sudo[5131]: pam_unix(sudo:session): session closed for user root
Sep 29 05:00:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 29 05:00:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:00:53 nativespace-cdp sudo[5202]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=hubmaster WpToolkitNotification send_admin_auto_updates_notification available_updates_text= available_updates_list= installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 29 05:01:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:06 nativespace-cdp sudo[5412]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 29 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:16 nativespace-cdp sudo[5561]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 29 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:16 nativespace-cdp sudo[5564]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 29 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:16 nativespace-cdp sudo[5567]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 29 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:16 nativespace-cdp sudo[5570]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5573]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5577]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5580]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5583]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5586]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5589]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5592]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5595]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5599]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5602]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5605]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5608]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5611]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5615]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5618]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5621]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5624]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5627]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5630]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5633]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:17 nativespace-cdp sudo[5636]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5639]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5642]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5645]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5648]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5651]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5654]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5657]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5660]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5663]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5666]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5669]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5672]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5676]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5679]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5683]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5686]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5689]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5692]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5695]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5698]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5701]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5704]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5707]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5710]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5713]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5716]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5719]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:18 nativespace-cdp sudo[5722]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5725]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5728]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5731]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5734]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5737]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5741]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5744]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5747]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5751]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5754]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5757]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5761]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5764]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5767]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5770]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5773]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5776]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5779]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5782]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5785]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5788]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5791]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5794]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5797]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5800]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:19 nativespace-cdp sudo[5803]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5807]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5810]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5813]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5816]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5819]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5822]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5825]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5828]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5831]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5834]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5837]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5840]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5844]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5847]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5850]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5853]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5857]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5860]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5863]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5866]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5869]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5872]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5875]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5878]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5881]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5884]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 29 05:01:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:20 nativespace-cdp sudo[5887]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5890]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5893]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5896]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5899]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5903]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5906]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5909]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5913]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5917]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5920]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5923]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5926]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5930]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5933]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5936]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5939]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5942]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5945]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5948]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5951]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5954]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5957]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5960]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5963]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5966]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5969]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5972]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:21 nativespace-cdp sudo[5975]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[5978]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[5981]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[5984]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[5988]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[5991]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[5994]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[5997]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6000]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6003]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6006]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6009]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6012]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6015]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6018]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6022]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6025]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6028]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6031]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6034]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6037]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6040]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6044]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6047]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6050]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6053]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6056]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6059]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6062]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:22 nativespace-cdp sudo[6065]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6068]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6071]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6074]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6077]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6080]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6083]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6086]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6089]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6092]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6096]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6099]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6102]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6105]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6108]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6112]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6115]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6118]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6121]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6124]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6127]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6130]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6133]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6136]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6139]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6142]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6145]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6148]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:23 nativespace-cdp sudo[6151]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6154]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6158]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6161]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6164]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6167]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6170]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6173]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6176]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6179]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6182]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6185]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6188]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6191]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6194]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6197]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6201]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6204]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6207]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6210]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6213]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6216]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6219]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6222]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6225]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6228]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6231]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6234]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6238]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 29 05:01:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:24 nativespace-cdp sudo[6241]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 29 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:25 nativespace-cdp sudo[6244]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 29 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:25 nativespace-cdp sudo[6247]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 29 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:25 nativespace-cdp sudo[6250]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 29 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:25 nativespace-cdp sudo[6253]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 29 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:25 nativespace-cdp sudo[6256]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/design/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:25 nativespace-cdp sudo[6259]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/aberdeen-guesthouses.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:25 nativespace-cdp sudo[6262]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/aberdeen-guesthouses.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:25 nativespace-cdp sudo[6265]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/accooper/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:26 nativespace-cdp sudo[6268]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/agproduc/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:26 nativespace-cdp sudo[6272]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/altrincham -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:26 nativespace-cdp sudo[6275]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-content
Sep 29 05:01:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:26 nativespace-cdp sudo[6278]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-config.php
Sep 29 05:01:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:26 nativespace-cdp sudo[6281]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/.wp-toolkit-ignore
Sep 29 05:01:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:26 nativespace-cdp sudo[6284]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/amarawetherall.me.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:26 nativespace-cdp sudo[6287]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/amarawetherall.me.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:26 nativespace-cdp sudo[6290]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/amcalenan -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6293]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-content
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6303]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-config.php
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6306]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/.wp-toolkit-ignore
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6309]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/amcalenan -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6312]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-content
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6315]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-config.php
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6318]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/.wp-toolkit-ignore
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6321]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/thqkgnbz/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6324]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/thqkgnbz/public_html/testwp/wp-content
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6333]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/thqkgnbz/public_html/testwp/wp-config.php
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6336]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/thqkgnbz/public_html/testwp/.wp-toolkit-ignore
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6339]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/sinclairmanagement -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:29 nativespace-cdp sudo[6342]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/onlycont/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:33 nativespace-cdp sshd[6357]: Connection closed by 159.100.136.21 port 42298 [preauth]
Sep 29 05:01:47 nativespace-cdp sudo[6345]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/onlycont/public_html/wp/wp-content
Sep 29 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:47 nativespace-cdp sudo[6390]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/onlycont/public_html/wp/wp-config.php
Sep 29 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:47 nativespace-cdp sudo[6393]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/onlycont/public_html/wp/.wp-toolkit-ignore
Sep 29 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:47 nativespace-cdp sudo[6396]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/asandcoc/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6399]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/asandcoc/public_html/blog/wp-content
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6402]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/asandcoc/public_html/blog/wp-config.php
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6406]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/asandcoc/public_html/blog/.wp-toolkit-ignore
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6409]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/askhform/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6412]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6415]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/athenars.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6419]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/athenars.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6422]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/attlebor/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6425]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/auchendennanltd.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6428]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/auchendennanltd.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6431]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/backinawhile -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6434]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/backinawhile -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:48 nativespace-cdp sudo[6438]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/opaiscyx/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:49 nativespace-cdp sudo[6441]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bwppodcast/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:53 nativespace-cdp sudo[6447]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/bargeton.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:53 nativespace-cdp sudo[6457]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/bargeton.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:53 nativespace-cdp sudo[6460]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/battlere/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:54 nativespace-cdp sudo[6463]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/battlere/public_html/home/wp-content
Sep 29 05:01:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:54 nativespace-cdp sudo[6467]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/battlere/public_html/home/wp-config.php
Sep 29 05:01:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:54 nativespace-cdp sudo[6470]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/battlere/public_html/home/.wp-toolkit-ignore
Sep 29 05:01:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:54 nativespace-cdp sudo[6473]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bedfords/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:54 nativespace-cdp sudo[6476]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/bedfords/public_html/wp-content
Sep 29 05:01:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:54 nativespace-cdp sudo[6481]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/bedfords/public_html/wp-config.php
Sep 29 05:01:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:54 nativespace-cdp sudo[6484]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/bedfords/public_html/.wp-toolkit-ignore
Sep 29 05:01:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:54 nativespace-cdp sudo[6487]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/belle/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:55 nativespace-cdp sudo[6490]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bemadonn/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:01:55 nativespace-cdp sudo[6493]: pam_unix(sudo:session): session closed for user root
Sep 29 05:01:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/bhlabour.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:01:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6496]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-content
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6511]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-config.php
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6515]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/../wp-config.php
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6518]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-content
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6522]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-config.php
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6525]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/../wp-config.php
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6528]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6531]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-config.php
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6534]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/.wp-toolkit-ignore
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6537]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/bhlabour.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6540]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-content
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6543]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/wp-config.php
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6546]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wordpress/../wp-config.php
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6549]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-content
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6552]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/wp-config.php
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6556]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content/cache/tw_optimize/page_cache/www.bhlabour.org.uk/../wp-config.php
Sep 29 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:00 nativespace-cdp sudo[6559]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-content
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6562]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/wp-config.php
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6565]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/brighto1/bhlabour.org.uk/.wp-toolkit-ignore
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6568]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/birmingham -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6572]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-content
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6575]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-config.php
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6578]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/.wp-toolkit-ignore
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6581]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/blackburn -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6584]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-content
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6588]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-config.php
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6591]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/.wp-toolkit-ignore
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6604]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/BattleofBritain -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6609]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldover-graphic-design.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6612]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6616]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 29 05:02:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:01 nativespace-cdp sudo[6619]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6622]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldover-graphic-design.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6625]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6629]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6633]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6636]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6639]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-content
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6645]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-config.php
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6648]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/.wp-toolkit-ignore
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6651]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6654]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6657]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6660]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldver.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6663]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/boldver.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:02 nativespace-cdp sudo[6666]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/bolton -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6669]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-content
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6672]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-config.php
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6675]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/.wp-toolkit-ignore
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6678]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/booff/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6681]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bramptonabbotts.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6684]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bramptonabbotts.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6688]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bridstow-school.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6691]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/bridstow-school.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6694]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6698]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brmrjxl/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6701]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/burnley -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:03 nativespace-cdp sudo[6704]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-content
Sep 29 05:02:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6707]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-config.php
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6710]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/.wp-toolkit-ignore
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6713]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/burtonupontrent -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6716]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-content
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6719]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-config.php
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6722]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/.wp-toolkit-ignore
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6725]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/bury -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6728]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-content
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6731]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-config.php
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6734]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/.wp-toolkit-ignore
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6737]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/burydropin/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6740]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cambria1/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6743]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/cambridge -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6747]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/candidacanbefun.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6750]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/candidacanbefun.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6754]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/crete/wordpress -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6757]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/crete/wordpress -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6760]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/catherinejonesart.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6763]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/catherinejonesart.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:04 nativespace-cdp sudo[6766]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6769]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6772]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6775]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/chale-bay-farm.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6778]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channel-capital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6781]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channel-capital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6784]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6787]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6790]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channelcapital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6793]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nvihkvu/public_html/channelcapital.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6796]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/chorley -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6799]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-content
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6802]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-config.php
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6805]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/.wp-toolkit-ignore
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6809]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/chorleyhandyman.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6812]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/chorleyhandyman.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:05 nativespace-cdp sudo[6815]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6818]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6821]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6824]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6827]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/christchurchfod.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6830]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/christchurchfod.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6833]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/churchdownclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6836]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/churchdownclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6839]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownmvc.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6842]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownmvc.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6845]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownvillagebowls.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6848]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/churchdownvillagebowls.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6851]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/clark.associates -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6854]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/clark.associates -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:06 nativespace-cdp sudo[6858]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:07 nativespace-cdp sudo[6861]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:07 nativespace-cdp sudo[6865]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/clerks -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:07 nativespace-cdp sudo[6868]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/cmvc.skyfire-designs.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:07 nativespace-cdp sudo[6871]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/code/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:07 nativespace-cdp sudo[6874]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/colingrieve.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:07 nativespace-cdp sudo[6877]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/colingrieve.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:07 nativespace-cdp sudo[6881]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/connect9/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:07 nativespace-cdp sudo[6885]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/www.coriniumcapital.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:07 nativespace-cdp sudo[6888]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/www.coriniumcapital.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:07 nativespace-cdp sudo[6891]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/costestimatorco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:12 nativespace-cdp sudo[6894]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/costestimatorco/public_html/wp-content
Sep 29 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:12 nativespace-cdp sudo[6907]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/costestimatorco/public_html/wp-config.php
Sep 29 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:12 nativespace-cdp sudo[6910]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/costestimatorco/public_html/.wp-toolkit-ignore
Sep 29 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:12 nativespace-cdp sudo[6913]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oubpgvbx/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:13 nativespace-cdp sudo[6916]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/coventry -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:14 nativespace-cdp sudo[6922]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-content
Sep 29 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:14 nativespace-cdp sudo[6925]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-config.php
Sep 29 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:14 nativespace-cdp sudo[6929]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/.wp-toolkit-ignore
Sep 29 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:14 nativespace-cdp sudo[6932]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ctedorgu/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:15 nativespace-cdp sudo[6935]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/cvs.media -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:15 nativespace-cdp sudo[6940]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/cvs.media -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:15 nativespace-cdp sudo[6943]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cwsocial/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:20 nativespace-cdp sudo[6946]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-content
Sep 29 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:20 nativespace-cdp sudo[6962]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-config.php
Sep 29 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:20 nativespace-cdp sudo[6966]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/.wp-toolkit-ignore
Sep 29 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:20 nativespace-cdp sudo[6970]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cwsocial/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:20 nativespace-cdp sudo[6973]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-content
Sep 29 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:20 nativespace-cdp sudo[6976]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/wp-config.php
Sep 29 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:20 nativespace-cdp sudo[6979]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/cwsocial/public_html/.wp-toolkit-ignore
Sep 29 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:20 nativespace-cdp sudo[6982]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dancinggardener/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[6985]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dancinggardener/public_html/wp-content
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[6989]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dancinggardener/public_html/wp-config.php
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[6992]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dancinggardener/public_html/.wp-toolkit-ignore
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[6995]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/darkstar/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[6998]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ddlc.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[7001]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ddlc.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[7004]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/derby -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[7007]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-content
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[7010]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-config.php
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[7013]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/.wp-toolkit-ignore
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:21 nativespace-cdp sudo[7016]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/dev.boldover.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:22 nativespace-cdp sudo[7019]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/dev.boldover.co.uk/wp-content
Sep 29 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:22 nativespace-cdp sudo[7025]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/dev.boldover.co.uk/wp-config.php
Sep 29 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:22 nativespace-cdp sudo[7028]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/dev.boldover.co.uk/.wp-toolkit-ignore
Sep 29 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:22 nativespace-cdp sudo[7031]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/brighto1/dev.brightonhovelabour.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:22 nativespace-cdp sudo[7034]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/devdev -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:22 nativespace-cdp sudo[7037]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/Devon_2012 -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:22 nativespace-cdp sudo[7040]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dhyana/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:22 nativespace-cdp sudo[7043]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dhyana/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:22 nativespace-cdp sudo[7046]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/dickemery123/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7049]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dickemery123/public_html/wp/wp-content
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7053]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dickemery123/public_html/wp/wp-config.php
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7056]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/dickemery123/public_html/wp/.wp-toolkit-ignore
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7059]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/disfigurines -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7062]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/disfigurines -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7065]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7068]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7071]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7074]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7077]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7080]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7083]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7086]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7089]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/dogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7092]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/dogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7095]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/beauty/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:23 nativespace-cdp sudo[7098]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/carsinyo/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:24 nativespace-cdp sudo[7101]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/wp-content
Sep 29 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:24 nativespace-cdp sudo[7106]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/wp-config.php
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7109]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/../wp-config.php
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7112]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/clean/../wp-includes
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7115]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-content
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7118]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-config.php
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7121]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/.wp-toolkit-ignore
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7124]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wp-content
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7127]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wp-config.php
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7130]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/.wp-toolkit-ignore
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7133]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/donnychicago/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7136]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/drutopia.co -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7139]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/drybrookband.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7143]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/drybrookband.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7146]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/drybrookband.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7149]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/drybrookband.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7152]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/dudley -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7155]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-content
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7158]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-config.php
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7161]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/.wp-toolkit-ignore
Sep 29 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:25 nativespace-cdp sudo[7164]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/eacha.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:27 nativespace-cdp sudo[7167]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/eacha.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:27 nativespace-cdp sudo[7171]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/eacha.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:27 nativespace-cdp sudo[7175]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/eatspam/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:27 nativespace-cdp sudo[7178]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cathski/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:27 nativespace-cdp sudo[7182]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/eugincou/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:27 nativespace-cdp sudo[7186]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/fallgame.info -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:27 nativespace-cdp sudo[7189]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/fancydresspiratecostumes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:27 nativespace-cdp sudo[7193]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fawcettd/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:27 nativespace-cdp sudo[7196]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/fellowshipofkilmarnockchurches.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:28 nativespace-cdp sudo[7200]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/fellowshipofkilmarnockchurches.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:28 nativespace-cdp sudo[7203]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fetch/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:28 nativespace-cdp sudo[7207]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7210]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-content
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7223]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/wp-config.php
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7226]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/altrincham/.wp-toolkit-ignore
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7229]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-content
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7232]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/wp-config.php
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7235]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/birmingham/.wp-toolkit-ignore
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7238]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-content
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7241]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/wp-config.php
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7245]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/blackburn/.wp-toolkit-ignore
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7248]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-content
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7251]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/wp-config.php
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7254]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bolton/.wp-toolkit-ignore
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7257]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-content
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7260]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/wp-config.php
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7263]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burnley/.wp-toolkit-ignore
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7266]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-content
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7269]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/wp-config.php
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7272]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/burtonupontrent/.wp-toolkit-ignore
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7275]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-content
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7278]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/wp-config.php
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7281]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/bury/.wp-toolkit-ignore
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7284]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-content
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7287]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/wp-config.php
Sep 29 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:32 nativespace-cdp sudo[7290]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/chorley/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7293]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-content
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7296]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/wp-config.php
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7299]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/coventry/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7302]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-content
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7305]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/wp-config.php
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7309]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/derby/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7314]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-content
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7317]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/wp-config.php
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7320]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/dudley/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7323]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-content
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7326]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-config.php
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7330]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7333]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-content
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7336]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-config.php
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7339]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7342]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-content
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7347]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-config.php
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7350]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7354]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-content
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7357]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-config.php
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7360]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7364]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-content
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7367]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-config.php
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7370]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7373]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-content
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7376]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-config.php
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7379]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7383]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-content
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7386]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-config.php
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7389]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/.wp-toolkit-ignore
Sep 29 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:33 nativespace-cdp sudo[7392]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-content
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7395]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-config.php
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7398]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/.wp-toolkit-ignore
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7401]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-content
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7404]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-config.php
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7407]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/.wp-toolkit-ignore
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7410]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-content
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7414]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-config.php
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7417]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/.wp-toolkit-ignore
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7420]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-content
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7423]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-config.php
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7426]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/.wp-toolkit-ignore
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7429]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-content
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7432]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-config.php
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7435]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/.wp-toolkit-ignore
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7438]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-content
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7441]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-config.php
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7444]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/.wp-toolkit-ignore
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7448]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-content
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7451]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-config.php
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7454]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/.wp-toolkit-ignore
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7457]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-content
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7460]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-config.php
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7464]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/.wp-toolkit-ignore
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7467]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-content
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7470]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-config.php
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7473]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/.wp-toolkit-ignore
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7477]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-content
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7480]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-config.php
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7483]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/.wp-toolkit-ignore
Sep 29 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:34 nativespace-cdp sudo[7486]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-content
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7489]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-config.php
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7492]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/.wp-toolkit-ignore
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7495]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-content
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7498]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-config.php
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7501]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/.wp-toolkit-ignore
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7504]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-content
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7508]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-config.php
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7511]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/.wp-toolkit-ignore
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7514]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-content
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7517]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-config.php
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7520]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/.wp-toolkit-ignore
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7523]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-content
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7526]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-config.php
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7529]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/.wp-toolkit-ignore
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7532]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-content
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7535]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-config.php
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7538]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/.wp-toolkit-ignore
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7541]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-content
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7544]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-config.php
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7547]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/.wp-toolkit-ignore
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7550]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-content
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7553]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-config.php
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7556]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/.wp-toolkit-ignore
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7559]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-content
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7562]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-config.php
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7565]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/.wp-toolkit-ignore
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7568]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-content
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7571]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-config.php
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7574]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/.wp-toolkit-ignore
Sep 29 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:35 nativespace-cdp sudo[7577]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-content
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7580]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-config.php
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7583]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/.wp-toolkit-ignore
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7586]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-content
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7589]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-config.php
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7592]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/.wp-toolkit-ignore
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7595]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-content
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7599]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-config.php
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7602]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/.wp-toolkit-ignore
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7605]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-content
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7608]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-config.php
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7611]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/.wp-toolkit-ignore
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7614]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-content
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7617]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-config.php
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7620]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/.wp-toolkit-ignore
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7623]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-content
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7626]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-config.php
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7629]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/.wp-toolkit-ignore
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7632]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-content
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7635]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-config.php
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7638]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/.wp-toolkit-ignore
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7641]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-content
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7644]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-config.php
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7647]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/.wp-toolkit-ignore
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7650]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-content
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7653]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-config.php
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7656]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/.wp-toolkit-ignore
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7659]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wp-content
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7662]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wp-config.php
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7665]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/.wp-toolkit-ignore
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:36 nativespace-cdp sudo[7668]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstred/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7671]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstres/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7675]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstres/public_html/wp-content
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7680]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstres/public_html/wp-config.php
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7683]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstres/public_html/.wp-toolkit-ignore
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7686]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstrel/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7689]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre2/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7692]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre2/public_html/wp-content
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7695]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre2/public_html/wp-config.php
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7698]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre2/public_html/.wp-toolkit-ignore
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7701]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/fletcherjackson.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7704]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/fletcherjackson -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7707]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/fletcherjackson.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:37 nativespace-cdp sudo[7710]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7713]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-content
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7716]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/wp-config.php
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7719]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/blog/.wp-toolkit-ignore
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7722]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-content
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7725]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/wp-config.php
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7728]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/boldover/public_html/boldover-graphic-design.co.uk/.wp-toolkit-ignore
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7731]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestedgebenefice.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7734]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestedgebenefice.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7737]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestrc.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7741]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/forestrc.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7744]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/cath/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:38 nativespace-cdp sudo[7747]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:41 nativespace-cdp sudo[7750]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-content
Sep 29 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:41 nativespace-cdp sudo[7758]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-config.php
Sep 29 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:41 nativespace-cdp sudo[7762]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/.wp-toolkit-ignore
Sep 29 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:41 nativespace-cdp sudo[7765]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:41 nativespace-cdp sudo[7768]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-content
Sep 29 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:41 nativespace-cdp sudo[7771]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/wp-config.php
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7774]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/public_html/.wp-toolkit-ignore
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7778]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/gainford-inventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7781]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/gainford-inventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7786]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/getgotdelivered.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7790]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/getgotdelivered.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7793]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7797]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/asandcoc/public_html/global -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7800]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/grantham -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7803]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-content
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7806]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/wp-config.php
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7809]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/grantham/.wp-toolkit-ignore
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7812]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/graydimensions.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7815]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/graydimensions.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7818]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/halfanedit -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7821]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/halifax -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7824]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-content
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7828]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/wp-config.php
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7831]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/halifax/.wp-toolkit-ignore
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7834]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/harryclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7837]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/harryclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:42 nativespace-cdp sudo[7840]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/havantho/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:43 nativespace-cdp sudo[7843]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/health2045/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:44 nativespace-cdp sudo[7847]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/health2045/public_html/wp-content
Sep 29 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:44 nativespace-cdp sudo[7854]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/health2045/public_html/wp-config.php
Sep 29 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:44 nativespace-cdp sudo[7857]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/health2045/public_html/.wp-toolkit-ignore
Sep 29 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:44 nativespace-cdp sudo[7862]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/hellositex -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:44 nativespace-cdp sudo[7865]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/home/ranxterc/websites/hellositex -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:44 nativespace-cdp sudo[7868]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/help -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:44 nativespace-cdp sudo[7871]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/highlegh/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:56 nativespace-cdp sudo[7874]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hirefootballgame/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:56 nativespace-cdp sudo[8007]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hodgsonmail/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8010]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/homebuyinghelp.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8013]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/homebuyinghelp.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8017]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html/homovision -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8020]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-content
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8023]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-config.php
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8026]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/.wp-toolkit-ignore
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8029]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/howardon/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8033]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/huddersfield -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8036]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-content
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8039]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/wp-config.php
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8042]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/huddersfield/.wp-toolkit-ignore
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:57 nativespace-cdp sudo[8045]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/hyperchro.me -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:58 nativespace-cdp sudo[8049]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-content
Sep 29 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:58 nativespace-cdp sudo[8054]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-config.php
Sep 29 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:58 nativespace-cdp sudo[8058]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/.wp-toolkit-ignore
Sep 29 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:58 nativespace-cdp sudo[8061]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/hyperchrome -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:58 nativespace-cdp sudo[8064]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ianrayne/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:58 nativespace-cdp sudo[8067]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/images -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:58 nativespace-cdp sudo[8070]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/impactconsultancy.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:58 nativespace-cdp sudo[8073]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/impactconsultancy.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:58 nativespace-cdp sudo[8076]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/innovat1/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:59 nativespace-cdp sudo[8079]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/innovat1/public_html/www -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:59 nativespace-cdp sudo[8084]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/innovat1/public_html/www -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:02:59 nativespace-cdp sudo[8087]: pam_unix(sudo:session): session closed for user root
Sep 29 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:06 nativespace-cdp sudo[8090]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8121]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8124]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8127]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8131]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8134]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8137]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8140]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8146]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8149]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8152]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8155]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8158]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:07 nativespace-cdp sudo[8161]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8164]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8168]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8171]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8174]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8177]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8180]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8183]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/inventory-pro.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8186]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/inventory-pro.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8189]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/ipadinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8192]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/ipadinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8195]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8198]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:08 nativespace-cdp sudo[8202]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:03:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:09 nativespace-cdp sudo[8205]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:09 nativespace-cdp sudo[8208]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:09 nativespace-cdp sudo[8212]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:09 nativespace-cdp sudo[8216]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:09 nativespace-cdp sudo[8219]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/irvinekilmarnockpresbytery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:10 nativespace-cdp sudo[8222]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/irvinekilmarnockpresbytery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:10 nativespace-cdp sudo[8227]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/isleofwi/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:11 nativespace-cdp sudo[8230]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/isleofwi/public_html/wp-content
Sep 29 05:03:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:11 nativespace-cdp sudo[8234]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/isleofwi/public_html/wp-config.php
Sep 29 05:03:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:11 nativespace-cdp sudo[8237]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/isleofwi/public_html/.wp-toolkit-ignore
Sep 29 05:03:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:11 nativespace-cdp sudo[8240]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/isleofwightguesthouse.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:11 nativespace-cdp sudo[8243]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/isleofwightguesthouse.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:11 nativespace-cdp sudo[8246]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:11 nativespace-cdp sudo[8249]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:11 nativespace-cdp sudo[8252]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/jarvisin/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:11 nativespace-cdp sudo[8255]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/jennimil/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:12 nativespace-cdp sudo[8258]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jennimil/public_html/wp-content
Sep 29 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:12 nativespace-cdp sudo[8263]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jennimil/public_html/wp-config.php
Sep 29 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:12 nativespace-cdp sudo[8266]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jennimil/public_html/.wp-toolkit-ignore
Sep 29 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:12 nativespace-cdp sudo[8269]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/gilpin/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:12 nativespace-cdp sudo[8272]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/jlive.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:12 nativespace-cdp sudo[8275]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/jlive.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:12 nativespace-cdp sudo[8278]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/jonhartl/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:13 nativespace-cdp sudo[8281]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jonhartl/public_html/wp-content
Sep 29 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:13 nativespace-cdp sudo[8284]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jonhartl/public_html/wp-config.php
Sep 29 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:13 nativespace-cdp sudo[8287]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/jonhartl/public_html/../wp-config.php
Sep 29 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:13 nativespace-cdp sudo[8290]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/joomla -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:13 nativespace-cdp sudo[8294]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bemadonn/public_html/justbengals.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:13 nativespace-cdp sudo[8297]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bemadonn/public_html/justbengals.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:13 nativespace-cdp sudo[8300]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/kategilpin/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:14 nativespace-cdp sudo[8303]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/katieclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:14 nativespace-cdp sudo[8311]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/katieclark.me.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:14 nativespace-cdp sudo[8314]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/kess2012.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:15 nativespace-cdp sudo[8317]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/kess2012.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:15 nativespace-cdp sudo[8321]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/kidderminster -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:15 nativespace-cdp sudo[8324]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-content
Sep 29 05:03:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:15 nativespace-cdp sudo[8327]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/wp-config.php
Sep 29 05:03:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:15 nativespace-cdp sudo[8330]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/kidderminster/.wp-toolkit-ignore
Sep 29 05:03:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:15 nativespace-cdp sudo[8333]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/seftvta/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:16 nativespace-cdp sudo[8336]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/Koro -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:16 nativespace-cdp sudo[8342]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ladburyp/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8345]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/old/wp-content
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8353]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/old/wp-config.php
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8356]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/old/.wp-toolkit-ignore
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8359]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/wp-content
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8362]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/wp-config.php
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8365]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/old_site/.wp-toolkit-ignore
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8368]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/wp-content
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8371]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/wp-config.php
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8374]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ladburyp/public_html/.wp-toolkit-ignore
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8377]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lakesan1/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8380]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbscrmod/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:18 nativespace-cdp sudo[8385]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:19 nativespace-cdp sudo[8388]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ledburyfoodbank.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:19 nativespace-cdp sudo[8391]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ledburyfoodbank.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:19 nativespace-cdp sudo[8394]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/leereyn1/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:19 nativespace-cdp sudo[8397]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:21 nativespace-cdp sudo[8400]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 29 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:21 nativespace-cdp sudo[8407]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 29 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:21 nativespace-cdp sudo[8410]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 29 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:21 nativespace-cdp sudo[8413]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:21 nativespace-cdp sudo[8416]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 29 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:21 nativespace-cdp sudo[8419]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 29 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:21 nativespace-cdp sudo[8422]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 29 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:21 nativespace-cdp sudo[8425]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8428]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8431]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8434]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8438]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8442]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8445]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8448]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8451]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8454]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8457]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8460]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8463]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/legorobotclub.co.ukPHP7 -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8466]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-content
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8469]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/wp-config.php
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8472]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/legorobotclub.co.ukPHP7/.wp-toolkit-ignore
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:22 nativespace-cdp sudo[8475]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/legotest -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:24 nativespace-cdp sudo[8478]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legotest/wp-content
Sep 29 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:24 nativespace-cdp sudo[8484]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legotest/wp-config.php
Sep 29 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:24 nativespace-cdp sudo[8487]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legotest/.wp-toolkit-ignore
Sep 29 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:24 nativespace-cdp sudo[8490]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/leicester -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:24 nativespace-cdp sudo[8493]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-content
Sep 29 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:24 nativespace-cdp sudo[8496]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/wp-config.php
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8499]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leicester/.wp-toolkit-ignore
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8502]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/leigh -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8505]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-content
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8508]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/wp-config.php
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8511]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leigh/.wp-toolkit-ignore
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8514]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/leyland -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8517]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-content
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8520]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/wp-config.php
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8523]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/leyland/.wp-toolkit-ignore
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8526]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/lichfield -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8529]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-content
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8532]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/wp-config.php
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8535]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/lichfield/.wp-toolkit-ignore
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:25 nativespace-cdp sudo[8539]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lkpier/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8542]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lkpier/public_html/wp-content
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8545]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lkpier/public_html/wp-config.php
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8548]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lkpier/public_html/.wp-toolkit-ignore
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8551]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oubpgvbx/public_html/link -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8554]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/live -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8557]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-services.co.uk/live -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8560]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeinventories.co.uk/live -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8563]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8567]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8570]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8573]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/lochard.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:26 nativespace-cdp sudo[8576]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:27 nativespace-cdp sudo[8579]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-content
Sep 29 05:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:27 nativespace-cdp sudo[8583]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-config.php
Sep 29 05:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:27 nativespace-cdp sudo[8586]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/.wp-toolkit-ignore
Sep 29 05:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:27 nativespace-cdp sudo[8590]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:27 nativespace-cdp sudo[8593]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-content
Sep 29 05:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:27 nativespace-cdp sudo[8596]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/wp-config.php
Sep 29 05:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:27 nativespace-cdp sudo[8599]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/longbridgedeverillflowershow.co.uk/public_html/.wp-toolkit-ignore
Sep 29 05:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:27 nativespace-cdp sudo[8602]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/loudounchurch.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:31 nativespace-cdp sudo[8605]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html/loudounchurch.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:31 nativespace-cdp sudo[8630]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/loughborough -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:31 nativespace-cdp sudo[8633]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-content
Sep 29 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:31 nativespace-cdp sudo[8636]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/wp-config.php
Sep 29 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:31 nativespace-cdp sudo[8639]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/loughborough/.wp-toolkit-ignore
Sep 29 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:31 nativespace-cdp sudo[8642]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/legorobotclub/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:32 nativespace-cdp sudo[8645]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-content
Sep 29 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:32 nativespace-cdp sudo[8650]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-config.php
Sep 29 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:32 nativespace-cdp sudo[8653]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/.wp-toolkit-ignore
Sep 29 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:32 nativespace-cdp sudo[8656]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/macclesfield -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:32 nativespace-cdp sudo[8659]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-content
Sep 29 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:32 nativespace-cdp sudo[8662]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/wp-config.php
Sep 29 05:03:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:32 nativespace-cdp sudo[8665]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/macclesfield/.wp-toolkit-ignore
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8668]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/maflemin/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8671]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/magichat/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8674]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/manchester -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8677]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-content
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8681]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/wp-config.php
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8684]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/manchester/.wp-toolkit-ignore
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8687]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/mansfield -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8690]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-content
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8693]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/wp-config.php
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8696]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/mansfield/.wp-toolkit-ignore
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8699]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/david/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8702]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/markward/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8705]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/martsblo/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:33 nativespace-cdp sudo[8708]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8711]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-content
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8715]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/wp-config.php
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8718]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision/.wp-toolkit-ignore
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8721]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/wp-content
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8724]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/wp-config.php
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8727]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/../wp-config.php
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8730]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/homovision_bak/../wp-includes
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8733]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/wp-content
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8736]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/wp-config.php
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8739]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/../wp-config.php
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8742]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sam/../wp-includes
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8745]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/samco/wp-content
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8748]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/samco/wp-config.php
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8751]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/samco/.wp-toolkit-ignore
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8754]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-content
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8757]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-config.php
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8760]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/.wp-toolkit-ignore
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8763]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/wp-content
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8766]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/wp-config.php
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8769]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/.wp-toolkit-ignore
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:34 nativespace-cdp sudo[8772]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/mcleanforth.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8775]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/mcleanforth.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8778]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/media/mediapeople.tv -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8781]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/megacards/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8784]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/middleeast-training.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8787]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/middleeast-training.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8791]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/midlands -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8794]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-content
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8797]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/wp-config.php
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8800]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/midlands/.wp-toolkit-ignore
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8803]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8806]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-content
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8809]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/wp-config.php
Sep 29 05:03:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:35 nativespace-cdp sudo[8812]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/hyperchro.me/dev/wordpress/.wp-toolkit-ignore
Sep 29 05:03:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:36 nativespace-cdp sudo[8815]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-content
Sep 29 05:03:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:36 nativespace-cdp sudo[8818]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-config.php
Sep 29 05:03:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:36 nativespace-cdp sudo[8821]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/.wp-toolkit-ignore
Sep 29 05:03:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:36 nativespace-cdp sudo[8824]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/missfoxglove.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:36 nativespace-cdp sudo[8827]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:36 nativespace-cdp sudo[8830]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:41 nativespace-cdp sudo[8833]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/mod2 -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:41 nativespace-cdp sudo[8850]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:41 nativespace-cdp sudo[8854]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/modelsofdiversity.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:41 nativespace-cdp sudo[8857]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/mod2 -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:41 nativespace-cdp sudo[8860]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/monmouthmt.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:42 nativespace-cdp sudo[8863]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/monmouthmt.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:42 nativespace-cdp sudo[8866]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/stagingerris/public_html/montel.stagingerris.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:42 nativespace-cdp sudo[8869]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/moonmousecreative.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:42 nativespace-cdp sudo[8873]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html/moonmousecreative.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:42 nativespace-cdp sudo[8877]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/moraycoastescapes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:42 nativespace-cdp sudo[8880]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/moraycoastescapes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:42 nativespace-cdp sudo[8883]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/jalbum/jeremy/public_html/MP40 -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:42 nativespace-cdp sudo[8886]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/muchbirchparish.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:42 nativespace-cdp sudo[8889]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/muchbirchparish.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:42 nativespace-cdp sudo[8892]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/musorguk/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:45 nativespace-cdp sudo[8896]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/musorguk/public_html/teapot/wp-content
Sep 29 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:45 nativespace-cdp sudo[8904]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/musorguk/public_html/teapot/wp-config.php
Sep 29 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:45 nativespace-cdp sudo[8908]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/musorguk/public_html/teapot/.wp-toolkit-ignore
Sep 29 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:45 nativespace-cdp sudo[8910]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/my -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:45 nativespace-cdp sudo[8915]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nativene/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:45 nativespace-cdp sudo[8918]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nstriton/public_html/nativespace-triton.ns-triton.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:45 nativespace-cdp sudo[8921]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nbhavers/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:50 nativespace-cdp sudo[8924]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/ndpwesthampstead.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:50 nativespace-cdp sudo[8937]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/ndpwesthampstead.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:50 nativespace-cdp sudo[8940]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/newnhamstpetersschool.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:50 nativespace-cdp sudo[8944]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/newnhamstpetersschool.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:50 nativespace-cdp sudo[8947]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/newstoda/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:52 nativespace-cdp sudo[8950]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/newstoda/public_html/wp-content
Sep 29 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:52 nativespace-cdp sudo[8956]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/newstoda/public_html/wp-config.php
Sep 29 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:52 nativespace-cdp sudo[8959]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/newstoda/public_html/.wp-toolkit-ignore
Sep 29 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:52 nativespace-cdp sudo[8963]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ninejimm/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:53 nativespace-cdp sudo[8966]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ninejimm/public_html/wordpress/wp-content
Sep 29 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:53 nativespace-cdp sudo[8970]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ninejimm/public_html/wordpress/wp-config.php
Sep 29 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:53 nativespace-cdp sudo[8973]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ninejimm/public_html/wordpress/.wp-toolkit-ignore
Sep 29 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:53 nativespace-cdp sudo[8976]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nomistakes/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[8979]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/northshoresoftware.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[8986]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/northshoresoftware.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[8989]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/northwest -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[8992]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-content
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[8995]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/wp-config.php
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[8998]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/northwest/.wp-toolkit-ignore
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[9001]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/nottingham -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[9004]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-content
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[9007]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/wp-config.php
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[9010]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nottingham/.wp-toolkit-ignore
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:55 nativespace-cdp sudo[9013]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nove/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9016]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nove/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9020]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nscdp/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9023]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nsceres/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9026]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/nstriton/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9029]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/nuedesign.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9032]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/nuedesign.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9035]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/nuneaton -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9038]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-content
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9041]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/wp-config.php
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9044]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/nuneaton/.wp-toolkit-ignore
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9047]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/milloyco/public_html/oddleberry.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9050]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-content
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9053]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/wp-config.php
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9056]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/milloyco/public_html/oddleberry.com/.wp-toolkit-ignore
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9059]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/oldham -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9062]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-content
Sep 29 05:03:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:56 nativespace-cdp sudo[9065]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/wp-config.php
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9068]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/oldham/.wp-toolkit-ignore
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9071]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9074]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9079]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9082]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9085]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9088]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9091]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9094]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/onlycont/onlycontents.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9097]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/onlycont/onlycontents.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:57 nativespace-cdp sudo[9100]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/outdoorc/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:58 nativespace-cdp sudo[9103]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/outdoorc/public_html/wp-content
Sep 29 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:58 nativespace-cdp sudo[9106]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/outdoorc/public_html/wp-config.php
Sep 29 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:58 nativespace-cdp sudo[9109]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/outdoorc/public_html/.wp-toolkit-ignore
Sep 29 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:58 nativespace-cdp sudo[9112]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/oxfraud -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:58 nativespace-cdp sudo[9115]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/oxfraud2 -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:58 nativespace-cdp sudo[9118]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/foods/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:59 nativespace-cdp sudo[9121]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/alexadmin/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:03:59 nativespace-cdp sudo[9128]: pam_unix(sudo:session): session closed for user root
Sep 29 05:03:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:03:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9131]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-content
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9158]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/wp-config.php
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9161]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/amcalenan/.wp-toolkit-ignore
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9164]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/mausblack.co.uk/wp-content
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9167]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/mausblack.co.uk/wp-config.php
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9170]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/mausblack.co.uk/.wp-toolkit-ignore
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9173]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/pmc-working/wp-content
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9176]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/pmc-working/wp-config.php
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9180]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/pmc-working/.wp-toolkit-ignore
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9183]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/sibylnutmeg/wp-content
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9186]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/sibylnutmeg/wp-config.php
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9189]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/sibylnutmeg/.wp-toolkit-ignore
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9192]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/test_cushion/wp-content
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9195]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/test_cushion/wp-config.php
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9198]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/test_cushion/.wp-toolkit-ignore
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9201]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-content
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9204]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-config.php
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9207]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/.wp-toolkit-ignore
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9210]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/wp-content
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9213]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/wp-config.php
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9216]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/.wp-toolkit-ignore
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9219]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/rubbishchristmas/wp-content
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9222]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/rubbishchristmas/wp-config.php
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9225]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/rubbishchristmas/.wp-toolkit-ignore
Sep 29 05:04:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:05 nativespace-cdp sudo[9228]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/philmcph/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:06 nativespace-cdp sudo[9231]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/philmcph/public_html/wp-content
Sep 29 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:06 nativespace-cdp sudo[9235]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/philmcph/public_html/wp-config.php
Sep 29 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:06 nativespace-cdp sudo[9238]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/philmcph/public_html/.wp-toolkit-ignore
Sep 29 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:06 nativespace-cdp sudo[9241]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/photos.leadbetter.cc -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:06 nativespace-cdp sudo[9244]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/photos.leadbetter.cc -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:06 nativespace-cdp sudo[9247]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/php -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:06 nativespace-cdp sudo[9250]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9253]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9256]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9260]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9263]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9266]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9269]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9272]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9275]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9279]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9282]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9285]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9288]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9291]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:07 nativespace-cdp sudo[9294]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9297]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9300]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9303]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9306]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9309]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9312]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9315]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-ne.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9318]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-services.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9321]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9324]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:08 nativespace-cdp sudo[9328]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9331]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9334]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9337]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9340]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9343]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9346]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9349]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9352]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9355]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9358]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9361]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9364]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-services.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9367]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.pro -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9370]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.pro -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9373]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.services -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:09 nativespace-cdp sudo[9376]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9381]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9384]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9387]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe.services -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9390]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9398]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9401]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9404]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/www.pinstripefranchise.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9407]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/www.pinstripefranchise.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9410]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9414]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9417]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:10 nativespace-cdp sudo[9421]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9424]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9427]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9430]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9433]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9436]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9439]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9442]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9445]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9448]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9451]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9454]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9457]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeinventories.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9460]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeoffice.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:11 nativespace-cdp sudo[9464]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeoffice.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:12 nativespace-cdp sudo[9467]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:12 nativespace-cdp sudo[9470]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:12 nativespace-cdp sudo[9476]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:12 nativespace-cdp sudo[9479]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:12 nativespace-cdp sudo[9482]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:12 nativespace-cdp sudo[9485]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:12 nativespace-cdp sudo[9488]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:12 nativespace-cdp sudo[9491]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9494]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9498]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9501]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9504]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9507]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9510]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9513]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9516]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9520]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9523]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9526]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9529]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9532]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9535]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeutilities.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9538]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripeutilities.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9542]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/fancydresspiratecostumes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:13 nativespace-cdp sudo[9545]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/pinstripe-ne.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9548]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/portfolio -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9551]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/privatelandlordservices.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9554]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/privatelandlordservices.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9558]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9561]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/emma.care -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9564]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/emma.care -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9567]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ralphbarnes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9570]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/ralphbarnes.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9573]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/randomclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9577]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/boldover/public_html/randomclub.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9580]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9583]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9586]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/redcaffeine.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9589]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/redcaffeine.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9592]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/redziller.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9595]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/redziller.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:14 nativespace-cdp sudo[9598]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/reliable/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:15 nativespace-cdp sudo[9601]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ptkxhsbt/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:19 nativespace-cdp sudo[9604]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9619]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9624]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.net -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9627]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9630]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/elecleis/rhinoinstalls.net -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9633]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ultbcrra/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9636]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ulsukarm/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9639]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/public_html/wp-content
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9643]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/rochdale -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9646]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-content
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9649]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/wp-config.php
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9652]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rochdale/.wp-toolkit-ignore
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:20 nativespace-cdp sudo[9655]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/romaldki/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9658]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ulsukarm/rtadevelopment.robert-taylor.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9661]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/rtadevelopment.robert-taylor.co.uk/wp-content
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9666]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/rtadevelopment.robert-taylor.co.uk/wp-config.php
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9669]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/ulsukarm/rtadevelopment.robert-taylor.co.uk/.wp-toolkit-ignore
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9672]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/rugby -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9675]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-content
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9678]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/wp-config.php
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9681]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/rugby/.wp-toolkit-ignore
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9684]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/sale -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9687]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-content
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9690]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/wp-config.php
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9693]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/sale/.wp-toolkit-ignore
Sep 29 05:04:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:21 nativespace-cdp sudo[9696]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/salford -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:22 nativespace-cdp sudo[9699]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-content
Sep 29 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:22 nativespace-cdp sudo[9702]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/wp-config.php
Sep 29 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:22 nativespace-cdp sudo[9705]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/salford/.wp-toolkit-ignore
Sep 29 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:22 nativespace-cdp sudo[9708]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html/sams -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:22 nativespace-cdp sudo[9711]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-content
Sep 29 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:22 nativespace-cdp sudo[9715]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-config.php
Sep 29 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:22 nativespace-cdp sudo[9719]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/.wp-toolkit-ignore
Sep 29 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:22 nativespace-cdp sudo[9722]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/branko/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:22 nativespace-cdp sudo[9725]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sarafoundation/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:31 nativespace-cdp sudo[9728]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/zebrapho/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:31 nativespace-cdp sudo[9762]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/savethealliance.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:31 nativespace-cdp sudo[9765]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ggaaorgu/public_html/savethealliance.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:31 nativespace-cdp sudo[9768]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/schlossrothenburg.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:31 nativespace-cdp sudo[9771]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/schlossrothenburg.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:31 nativespace-cdp sudo[9774]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/smrszyqg/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:31 nativespace-cdp sudo[9778]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/severnvaledeanery.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:31 nativespace-cdp sudo[9781]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/severnvaledeanery.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:31 nativespace-cdp sudo[9785]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/severnwyema.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:32 nativespace-cdp sudo[9789]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/severnwyema.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:32 nativespace-cdp sudo[9792]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/shiningpyramid.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:32 nativespace-cdp sudo[9796]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/shiningpyramid.org -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:32 nativespace-cdp sudo[9799]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:32 nativespace-cdp sudo[9802]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/sibtoncc -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:32 nativespace-cdp sudo[9805]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sibtoncc/public_html/sibtoncc -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:32 nativespace-cdp sudo[9808]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/sinclairmanagement -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:32 nativespace-cdp sudo[9812]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/sindencox-art.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:32 nativespace-cdp sudo[9815]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/sindencox-art.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:32 nativespace-cdp sudo[9820]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sketchy/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:33 nativespace-cdp sudo[9823]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:33 nativespace-cdp sudo[9833]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/skyfire-designs.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:33 nativespace-cdp sudo[9837]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/skyfire-designs.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:33 nativespace-cdp sudo[9840]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/smitrod.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:33 nativespace-cdp sudo[9843]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/smitrod.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:33 nativespace-cdp sudo[9846]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/solihull -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:33 nativespace-cdp sudo[9849]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-content
Sep 29 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:33 nativespace-cdp sudo[9852]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/wp-config.php
Sep 29 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:33 nativespace-cdp sudo[9855]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/solihull/.wp-toolkit-ignore
Sep 29 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:33 nativespace-cdp sudo[9858]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ptkxhsbt/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:34 nativespace-cdp sudo[9861]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hodgesonweb/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:34 nativespace-cdp sudo[9865]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/mcdermos/public_html/sams/wp -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:34 nativespace-cdp sudo[9868]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-content
Sep 29 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:34 nativespace-cdp sudo[9871]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/wp-config.php
Sep 29 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:34 nativespace-cdp sudo[9874]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/mcdermos/public_html/sams/wp/.wp-toolkit-ignore
Sep 29 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:34 nativespace-cdp sudo[9877]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/sosevalu/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:34 nativespace-cdp sudo[9880]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/southlon/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:34 nativespace-cdp sudo[9884]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/southwestbrassbandassociation.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:34 nativespace-cdp sudo[9887]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/southwestbrassbandassociation.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:34 nativespace-cdp sudo[9890]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/spectrum/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9893]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/spectrum/public_html/blog/wp-content
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9899]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/spectrum/public_html/blog/wp-config.php
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9902]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/spectrum/public_html/blog/.wp-toolkit-ignore
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9905]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/stafford -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9908]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-content
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9911]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/wp-config.php
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9914]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stafford/.wp-toolkit-ignore
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9917]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/legorobotclub/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9920]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-content
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9923]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/wp-config.php
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9926]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/legorobotclub/public_html/.wp-toolkit-ignore
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:35 nativespace-cdp sudo[9929]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/stagingerris/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:38 nativespace-cdp sudo[9932]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/starwigs_2.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:38 nativespace-cdp sudo[9938]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html/starwigs_2.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:38 nativespace-cdp sudo[9941]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/careers/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:38 nativespace-cdp sudo[9944]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/bakery/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:38 nativespace-cdp sudo[9947]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/steakbridieme/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:38 nativespace-cdp sudo[9950]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lucy/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:38 nativespace-cdp sudo[9953]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/steve/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:38 nativespace-cdp sudo[9957]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/steve/public_html/wp-content
Sep 29 05:04:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:38 nativespace-cdp sudo[9960]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/steve/public_html/wp-config.php
Sep 29 05:04:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:38 nativespace-cdp sudo[9963]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/steve/public_html/.wp-toolkit-ignore
Sep 29 05:04:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:39 nativespace-cdp sudo[9966]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/foundation/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[9970]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/foundation/public_html/wp-content
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[9978]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/foundation/public_html/wp-config.php
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[9981]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/foundation/public_html/.wp-toolkit-ignore
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[9984]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hubmaster/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[9987]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[9990]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stmichaelmitcheldean.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[9993]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stmichaelmitcheldean.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[9996]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/stockport -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[9999]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-content
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[10002]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/wp-config.php
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[10005]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stockport/.wp-toolkit-ignore
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[10008]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/stoke -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[10011]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-content
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[10014]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/wp-config.php
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[10017]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/stoke/.wp-toolkit-ignore
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[10020]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/store -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:42 nativespace-cdp sudo[10023]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:43 nativespace-cdp sudo[10026]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/strathard.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:43 nativespace-cdp sudo[10029]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/strathar/public_html/strathard.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:43 nativespace-cdp sudo[10032]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stroud-deanery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:43 nativespace-cdp sudo[10036]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/stroud-deanery.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:43 nativespace-cdp sudo[10039]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/stuartge/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:43 nativespace-cdp sudo[10042]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/sturgessbarns/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:43 nativespace-cdp sudo[10045]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/sturgessbarns/public_html/wp-content
Sep 29 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:43 nativespace-cdp sudo[10049]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/sturgessbarns/public_html/wp-config.php
Sep 29 05:04:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:43 nativespace-cdp sudo[10053]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/sturgessbarns/public_html/.wp-toolkit-ignore
Sep 29 05:04:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:44 nativespace-cdp sudo[10056]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/sturgessbarns.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10059]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-content
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10066]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-config.php
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10069]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/.wp-toolkit-ignore
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10072]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/sturgessbarns.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10075]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-content
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10078]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/wp-config.php
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10081]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/sturgessbarns.co.uk/.wp-toolkit-ignore
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10084]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/superbstuff.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10087]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/superbstuff.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10090]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/havantho/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10093]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/suttoncoldfield -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10096]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-content
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10099]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/wp-config.php
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10102]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/suttoncoldfield/.wp-toolkit-ignore
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10105]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/swbba.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10108]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/swbba.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10111]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/tamworth -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10114]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-content
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10117]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/wp-config.php
Sep 29 05:04:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:45 nativespace-cdp sudo[10120]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/tamworth/.wp-toolkit-ignore
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10123]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/tdcc-online.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10126]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/tdcc-online.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10129]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/tenancy-deposit-scheme-scotland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10132]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10135]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-content
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10140]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/wp-config.php
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10143]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/.wp-toolkit-ignore
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10147]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-content
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10151]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/wp-config.php
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10154]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/oneoarco/public_html/pinstripe.services/.wp-toolkit-ignore
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10157]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/telford -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10160]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-content
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10163]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/wp-config.php
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10166]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/telford/.wp-toolkit-ignore
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10169]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/temperaturemonitor.info -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10172]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/clarkass/public_html/temperaturemonitor.info -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:46 nativespace-cdp sudo[10175]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/tenancy-deposit-scheme-scotland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10178]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/public_html/ranxtertest -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10181]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/seftvta/public_html/test -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10184]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oubpgvbx/public_html/testlink -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10187]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/atestord/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10191]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/theblack/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10194]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/thedogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10197]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/thedogmarket.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10200]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/Thegooddogshop.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10203]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/Thegooddogshop.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10207]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/thegooddogshop.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10210]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/thegooddogshop.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10213]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/hidden/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10216]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/hidden/public_html/wp-content
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10219]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/hidden/public_html/wp-config.php
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10222]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/hidden/public_html/../wp-config.php
Sep 29 05:04:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:47 nativespace-cdp sudo[10225]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/seftvta/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:48 nativespace-cdp sudo[10228]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/leftie/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:48 nativespace-cdp sudo[10231]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/leftie/public_html/wp-content
Sep 29 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:48 nativespace-cdp sudo[10234]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/leftie/public_html/wp-config.php
Sep 29 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:48 nativespace-cdp sudo[10237]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/leftie/public_html/../wp-config.php
Sep 29 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:48 nativespace-cdp sudo[10240]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/thelordslarder.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:48 nativespace-cdp sudo[10243]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/thelordslarder.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:48 nativespace-cdp sudo[10246]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/thenorthseashore.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:48 nativespace-cdp sudo[10249]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/thenorthseashore.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:48 nativespace-cdp sudo[10252]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/thesevernforum.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10255]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/thesevernforum.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10264]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/still/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10267]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/tigerestates.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10270]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10273]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/public_html/tigermanagement.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10277]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tigerlet/public_html/tigermetre.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10280]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/tomandle/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10283]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchinventories.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10286]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchinventories.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10289]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchis.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10292]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/touchis.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:50 nativespace-cdp sudo[10295]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/traddad -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10298]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10301]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10304]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10307]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/traddad -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10310]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-content
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10313]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/wp-config.php
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10316]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/chrisdal/public_html/traddad/.wp-toolkit-ignore
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10319]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/trafford -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10322]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-content
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10325]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/wp-config.php
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10328]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/trafford/.wp-toolkit-ignore
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10331]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/training-middleeast.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10334]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/training-middleeast.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10337]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/traversingthehinterland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10340]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-content
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10343]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-config.php
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10346]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/.wp-toolkit-ignore
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10349]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/paulmca1/public_html/traversingthehinterland.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10352]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-content
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10356]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/wp-config.php
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10359]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/paulmca1/public_html/traversingthehinterland.co.uk/.wp-toolkit-ignore
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:51 nativespace-cdp sudo[10362]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/trendytiles.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:57 nativespace-cdp sudo[10365]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-content
Sep 29 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:57 nativespace-cdp sudo[10381]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-config.php
Sep 29 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:57 nativespace-cdp sudo[10384]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/.wp-toolkit-ignore
Sep 29 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:57 nativespace-cdp sudo[10388]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/fortunaz/trendytiles.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:58 nativespace-cdp sudo[10391]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-content
Sep 29 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:58 nativespace-cdp sudo[10394]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/wp-config.php
Sep 29 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:58 nativespace-cdp sudo[10397]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/fortunaz/trendytiles.com/.wp-toolkit-ignore
Sep 29 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:04:58 nativespace-cdp sudo[10400]: pam_unix(sudo:session): session closed for user root
Sep 29 05:04:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/subdomains/trixietrapp -type d -name wp-includes -printf '%h\0'
Sep 29 05:04:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10403]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/trixietrapp/wp-content
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10409]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/trixietrapp/wp-config.php
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10412]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/subdomains/trixietrapp/.wp-toolkit-ignore
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10415]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/ukdrivingroads.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10418]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/chrisdal/public_html/ukdrivingroads.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10421]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/ranxterc/ranxter-upload -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10427]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/oneoarco/public_html/users -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10430]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vantagep/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10433]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/vivienn1/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10436]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/walkden -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10439]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-content
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10442]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/wp-config.php
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10445]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walkden/.wp-toolkit-ignore
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:00 nativespace-cdp sudo[10448]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/crrtipdl/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:02 nativespace-cdp sudo[10451]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/crrtipdl/public_html/wp-content
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10536]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/crrtipdl/public_html/wp-config.php
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10539]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/crrtipdl/public_html/.wp-toolkit-ignore
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10542]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/walsall -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10545]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-content
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10549]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/wp-config.php
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10553]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/walsall/.wp-toolkit-ignore
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10556]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/warrington -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10560]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-content
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10563]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/wp-config.php
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10566]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/warrington/.wp-toolkit-ignore
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10569]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/carsinyo/public_html/wavs.co -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10572]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-content
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10575]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/wp-config.php
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10578]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/carsinyo/public_html/wavs.co/.wp-toolkit-ignore
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10581]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/webba.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10584]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/webba.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:03 nativespace-cdp sudo[10587]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/lbhyisi/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:05 nativespace-cdp sudo[10590]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lbhyisi/public_html/redziller.co.uk 2fe6b75f-1b22-45ab-928d-6683b177d2fe55/blog/wp-content
Sep 29 05:05:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:05 nativespace-cdp sudo[10603]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lbhyisi/public_html/redziller.co.uk 2fe6b75f-1b22-45ab-928d-6683b177d2fe55/blog/wp-config.php
Sep 29 05:05:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:05 nativespace-cdp sudo[10607]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/lbhyisi/public_html/redziller.co.uk 2fe6b75f-1b22-45ab-928d-6683b177d2fe55/blog/.wp-toolkit-ignore
Sep 29 05:05:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:05 nativespace-cdp sudo[10610]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/werefoxproductions.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:05 nativespace-cdp sudo[10614]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-content
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10628]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-config.php
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10631]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/.wp-toolkit-ignore
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10634]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/pugwash/domains/werefoxproductions.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10637]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-content
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10640]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/wp-config.php
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10643]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/pugwash/domains/werefoxproductions.com/.wp-toolkit-ignore
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10646]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/what/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10649]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/widnes -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10653]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-content
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10656]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/wp-config.php
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10659]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/widnes/.wp-toolkit-ignore
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10664]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/wigan -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10668]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-content
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10671]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/wp-config.php
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10674]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wigan/.wp-toolkit-ignore
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10677]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/wilsonleo.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10680]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html/wilsonleo.com -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10683]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10686]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/wilsonsw/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10689]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/outdoorc/public_html/windkatcowls.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:06 nativespace-cdp sudo[10692]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/windwhistlewarren.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10695]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/skyfirec/public_html/windwhistlewarren.org.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10698]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/winsfordhouseproduce.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10701]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/athenare/public_html/winsfordhouseproduce.co.uk -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10705]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/wolverhampton -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10708]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-content
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10711]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/wp-config.php
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10714]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/wolverhampton/.wp-toolkit-ignore
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10717]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/firstre5/public_html/worcester -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10720]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-content
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10723]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/wp-config.php
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10726]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /home/firstre5/public_html/worcester/.wp-toolkit-ignore
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10729]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/zebrapho/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10732]: pam_unix(sudo:session): session closed for user root
Sep 29 05:05:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c find -H /home/zebrapho/public_html -type d -name wp-includes -printf '%h\0'
Sep 29 05:05:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:05:07 nativespace-cdp sudo[10735]: pam_unix(sudo:session): session closed for user root
Sep 29 05:06:33 nativespace-cdp sshd[10991]: Connection closed by 159.100.136.21 port 52180 [preauth]
Sep 29 05:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 05:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:18 nativespace-cdp sudo[11717]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 05:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:18 nativespace-cdp sudo[11721]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 05:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:19 nativespace-cdp sudo[11724]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 05:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:20 nativespace-cdp sudo[11731]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 05:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:22 nativespace-cdp sudo[11734]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:22 nativespace-cdp sudo[11746]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:22 nativespace-cdp sudo[11749]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:22 nativespace-cdp sudo[11752]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:22 nativespace-cdp sudo[11756]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:22 nativespace-cdp sudo[11759]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 05:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:22 nativespace-cdp sudo[11764]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:29 nativespace-cdp sudo[11783]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 05:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:30 nativespace-cdp sudo[11787]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bedfords user-2=bemadonn user-3=belle user-4=ggaaorgu user-5=newstoda user-6=brighto1 user-7=nstriton user-8=battlere user-9=oneoarco user-10=firstre2 user-11=vivienn1 user-12=askhform user-13=stuartge user-14=innovat1 user-15=nativene user-16=alexadmin user-17=skyfirec user-18=costestimatorco user-19=firstrel user-20=clarkass user-21=southlon user-22=highlegh user-23=firstred user-24=firstres user-25=seftvta user-26=jonhartl user-27=ultbcrra user-28=opaiscyx user-29=coursemc user-30=ianrayne user-31=accooper user-32=thqkgnbz user-33=connectedshoppin user-34=elecleis user-35=gilpin user-36=milloyco user-37=carsinyo user-38=fetch user-39=hubmaster user-40=wilsonsw user-41=musorguk user-42=megacards user-43=lakesan1 user-44=brmrjxl user-45=sarafoundation user-46=atestord user-47=strathar
Sep 29 05:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=lbhyisi user-49=hhdugcor user-50=magichat user-51=martsblo user-52=ptkxhsbt user-53=dickemery123 user-54=ulsukarm user-55=booff user-56=markward user-57=foundation user-58=maflemin user-59=lbscrmod user-60=connect9 user-61=athenare user-62=vantagep user-63=still user-64=agproduc user-65=leereyn1 user-66=stephani user-67=jarvisin user-68=theblack user-69=hodgesonweb user-70=spectrum user-71=sosevalu user-72=crrtipdl user-73=bakery user-74=nove user-75=boldover user-76=kategilpin user-77=ladburyp user-78=dancinggardener user-79=stagingerris user-80=design user-81=what user-82=oubpgvbx user-83=tstardom user-84=nvihkvu user-85=cath user-86=sketchy user-87=havantho user-88=mcdermos user-89=chrisdal user-90=nbhavers user-91=careers user-92=david user-93=tomandle user-94=jennimil user-95=branko user-96=outdoorc user-97=ranxterc user-98=hodgsonmail user-99=romaldki user-100=attlebor user-101=lucy
Sep 29 05:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=onlycont user-103=isleofwi user-104=smrszyqg user-105=barbersh user-106=tigerlet user-107=hidden user-108=nomistakes user-109=fortunaz user-110=health2045 user-111=leftie user-112=foods user-113=nscdp user-114=ctedorgu user-115=philmcph user-116=donnychicago user-117=firstre5 user-118=steakbridieme user-119=lkpier user-120=hirefootballgame user-121=courseme user-122=eugincou user-123=ninejimm user-124=reliable user-125=cambria1 user-126=cathski user-127=pugwash user-128=howardon user-129=paulmca1 user-130=cwsocial user-131=zebrapho user-132=bwppodcast user-133=steve user-134=sibtoncc user-135=asandcoc user-136=eatspam user-137=darkstar user-138=beauty user-139=dhyana user-140=burydropin user-141=fawcettd user-142=nsceres feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 29 05:09:30 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 05:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:30 nativespace-cdp sudo[11792]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:31 nativespace-cdp sudo[11811]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lMN4KlRngsQiFOW6.~
Sep 29 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:31 nativespace-cdp sudo[11814]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lMN4KlRngsQiFOW6.~'
Sep 29 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:31 nativespace-cdp sudo[11817]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-lMN4KlRngsQiFOW6.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:31 nativespace-cdp sudo[11821]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 05:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:31 nativespace-cdp sudo[11824]: pam_unix(sudo:session): session closed for user root
Sep 29 05:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 05:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 05:09:38 nativespace-cdp sudo[11852]: pam_unix(sudo:session): session closed for user root
Sep 29 05:11:33 nativespace-cdp sshd[12266]: Connection closed by 159.100.136.21 port 33610 [preauth]
Sep 29 05:16:36 nativespace-cdp sshd[13190]: Connection closed by 159.100.136.21 port 43396 [preauth]
Sep 29 05:21:33 nativespace-cdp sshd[14502]: Connection closed by 159.100.136.21 port 52786 [preauth]
Sep 29 05:26:34 nativespace-cdp sshd[15416]: Connection closed by 159.100.136.21 port 34612 [preauth]
Sep 29 05:31:34 nativespace-cdp sshd[16544]: Connection closed by 159.100.136.21 port 43924 [preauth]
Sep 29 05:35:10 nativespace-cdp su: pam_unix(su:session): session opened for user lucy by (uid=0)
Sep 29 05:35:11 nativespace-cdp su[17520]: pam_unix(su:session): session closed for user lucy
Sep 29 05:36:33 nativespace-cdp sshd[17769]: Connection closed by 159.100.136.21 port 53554 [preauth]
Sep 29 05:38:41 nativespace-cdp sshd[18163]: Invalid user support from 91.196.164.131 port 39234
Sep 29 05:38:41 nativespace-cdp sshd[18163]: input_userauth_request: invalid user support [preauth]
Sep 29 05:38:41 nativespace-cdp sshd[18163]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 05:38:41 nativespace-cdp sshd[18163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.196.164.131
Sep 29 05:38:43 nativespace-cdp sshd[18163]: Failed password for invalid user support from 91.196.164.131 port 39234 ssh2
Sep 29 05:38:43 nativespace-cdp sshd[18163]: Received disconnect from 91.196.164.131 port 39234:11: Bye Bye [preauth]
Sep 29 05:38:43 nativespace-cdp sshd[18163]: Disconnected from 91.196.164.131 port 39234 [preauth]
Sep 29 05:41:28 nativespace-cdp sshd[18801]: Invalid user test from 91.196.164.131 port 56192
Sep 29 05:41:28 nativespace-cdp sshd[18801]: input_userauth_request: invalid user test [preauth]
Sep 29 05:41:28 nativespace-cdp sshd[18801]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 05:41:28 nativespace-cdp sshd[18801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.196.164.131
Sep 29 05:41:30 nativespace-cdp sshd[18801]: Failed password for invalid user test from 91.196.164.131 port 56192 ssh2
Sep 29 05:41:30 nativespace-cdp sshd[18801]: Received disconnect from 91.196.164.131 port 56192:11: Bye Bye [preauth]
Sep 29 05:41:30 nativespace-cdp sshd[18801]: Disconnected from 91.196.164.131 port 56192 [preauth]
Sep 29 05:41:34 nativespace-cdp sshd[18819]: Connection closed by 159.100.136.21 port 34740 [preauth]
Sep 29 05:42:08 nativespace-cdp sshd[18899]: Invalid user username from 91.196.164.131 port 58894
Sep 29 05:42:08 nativespace-cdp sshd[18899]: input_userauth_request: invalid user username [preauth]
Sep 29 05:42:08 nativespace-cdp sshd[18899]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 05:42:08 nativespace-cdp sshd[18899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.196.164.131
Sep 29 05:42:10 nativespace-cdp sshd[18899]: Failed password for invalid user username from 91.196.164.131 port 58894 ssh2
Sep 29 05:42:10 nativespace-cdp sshd[18899]: Received disconnect from 91.196.164.131 port 58894:11: Bye Bye [preauth]
Sep 29 05:42:10 nativespace-cdp sshd[18899]: Disconnected from 91.196.164.131 port 58894 [preauth]
Sep 29 05:46:33 nativespace-cdp sshd[19838]: Connection closed by 159.100.136.21 port 44738 [preauth]
Sep 29 05:51:33 nativespace-cdp sshd[20753]: Connection closed by 159.100.136.21 port 53892 [preauth]
Sep 29 05:56:35 nativespace-cdp sshd[21908]: Connection closed by 159.100.136.21 port 35304 [preauth]
Sep 29 06:01:35 nativespace-cdp sshd[23007]: Connection closed by 159.100.136.21 port 44808 [preauth]
Sep 29 06:06:33 nativespace-cdp sshd[24163]: Connection closed by 159.100.136.21 port 53724 [preauth]
Sep 29 06:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 06:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:17 nativespace-cdp sudo[24670]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 06:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:17 nativespace-cdp sudo[24673]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 06:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:17 nativespace-cdp sudo[24676]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 06:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:18 nativespace-cdp sudo[24681]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 06:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:21 nativespace-cdp sudo[24684]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:21 nativespace-cdp sudo[24697]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:21 nativespace-cdp sudo[24701]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:21 nativespace-cdp sudo[24704]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:21 nativespace-cdp sudo[24707]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:21 nativespace-cdp sudo[24711]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:21 nativespace-cdp sudo[24714]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 06:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:23 nativespace-cdp sudo[24721]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 06:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:23 nativespace-cdp sudo[24725]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hirefootballgame user-2=eugincou user-3=courseme user-4=cambria1 user-5=cathski user-6=ninejimm user-7=reliable user-8=cwsocial user-9=pugwash user-10=paulmca1 user-11=howardon user-12=smrszyqg user-13=isleofwi user-14=nomistakes user-15=hidden user-16=tigerlet user-17=barbersh user-18=nscdp user-19=leftie user-20=foods user-21=health2045 user-22=fortunaz user-23=lkpier user-24=firstre5 user-25=donnychicago user-26=steakbridieme user-27=ctedorgu user-28=philmcph user-29=beauty user-30=darkstar user-31=eatspam user-32=dhyana user-33=fawcettd user-34=burydropin user-35=nsceres user-36=bwppodcast user-37=zebrapho user-38=steve user-39=sibtoncc user-40=asandcoc user-41=stagingerris user-42=dancinggardener user-43=ladburyp user-44=kategilpin user-45=design user-46=oubpgvbx user-47=tstardom
Sep 29 06:09:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=what user-49=havantho user-50=sketchy user-51=cath user-52=nvihkvu user-53=bakery user-54=crrtipdl user-55=sosevalu user-56=nove user-57=boldover user-58=outdoorc user-59=ranxterc user-60=hodgsonmail user-61=branko user-62=romaldki user-63=lucy user-64=attlebor user-65=onlycont user-66=chrisdal user-67=mcdermos user-68=david user-69=careers user-70=nbhavers user-71=tomandle user-72=jennimil user-73=hhdugcor user-74=lbhyisi user-75=magichat user-76=martsblo user-77=dickemery123 user-78=ptkxhsbt user-79=wilsonsw user-80=megacards user-81=musorguk user-82=lakesan1 user-83=brmrjxl user-84=strathar user-85=atestord user-86=sarafoundation user-87=agproduc user-88=still user-89=stephani user-90=leereyn1 user-91=jarvisin user-92=spectrum user-93=hodgesonweb user-94=theblack user-95=ulsukarm user-96=foundation user-97=markward user-98=booff user-99=vantagep user-100=athenare user-101=connect9 user-102=lbscrmod
Sep 29 06:09:23 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=maflemin user-104=innovat1 user-105=stuartge user-106=askhform user-107=nativene user-108=alexadmin user-109=skyfirec user-110=bedfords user-111=newstoda user-112=belle user-113=ggaaorgu user-114=bemadonn user-115=nstriton user-116=brighto1 user-117=vivienn1 user-118=firstre2 user-119=oneoarco user-120=battlere user-121=accooper user-122=ianrayne user-123=connectedshoppin user-124=thqkgnbz user-125=milloyco user-126=gilpin user-127=elecleis user-128=hubmaster user-129=fetch user-130=carsinyo user-131=clarkass user-132=firstrel user-133=costestimatorco user-134=firstred user-135=highlegh user-136=southlon user-137=ultbcrra user-138=seftvta user-139=jonhartl user-140=firstres user-141=opaiscyx user-142=coursemc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 06:09:23 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 06:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:24 nativespace-cdp sudo[24731]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 06:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:24 nativespace-cdp sudo[24737]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GVdZTLwYY3Vozwjv.~
Sep 29 06:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:25 nativespace-cdp sudo[24740]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GVdZTLwYY3Vozwjv.~'
Sep 29 06:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:25 nativespace-cdp sudo[24743]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GVdZTLwYY3Vozwjv.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 06:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:25 nativespace-cdp sudo[24747]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 06:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:25 nativespace-cdp sudo[24750]: pam_unix(sudo:session): session closed for user root
Sep 29 06:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 06:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 06:09:26 nativespace-cdp sudo[24769]: pam_unix(sudo:session): session closed for user root
Sep 29 06:11:36 nativespace-cdp sshd[25221]: Connection closed by 159.100.136.21 port 33692 [preauth]
Sep 29 06:16:35 nativespace-cdp sshd[26202]: Connection closed by 159.100.136.21 port 43260 [preauth]
Sep 29 06:21:33 nativespace-cdp sshd[27403]: Connection closed by 159.100.136.21 port 52500 [preauth]
Sep 29 06:26:34 nativespace-cdp sshd[28317]: Connection closed by 159.100.136.21 port 33652 [preauth]
Sep 29 06:31:36 nativespace-cdp sshd[29422]: Connection closed by 159.100.136.21 port 43222 [preauth]
Sep 29 06:36:33 nativespace-cdp sshd[30445]: Connection closed by 159.100.136.21 port 52864 [preauth]
Sep 29 06:41:33 nativespace-cdp sshd[31554]: Connection closed by 159.100.136.21 port 33380 [preauth]
Sep 29 06:46:35 nativespace-cdp sshd[32514]: Connection closed by 159.100.136.21 port 42986 [preauth]
Sep 29 06:51:33 nativespace-cdp sshd[1363]: Connection closed by 159.100.136.21 port 52482 [preauth]
Sep 29 06:56:33 nativespace-cdp sshd[2514]: Connection closed by 159.100.136.21 port 34344 [preauth]
Sep 29 07:01:33 nativespace-cdp sshd[3555]: Connection closed by 159.100.136.21 port 44060 [preauth]
Sep 29 07:06:33 nativespace-cdp sshd[4814]: Connection closed by 159.100.136.21 port 53832 [preauth]
Sep 29 07:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 07:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:16 nativespace-cdp sudo[5254]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 07:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:16 nativespace-cdp sudo[5258]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 07:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:17 nativespace-cdp sudo[5261]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 07:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:17 nativespace-cdp sudo[5268]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 07:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:20 nativespace-cdp sudo[5271]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 07:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:20 nativespace-cdp sudo[5360]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 07:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:20 nativespace-cdp sudo[5366]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 07:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:20 nativespace-cdp sudo[5371]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 07:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:20 nativespace-cdp sudo[5374]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 07:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:20 nativespace-cdp sudo[5377]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 07:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:20 nativespace-cdp sudo[5380]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 07:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:22 nativespace-cdp sudo[5396]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 07:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:22 nativespace-cdp sudo[5400]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bakery user-2=sosevalu user-3=crrtipdl user-4=nove user-5=boldover user-6=ladburyp user-7=stagingerris user-8=dancinggardener user-9=kategilpin user-10=design user-11=tstardom user-12=oubpgvbx user-13=what user-14=cath user-15=sketchy user-16=havantho user-17=nvihkvu user-18=chrisdal user-19=mcdermos user-20=careers user-21=nbhavers user-22=david user-23=tomandle user-24=jennimil user-25=ranxterc user-26=outdoorc user-27=hodgsonmail user-28=branko user-29=romaldki user-30=attlebor user-31=lucy user-32=onlycont user-33=smrszyqg user-34=isleofwi user-35=hidden user-36=nomistakes user-37=barbersh user-38=tigerlet user-39=nscdp user-40=health2045 user-41=fortunaz user-42=leftie user-43=foods user-44=lkpier user-45=philmcph user-46=ctedorgu user-47=steakbridieme user-48=donnychicago user-49=firstre5
Sep 29 07:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=hirefootballgame user-51=eugincou user-52=courseme user-53=cambria1 user-54=cathski user-55=ninejimm user-56=reliable user-57=paulmca1 user-58=pugwash user-59=howardon user-60=cwsocial user-61=bwppodcast user-62=zebrapho user-63=steve user-64=asandcoc user-65=sibtoncc user-66=beauty user-67=eatspam user-68=darkstar user-69=dhyana user-70=burydropin user-71=fawcettd user-72=nsceres user-73=bedfords user-74=belle user-75=ggaaorgu user-76=newstoda user-77=bemadonn user-78=brighto1 user-79=nstriton user-80=firstre2 user-81=vivienn1 user-82=battlere user-83=oneoarco user-84=innovat1 user-85=stuartge user-86=askhform user-87=nativene user-88=skyfirec user-89=alexadmin user-90=clarkass user-91=firstrel user-92=costestimatorco user-93=firstred user-94=southlon user-95=highlegh user-96=jonhartl user-97=seftvta user-98=ultbcrra user-99=firstres user-100=opaiscyx user-101=coursemc user-102=accooper user-103=ianrayne
Sep 29 07:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=connectedshoppin user-105=thqkgnbz user-106=gilpin user-107=milloyco user-108=elecleis user-109=hubmaster user-110=carsinyo user-111=fetch user-112=wilsonsw user-113=musorguk user-114=megacards user-115=brmrjxl user-116=lakesan1 user-117=strathar user-118=sarafoundation user-119=atestord user-120=lbhyisi user-121=hhdugcor user-122=magichat user-123=martsblo user-124=dickemery123 user-125=ptkxhsbt user-126=ulsukarm user-127=booff user-128=markward user-129=foundation user-130=athenare user-131=connect9 user-132=vantagep user-133=maflemin user-134=lbscrmod user-135=still user-136=agproduc user-137=stephani user-138=leereyn1 user-139=jarvisin user-140=spectrum user-141=hodgesonweb user-142=theblack feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 07:09:22 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 07:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:23 nativespace-cdp sudo[5406]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:23 nativespace-cdp sudo[5414]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bnnyiWOfp4CzfIlu.~
Sep 29 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:23 nativespace-cdp sudo[5418]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bnnyiWOfp4CzfIlu.~'
Sep 29 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:23 nativespace-cdp sudo[5421]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bnnyiWOfp4CzfIlu.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 07:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:23 nativespace-cdp sudo[5425]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 07:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:24 nativespace-cdp sudo[5428]: pam_unix(sudo:session): session closed for user root
Sep 29 07:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 07:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 07:09:30 nativespace-cdp sudo[5462]: pam_unix(sudo:session): session closed for user root
Sep 29 07:11:33 nativespace-cdp sshd[6030]: Connection closed by 159.100.136.21 port 35248 [preauth]
Sep 29 07:16:33 nativespace-cdp sshd[7102]: Connection closed by 159.100.136.21 port 45150 [preauth]
Sep 29 07:21:33 nativespace-cdp sshd[8441]: Connection closed by 159.100.136.21 port 54696 [preauth]
Sep 29 07:26:34 nativespace-cdp sshd[9466]: Connection closed by 159.100.136.21 port 36280 [preauth]
Sep 29 07:31:33 nativespace-cdp sshd[10582]: Connection closed by 159.100.136.21 port 46150 [preauth]
Sep 29 07:36:33 nativespace-cdp sshd[11924]: Connection closed by 159.100.136.21 port 56226 [preauth]
Sep 29 07:41:33 nativespace-cdp sshd[12944]: Connection closed by 159.100.136.21 port 37526 [preauth]
Sep 29 07:46:36 nativespace-cdp sshd[14013]: Connection closed by 159.100.136.21 port 47466 [preauth]
Sep 29 07:51:36 nativespace-cdp sshd[15225]: Connection closed by 159.100.136.21 port 56794 [preauth]
Sep 29 07:56:34 nativespace-cdp sshd[16991]: Connection closed by 159.100.136.21 port 38172 [preauth]
Sep 29 08:01:36 nativespace-cdp sshd[18386]: Connection closed by 159.100.136.21 port 47598 [preauth]
Sep 29 08:06:33 nativespace-cdp sshd[19528]: Connection closed by 159.100.136.21 port 57528 [preauth]
Sep 29 08:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 08:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:40 nativespace-cdp sudo[20286]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 08:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:40 nativespace-cdp sudo[20289]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 08:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:41 nativespace-cdp sudo[20293]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 08:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:42 nativespace-cdp sudo[20298]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 08:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:45 nativespace-cdp sudo[20302]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 08:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:46 nativespace-cdp sudo[20325]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 08:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:46 nativespace-cdp sudo[20328]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 08:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:46 nativespace-cdp sudo[20331]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 08:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:46 nativespace-cdp sudo[20334]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 08:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:46 nativespace-cdp sudo[20337]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 08:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:46 nativespace-cdp sudo[20341]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 08:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:58 nativespace-cdp sudo[20370]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 08:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:09:59 nativespace-cdp sudo[20376]: pam_unix(sudo:session): session closed for user root
Sep 29 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=steve user-2=zebrapho user-3=bwppodcast user-4=sibtoncc user-5=asandcoc user-6=dhyana user-7=eatspam user-8=darkstar user-9=beauty user-10=nsceres user-11=burydropin user-12=fawcettd user-13=tigerlet user-14=barbersh user-15=hidden user-16=nomistakes user-17=smrszyqg user-18=isleofwi user-19=philmcph user-20=ctedorgu user-21=donnychicago user-22=firstre5 user-23=steakbridieme user-24=lkpier user-25=fortunaz user-26=health2045 user-27=leftie user-28=foods user-29=nscdp user-30=courseme user-31=eugincou user-32=hirefootballgame user-33=pugwash user-34=paulmca1 user-35=howardon user-36=cwsocial user-37=reliable user-38=ninejimm user-39=cambria1 user-40=cathski user-41=nbhavers user-42=careers user-43=david user-44=mcdermos user-45=chrisdal user-46=jennimil user-47=tomandle user-48=romaldki
Sep 29 08:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=branko user-50=outdoorc user-51=ranxterc user-52=hodgsonmail user-53=onlycont user-54=attlebor user-55=lucy user-56=sosevalu user-57=crrtipdl user-58=bakery user-59=boldover user-60=nove user-61=design user-62=kategilpin user-63=ladburyp user-64=dancinggardener user-65=stagingerris user-66=nvihkvu user-67=cath user-68=sketchy user-69=havantho user-70=what user-71=oubpgvbx user-72=tstardom user-73=ulsukarm user-74=maflemin user-75=lbscrmod user-76=athenare user-77=connect9 user-78=vantagep user-79=booff user-80=markward user-81=foundation user-82=leereyn1 user-83=stephani user-84=still user-85=agproduc user-86=theblack user-87=hodgesonweb user-88=spectrum user-89=jarvisin user-90=musorguk user-91=megacards user-92=wilsonsw user-93=sarafoundation user-94=atestord user-95=strathar user-96=lakesan1 user-97=brmrjxl user-98=magichat user-99=lbhyisi user-100=hhdugcor user-101=ptkxhsbt user-102=dickemery123
Sep 29 08:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=martsblo user-104=southlon user-105=highlegh user-106=firstred user-107=costestimatorco user-108=firstrel user-109=clarkass user-110=coursemc user-111=opaiscyx user-112=firstres user-113=jonhartl user-114=seftvta user-115=ultbcrra user-116=thqkgnbz user-117=connectedshoppin user-118=ianrayne user-119=accooper user-120=carsinyo user-121=fetch user-122=hubmaster user-123=elecleis user-124=gilpin user-125=milloyco user-126=bemadonn user-127=belle user-128=ggaaorgu user-129=newstoda user-130=bedfords user-131=battlere user-132=oneoarco user-133=firstre2 user-134=vivienn1 user-135=brighto1 user-136=nstriton user-137=nativene user-138=askhform user-139=stuartge user-140=innovat1 user-141=skyfirec user-142=alexadmin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 08:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:10:00 nativespace-cdp sudo[20381]: pam_unix(sudo:session): session closed for user root
Sep 29 08:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 08:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:10:01 nativespace-cdp sudo[20387]: pam_unix(sudo:session): session closed for user root
Sep 29 08:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nEBtqUsViyEiu03G.~
Sep 29 08:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:10:01 nativespace-cdp sudo[20390]: pam_unix(sudo:session): session closed for user root
Sep 29 08:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nEBtqUsViyEiu03G.~'
Sep 29 08:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:10:01 nativespace-cdp sudo[20393]: pam_unix(sudo:session): session closed for user root
Sep 29 08:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-nEBtqUsViyEiu03G.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 08:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:10:01 nativespace-cdp sudo[20397]: pam_unix(sudo:session): session closed for user root
Sep 29 08:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 08:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:10:01 nativespace-cdp sudo[20400]: pam_unix(sudo:session): session closed for user root
Sep 29 08:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 08:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 08:10:04 nativespace-cdp sudo[20535]: pam_unix(sudo:session): session closed for user root
Sep 29 08:11:33 nativespace-cdp sshd[20818]: Connection closed by 159.100.136.21 port 38718 [preauth]
Sep 29 08:14:06 nativespace-cdp sshd[21226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.235.34.82  user=root
Sep 29 08:14:06 nativespace-cdp sshd[21226]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 08:14:09 nativespace-cdp sshd[21226]: Failed password for root from 103.235.34.82 port 50212 ssh2
Sep 29 08:14:09 nativespace-cdp sshd[21226]: Received disconnect from 103.235.34.82 port 50212:11: Bye Bye [preauth]
Sep 29 08:14:09 nativespace-cdp sshd[21226]: Disconnected from 103.235.34.82 port 50212 [preauth]
Sep 29 08:16:33 nativespace-cdp sshd[21928]: Connection closed by 159.100.136.21 port 48488 [preauth]
Sep 29 08:16:45 nativespace-cdp sshd[21985]: Invalid user payara from 103.235.34.82 port 39148
Sep 29 08:16:45 nativespace-cdp sshd[21985]: input_userauth_request: invalid user payara [preauth]
Sep 29 08:16:45 nativespace-cdp sshd[21985]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 08:16:45 nativespace-cdp sshd[21985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.235.34.82
Sep 29 08:16:48 nativespace-cdp sshd[21985]: Failed password for invalid user payara from 103.235.34.82 port 39148 ssh2
Sep 29 08:16:48 nativespace-cdp sshd[21985]: Received disconnect from 103.235.34.82 port 39148:11: Bye Bye [preauth]
Sep 29 08:16:48 nativespace-cdp sshd[21985]: Disconnected from 103.235.34.82 port 39148 [preauth]
Sep 29 08:16:57 nativespace-cdp sshd[22005]: Invalid user jenkins from 103.235.34.82 port 40556
Sep 29 08:16:57 nativespace-cdp sshd[22005]: input_userauth_request: invalid user jenkins [preauth]
Sep 29 08:16:57 nativespace-cdp sshd[22005]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 08:16:57 nativespace-cdp sshd[22005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.235.34.82
Sep 29 08:17:00 nativespace-cdp sshd[22005]: Failed password for invalid user jenkins from 103.235.34.82 port 40556 ssh2
Sep 29 08:21:34 nativespace-cdp sshd[23231]: Connection closed by 159.100.136.21 port 58050 [preauth]
Sep 29 08:26:33 nativespace-cdp sshd[24191]: Connection closed by 159.100.136.21 port 39742 [preauth]
Sep 29 08:31:33 nativespace-cdp sshd[25309]: Connection closed by 159.100.136.21 port 49232 [preauth]
Sep 29 08:36:36 nativespace-cdp sshd[26489]: Connection closed by 159.100.136.21 port 59274 [preauth]
Sep 29 08:41:33 nativespace-cdp sshd[27530]: Connection closed by 159.100.136.21 port 40536 [preauth]
Sep 29 08:46:33 nativespace-cdp sshd[28512]: Connection closed by 159.100.136.21 port 50258 [preauth]
Sep 29 08:51:33 nativespace-cdp sshd[29678]: Connection closed by 159.100.136.21 port 59744 [preauth]
Sep 29 08:56:33 nativespace-cdp sshd[30833]: Connection closed by 159.100.136.21 port 41246 [preauth]
Sep 29 09:01:34 nativespace-cdp sshd[32000]: Connection closed by 159.100.136.21 port 50892 [preauth]
Sep 29 09:06:34 nativespace-cdp sshd[739]: Connection closed by 159.100.136.21 port 60734 [preauth]
Sep 29 09:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 09:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:30 nativespace-cdp sudo[1504]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 09:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:30 nativespace-cdp sudo[1508]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 09:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:31 nativespace-cdp sudo[1514]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 09:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:31 nativespace-cdp sudo[1519]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 09:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:35 nativespace-cdp sudo[1524]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:35 nativespace-cdp sudo[1534]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:35 nativespace-cdp sudo[1537]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:35 nativespace-cdp sudo[1540]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:35 nativespace-cdp sudo[1543]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:35 nativespace-cdp sudo[1547]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:35 nativespace-cdp sudo[1550]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 09:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:48 nativespace-cdp sudo[1589]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 09:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:51 nativespace-cdp sudo[1593]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bemadonn user-2=belle user-3=ggaaorgu user-4=newstoda user-5=bedfords user-6=battlere user-7=oneoarco user-8=firstre2 user-9=vivienn1 user-10=brighto1 user-11=nstriton user-12=nativene user-13=stuartge user-14=askhform user-15=innovat1 user-16=skyfirec user-17=alexadmin user-18=southlon user-19=highlegh user-20=firstred user-21=costestimatorco user-22=firstrel user-23=clarkass user-24=coursemc user-25=opaiscyx user-26=firstres user-27=seftvta user-28=jonhartl user-29=ultbcrra user-30=thqkgnbz user-31=connectedshoppin user-32=ianrayne user-33=accooper user-34=carsinyo user-35=fetch user-36=hubmaster user-37=elecleis user-38=milloyco user-39=gilpin user-40=musorguk user-41=megacards user-42=wilsonsw user-43=sarafoundation user-44=atestord user-45=strathar user-46=brmrjxl user-47=lakesan1
Sep 29 09:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=magichat user-49=lbhyisi user-50=hhdugcor user-51=ptkxhsbt user-52=dickemery123 user-53=martsblo user-54=ulsukarm user-55=maflemin user-56=lbscrmod user-57=athenare user-58=connect9 user-59=vantagep user-60=markward user-61=foundation user-62=booff user-63=leereyn1 user-64=stephani user-65=still user-66=agproduc user-67=hodgesonweb user-68=theblack user-69=spectrum user-70=jarvisin user-71=sosevalu user-72=crrtipdl user-73=bakery user-74=boldover user-75=nove user-76=design user-77=kategilpin user-78=ladburyp user-79=dancinggardener user-80=stagingerris user-81=nvihkvu user-82=sketchy user-83=cath user-84=havantho user-85=what user-86=oubpgvbx user-87=tstardom user-88=careers user-89=nbhavers user-90=david user-91=mcdermos user-92=chrisdal user-93=jennimil user-94=tomandle user-95=romaldki user-96=branko user-97=outdoorc user-98=ranxterc user-99=hodgsonmail user-100=onlycont user-101=attlebor
Sep 29 09:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=lucy user-103=barbersh user-104=tigerlet user-105=hidden user-106=nomistakes user-107=isleofwi user-108=smrszyqg user-109=philmcph user-110=ctedorgu user-111=donnychicago user-112=steakbridieme user-113=firstre5 user-114=lkpier user-115=fortunaz user-116=health2045 user-117=leftie user-118=foods user-119=nscdp user-120=courseme user-121=eugincou user-122=hirefootballgame user-123=paulmca1 user-124=howardon user-125=pugwash user-126=cwsocial user-127=reliable user-128=ninejimm user-129=cathski user-130=cambria1 user-131=steve user-132=zebrapho user-133=bwppodcast user-134=sibtoncc user-135=asandcoc user-136=dhyana user-137=eatspam user-138=darkstar user-139=beauty user-140=nsceres user-141=burydropin user-142=fawcettd feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 29 09:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 09:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:52 nativespace-cdp sudo[1607]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 09:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:53 nativespace-cdp sudo[1616]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Apt62X4ATdbQabTG.~
Sep 29 09:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:53 nativespace-cdp sudo[1619]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Apt62X4ATdbQabTG.~'
Sep 29 09:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:53 nativespace-cdp sudo[1622]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Apt62X4ATdbQabTG.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 09:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:53 nativespace-cdp sudo[1627]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 09:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:53 nativespace-cdp sudo[1630]: pam_unix(sudo:session): session closed for user root
Sep 29 09:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 09:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 09:09:54 nativespace-cdp sudo[1649]: pam_unix(sudo:session): session closed for user root
Sep 29 09:11:33 nativespace-cdp sshd[2156]: Connection closed by 159.100.136.21 port 41912 [preauth]
Sep 29 09:12:26 nativespace-cdp sshd[2276]: Invalid user support from 179.33.186.151 port 52453
Sep 29 09:12:26 nativespace-cdp sshd[2276]: input_userauth_request: invalid user support [preauth]
Sep 29 09:12:26 nativespace-cdp sshd[2276]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 09:12:26 nativespace-cdp sshd[2276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151
Sep 29 09:12:28 nativespace-cdp sshd[2276]: Failed password for invalid user support from 179.33.186.151 port 52453 ssh2
Sep 29 09:12:31 nativespace-cdp sshd[2276]: Received disconnect from 179.33.186.151 port 52453:11: Bye Bye [preauth]
Sep 29 09:12:31 nativespace-cdp sshd[2276]: Disconnected from 179.33.186.151 port 52453 [preauth]
Sep 29 09:13:51 nativespace-cdp sshd[2480]: Did not receive identification string from 171.244.37.96 port 33896
Sep 29 09:14:08 nativespace-cdp sshd[2523]: Invalid user test from 101.36.110.224 port 38694
Sep 29 09:14:08 nativespace-cdp sshd[2523]: input_userauth_request: invalid user test [preauth]
Sep 29 09:14:08 nativespace-cdp sshd[2523]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 09:14:08 nativespace-cdp sshd[2523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.110.224
Sep 29 09:14:10 nativespace-cdp sshd[2523]: Failed password for invalid user test from 101.36.110.224 port 38694 ssh2
Sep 29 09:14:14 nativespace-cdp sshd[2523]: Received disconnect from 101.36.110.224 port 38694:11: Bye Bye [preauth]
Sep 29 09:14:14 nativespace-cdp sshd[2523]: Disconnected from 101.36.110.224 port 38694 [preauth]
Sep 29 09:15:10 nativespace-cdp sshd[2966]: Invalid user tomcat from 179.33.186.151 port 61081
Sep 29 09:15:10 nativespace-cdp sshd[2966]: input_userauth_request: invalid user tomcat [preauth]
Sep 29 09:15:10 nativespace-cdp sshd[2966]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 09:15:10 nativespace-cdp sshd[2966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151
Sep 29 09:15:12 nativespace-cdp sshd[2966]: Failed password for invalid user tomcat from 179.33.186.151 port 61081 ssh2
Sep 29 09:15:12 nativespace-cdp sshd[2966]: Received disconnect from 179.33.186.151 port 61081:11: Bye Bye [preauth]
Sep 29 09:15:12 nativespace-cdp sshd[2966]: Disconnected from 179.33.186.151 port 61081 [preauth]
Sep 29 09:15:52 nativespace-cdp sshd[3097]: Connection closed by 101.36.110.224 port 56374 [preauth]
Sep 29 09:16:00 nativespace-cdp sshd[3152]: Invalid user steam from 179.33.186.151 port 6640
Sep 29 09:16:00 nativespace-cdp sshd[3152]: input_userauth_request: invalid user steam [preauth]
Sep 29 09:16:00 nativespace-cdp sshd[3152]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 09:16:00 nativespace-cdp sshd[3152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151
Sep 29 09:16:02 nativespace-cdp sshd[3152]: Failed password for invalid user steam from 179.33.186.151 port 6640 ssh2
Sep 29 09:16:03 nativespace-cdp sshd[3152]: Received disconnect from 179.33.186.151 port 6640:11: Bye Bye [preauth]
Sep 29 09:16:03 nativespace-cdp sshd[3152]: Disconnected from 179.33.186.151 port 6640 [preauth]
Sep 29 09:16:02 nativespace-cdp sshd[3152]: Failed password for invalid user steam from 179.33.186.151 port 6640 ssh2
Sep 29 09:16:03 nativespace-cdp sshd[3152]: Received disconnect from 179.33.186.151 port 6640:11: Bye Bye [preauth]
Sep 29 09:16:03 nativespace-cdp sshd[3152]: Disconnected from 179.33.186.151 port 6640 [preauth]
Sep 29 09:16:33 nativespace-cdp sshd[3369]: Connection closed by 159.100.136.21 port 51848 [preauth]
Sep 29 09:19:15 nativespace-cdp sshd[3803]: Connection closed by 101.36.110.224 port 42696 [preauth]
Sep 29 09:21:33 nativespace-cdp sshd[4714]: Connection closed by 159.100.136.21 port 32856 [preauth]
Sep 29 09:23:51 nativespace-cdp sshd[5069]: Connection reset by 101.36.110.224 port 43272 [preauth]
Sep 29 09:25:57 nativespace-cdp sshd[5695]: Did not receive identification string from 101.36.110.224 port 43568
Sep 29 09:26:33 nativespace-cdp sshd[5812]: Connection closed by 159.100.136.21 port 42242 [preauth]
Sep 29 09:27:02 nativespace-cdp sshd[5856]: Connection closed by 101.36.110.224 port 57832 [preauth]
Sep 29 09:28:11 nativespace-cdp sshd[6022]: Connection closed by 101.36.110.224 port 43862 [preauth]
Sep 29 09:29:26 nativespace-cdp sshd[6187]: Connection closed by 101.36.110.224 port 58122 [preauth]
Sep 29 09:30:34 nativespace-cdp sshd[6589]: Connection closed by 101.36.110.224 port 44148 [preauth]
Sep 29 09:31:36 nativespace-cdp sshd[6804]: Connection closed by 159.100.136.21 port 52020 [preauth]
Sep 29 09:31:42 nativespace-cdp sshd[6816]: Connection closed by 101.36.110.224 port 58412 [preauth]
Sep 29 09:32:53 nativespace-cdp sshd[6978]: Connection closed by 101.36.110.224 port 44442 [preauth]
Sep 29 09:34:07 nativespace-cdp sshd[7157]: Connection closed by 101.36.110.224 port 58704 [preauth]
Sep 29 09:35:06 nativespace-cdp sshd[7681]: Invalid user sysadmin from 101.36.110.224 port 44734
Sep 29 09:35:06 nativespace-cdp sshd[7681]: input_userauth_request: invalid user sysadmin [preauth]
Sep 29 09:35:06 nativespace-cdp sshd[7681]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 09:35:06 nativespace-cdp sshd[7681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.110.224
Sep 29 09:35:08 nativespace-cdp sshd[7681]: Failed password for invalid user sysadmin from 101.36.110.224 port 44734 ssh2
Sep 29 09:35:08 nativespace-cdp sshd[7681]: Received disconnect from 101.36.110.224 port 44734:11: Bye Bye [preauth]
Sep 29 09:35:08 nativespace-cdp sshd[7681]: Disconnected from 101.36.110.224 port 44734 [preauth]
Sep 29 09:36:35 nativespace-cdp sshd[8122]: Connection closed by 159.100.136.21 port 33768 [preauth]
Sep 29 09:41:36 nativespace-cdp sshd[9162]: Connection closed by 159.100.136.21 port 43176 [preauth]
Sep 29 09:46:33 nativespace-cdp sshd[10180]: Connection closed by 159.100.136.21 port 52716 [preauth]
Sep 29 09:51:33 nativespace-cdp sshd[11505]: Connection closed by 159.100.136.21 port 34124 [preauth]
Sep 29 10:01:34 nativespace-cdp sshd[13609]: Connection closed by 159.100.136.21 port 53766 [preauth]
Sep 29 10:06:33 nativespace-cdp sshd[14668]: Connection closed by 159.100.136.21 port 35484 [preauth]
Sep 29 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:38 nativespace-cdp sudo[15545]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:38 nativespace-cdp sudo[15548]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 10:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:40 nativespace-cdp sudo[15551]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 10:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:40 nativespace-cdp sudo[15565]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 10:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:44 nativespace-cdp sudo[15569]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 10:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:44 nativespace-cdp sudo[15585]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 10:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:44 nativespace-cdp sudo[15588]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 10:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:44 nativespace-cdp sudo[15591]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 10:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:44 nativespace-cdp sudo[15594]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 10:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:44 nativespace-cdp sudo[15597]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 10:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:44 nativespace-cdp sudo[15601]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 10:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:50 nativespace-cdp sudo[15631]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 10:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:51 nativespace-cdp sudo[15637]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=stephani user-2=leereyn1 user-3=still user-4=agproduc user-5=spectrum user-6=hodgesonweb user-7=theblack user-8=jarvisin user-9=ulsukarm user-10=athenare user-11=connect9 user-12=vantagep user-13=maflemin user-14=lbscrmod user-15=foundation user-16=markward user-17=booff user-18=magichat user-19=lbhyisi user-20=hhdugcor user-21=dickemery123 user-22=ptkxhsbt user-23=martsblo user-24=musorguk user-25=megacards user-26=wilsonsw user-27=strathar user-28=sarafoundation user-29=atestord user-30=brmrjxl user-31=lakesan1 user-32=connectedshoppin user-33=thqkgnbz user-34=accooper user-35=ianrayne user-36=hubmaster user-37=carsinyo user-38=fetch user-39=gilpin user-40=milloyco user-41=elecleis user-42=firstred user-43=southlon user-44=highlegh user-45=clarkass user-46=firstrel user-47=costestimatorco
Sep 29 10:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=opaiscyx user-49=coursemc user-50=jonhartl user-51=seftvta user-52=ultbcrra user-53=firstres user-54=nativene user-55=innovat1 user-56=askhform user-57=stuartge user-58=alexadmin user-59=skyfirec user-60=ggaaorgu user-61=belle user-62=newstoda user-63=bemadonn user-64=bedfords user-65=firstre2 user-66=vivienn1 user-67=battlere user-68=oneoarco user-69=brighto1 user-70=nstriton user-71=dhyana user-72=beauty user-73=eatspam user-74=darkstar user-75=nsceres user-76=burydropin user-77=fawcettd user-78=steve user-79=bwppodcast user-80=zebrapho user-81=asandcoc user-82=sibtoncc user-83=eugincou user-84=courseme user-85=hirefootballgame user-86=howardon user-87=paulmca1 user-88=pugwash user-89=cwsocial user-90=cambria1 user-91=cathski user-92=ninejimm user-93=reliable user-94=hidden user-95=nomistakes user-96=barbersh user-97=tigerlet user-98=smrszyqg user-99=isleofwi user-100=lkpier user-101=ctedorgu
Sep 29 10:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=philmcph user-103=donnychicago user-104=steakbridieme user-105=firstre5 user-106=nscdp user-107=fortunaz user-108=health2045 user-109=foods user-110=leftie user-111=romaldki user-112=ranxterc user-113=outdoorc user-114=hodgsonmail user-115=branko user-116=onlycont user-117=attlebor user-118=lucy user-119=nbhavers user-120=careers user-121=david user-122=chrisdal user-123=mcdermos user-124=jennimil user-125=tomandle user-126=design user-127=ladburyp user-128=stagingerris user-129=dancinggardener user-130=kategilpin user-131=sketchy user-132=cath user-133=havantho user-134=nvihkvu user-135=tstardom user-136=oubpgvbx user-137=what user-138=bakery user-139=sosevalu user-140=crrtipdl user-141=boldover user-142=nove feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 10:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 10:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:52 nativespace-cdp sudo[15648]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 10:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:53 nativespace-cdp sudo[15657]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fRAeNQlFWpCWfta5.~
Sep 29 10:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:53 nativespace-cdp sudo[15661]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fRAeNQlFWpCWfta5.~'
Sep 29 10:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:53 nativespace-cdp sudo[15664]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fRAeNQlFWpCWfta5.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 10:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:53 nativespace-cdp sudo[15668]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 10:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:53 nativespace-cdp sudo[15672]: pam_unix(sudo:session): session closed for user root
Sep 29 10:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 10:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 10:09:55 nativespace-cdp sudo[15691]: pam_unix(sudo:session): session closed for user root
Sep 29 10:11:34 nativespace-cdp sshd[16251]: Connection closed by 159.100.136.21 port 44982 [preauth]
Sep 29 10:16:33 nativespace-cdp sshd[17414]: Connection closed by 159.100.136.21 port 54682 [preauth]
Sep 29 10:21:33 nativespace-cdp sshd[18697]: Connection closed by 159.100.136.21 port 35842 [preauth]
Sep 29 10:26:33 nativespace-cdp sshd[19712]: Connection closed by 159.100.136.21 port 45834 [preauth]
Sep 29 10:31:33 nativespace-cdp sshd[20933]: Connection closed by 159.100.136.21 port 55672 [preauth]
Sep 29 10:36:33 nativespace-cdp sshd[22211]: Connection closed by 159.100.136.21 port 37404 [preauth]
Sep 29 10:41:33 nativespace-cdp sshd[23311]: Connection closed by 159.100.136.21 port 47014 [preauth]
Sep 29 10:46:33 nativespace-cdp sshd[24445]: Connection closed by 159.100.136.21 port 56622 [preauth]
Sep 29 10:51:33 nativespace-cdp sshd[25533]: Connection closed by 159.100.136.21 port 37798 [preauth]
Sep 29 10:56:36 nativespace-cdp sshd[26663]: Connection closed by 159.100.136.21 port 47406 [preauth]
Sep 29 11:01:33 nativespace-cdp sshd[27785]: Connection closed by 159.100.136.21 port 56864 [preauth]
Sep 29 11:06:33 nativespace-cdp sshd[28811]: Connection closed by 159.100.136.21 port 38226 [preauth]
Sep 29 11:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 11:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:23 nativespace-cdp sudo[29440]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 11:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:23 nativespace-cdp sudo[29444]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 11:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:25 nativespace-cdp sudo[29447]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 11:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:25 nativespace-cdp sudo[29452]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 11:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:35 nativespace-cdp sudo[29455]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 11:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:36 nativespace-cdp sudo[29496]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 11:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:36 nativespace-cdp sudo[29499]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 11:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:36 nativespace-cdp sudo[29502]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 11:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:36 nativespace-cdp sudo[29505]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 11:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:36 nativespace-cdp sudo[29508]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 11:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:36 nativespace-cdp sudo[29513]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 11:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:39 nativespace-cdp sudo[29526]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 11:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:42 nativespace-cdp sudo[29530]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=strathar user-2=atestord user-3=sarafoundation user-4=lakesan1 user-5=brmrjxl user-6=megacards user-7=musorguk user-8=wilsonsw user-9=dickemery123 user-10=ptkxhsbt user-11=martsblo user-12=magichat user-13=hhdugcor user-14=lbhyisi user-15=vantagep user-16=athenare user-17=connect9 user-18=lbscrmod user-19=maflemin user-20=markward user-21=foundation user-22=booff user-23=ulsukarm user-24=spectrum user-25=theblack user-26=hodgesonweb user-27=jarvisin user-28=stephani user-29=leereyn1 user-30=agproduc user-31=still user-32=vivienn1 user-33=firstre2 user-34=oneoarco user-35=battlere user-36=nstriton user-37=brighto1 user-38=newstoda user-39=ggaaorgu user-40=belle user-41=bemadonn user-42=bedfords user-43=alexadmin user-44=skyfirec user-45=nativene user-46=innovat1 user-47=stuartge user-48=askhform
Sep 29 11:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=opaiscyx user-50=coursemc user-51=ultbcrra user-52=seftvta user-53=jonhartl user-54=firstres user-55=firstred user-56=highlegh user-57=southlon user-58=clarkass user-59=firstrel user-60=costestimatorco user-61=hubmaster user-62=fetch user-63=carsinyo user-64=gilpin user-65=milloyco user-66=elecleis user-67=connectedshoppin user-68=thqkgnbz user-69=accooper user-70=ianrayne user-71=lkpier user-72=firstre5 user-73=donnychicago user-74=steakbridieme user-75=philmcph user-76=ctedorgu user-77=nscdp user-78=foods user-79=leftie user-80=fortunaz user-81=health2045 user-82=nomistakes user-83=hidden user-84=barbersh user-85=tigerlet user-86=smrszyqg user-87=isleofwi user-88=cwsocial user-89=paulmca1 user-90=howardon user-91=pugwash user-92=cambria1 user-93=cathski user-94=reliable user-95=ninejimm user-96=eugincou user-97=courseme user-98=hirefootballgame user-99=sibtoncc user-100=asandcoc user-101=steve
Sep 29 11:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bwppodcast user-103=zebrapho user-104=nsceres user-105=fawcettd user-106=burydropin user-107=dhyana user-108=beauty user-109=darkstar user-110=eatspam user-111=boldover user-112=nove user-113=bakery user-114=crrtipdl user-115=sosevalu user-116=havantho user-117=sketchy user-118=cath user-119=nvihkvu user-120=oubpgvbx user-121=tstardom user-122=what user-123=design user-124=stagingerris user-125=dancinggardener user-126=ladburyp user-127=kategilpin user-128=jennimil user-129=tomandle user-130=david user-131=nbhavers user-132=careers user-133=chrisdal user-134=mcdermos user-135=onlycont user-136=lucy user-137=attlebor user-138=romaldki user-139=outdoorc user-140=ranxterc user-141=hodgsonmail user-142=branko feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 11:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 11:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:45 nativespace-cdp sudo[29546]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 29 11:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:51 nativespace-cdp sudo[29573]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 29 11:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 29 11:09:51 nativespace-cdp sudo[29578]: pam_unix(sudo:session): session closed for user onlycont
Sep 29 11:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 29 11:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:53 nativespace-cdp sudo[29591]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 29 11:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 11:09:53 nativespace-cdp sudo[29596]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 11:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 29 11:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:55 nativespace-cdp sudo[29616]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 29 11:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 29 11:09:56 nativespace-cdp sudo[29627]: pam_unix(sudo:session): session closed for user lkpier
Sep 29 11:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 29 11:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:57 nativespace-cdp sudo[29640]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 29 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 29 11:09:57 nativespace-cdp sudo[29645]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 29 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 29 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 29 11:09:57 nativespace-cdp sudo[29659]: pam_unix(sudo:session): session closed for user oneoarco
Sep 29 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 29 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:58 nativespace-cdp sudo[29670]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 29 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 29 11:09:58 nativespace-cdp sudo[29676]: pam_unix(sudo:session): session closed for user fortunaz
Sep 29 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 29 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:58 nativespace-cdp sudo[29687]: pam_unix(sudo:session): session closed for user root
Sep 29 11:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 11:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:09:58 nativespace-cdp sudo[29690]: pam_unix(sudo:session): session closed for user root
Sep 29 11:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 29 11:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:10:16 nativespace-cdp sudo[30703]: pam_unix(sudo:session): session closed for user root
Sep 29 11:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 29 11:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:10:16 nativespace-cdp sudo[30707]: pam_unix(sudo:session): session closed for user root
Sep 29 11:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 11:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:10:28 nativespace-cdp sudo[30742]: pam_unix(sudo:session): session closed for user root
Sep 29 11:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jOcNtSBtRhxShNt2.~
Sep 29 11:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:10:28 nativespace-cdp sudo[30746]: pam_unix(sudo:session): session closed for user root
Sep 29 11:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jOcNtSBtRhxShNt2.~'
Sep 29 11:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:10:28 nativespace-cdp sudo[30749]: pam_unix(sudo:session): session closed for user root
Sep 29 11:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-jOcNtSBtRhxShNt2.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 11:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:10:28 nativespace-cdp sudo[30753]: pam_unix(sudo:session): session closed for user root
Sep 29 11:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 11:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:10:28 nativespace-cdp sudo[30756]: pam_unix(sudo:session): session closed for user root
Sep 29 11:10:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 11:10:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 11:10:30 nativespace-cdp sudo[30769]: pam_unix(sudo:session): session closed for user root
Sep 29 11:11:33 nativespace-cdp sshd[31204]: Connection closed by 159.100.136.21 port 47644 [preauth]
Sep 29 11:16:33 nativespace-cdp sshd[32232]: Connection closed by 159.100.136.21 port 56490 [preauth]
Sep 29 11:21:33 nativespace-cdp sshd[1100]: Connection closed by 159.100.136.21 port 37442 [preauth]
Sep 29 11:26:33 nativespace-cdp sshd[2093]: Connection closed by 159.100.136.21 port 47270 [preauth]
Sep 29 11:31:33 nativespace-cdp sshd[3338]: Connection closed by 159.100.136.21 port 56724 [preauth]
Sep 29 11:36:33 nativespace-cdp sshd[4606]: Connection closed by 159.100.136.21 port 38166 [preauth]
Sep 29 11:41:33 nativespace-cdp sshd[5562]: Connection closed by 159.100.136.21 port 47352 [preauth]
Sep 29 11:43:04 nativespace-cdp sshd[5770]: Invalid user usuario from 47.236.125.99 port 42010
Sep 29 11:43:04 nativespace-cdp sshd[5770]: input_userauth_request: invalid user usuario [preauth]
Sep 29 11:43:04 nativespace-cdp sshd[5770]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 11:43:04 nativespace-cdp sshd[5770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.125.99
Sep 29 11:43:06 nativespace-cdp sshd[5770]: Failed password for invalid user usuario from 47.236.125.99 port 42010 ssh2
Sep 29 11:43:06 nativespace-cdp sshd[5770]: Received disconnect from 47.236.125.99 port 42010:11: Bye Bye [preauth]
Sep 29 11:43:06 nativespace-cdp sshd[5770]: Disconnected from 47.236.125.99 port 42010 [preauth]
Sep 29 11:43:12 nativespace-cdp sshd[5784]: Invalid user ts3 from 116.212.135.137 port 46298
Sep 29 11:43:12 nativespace-cdp sshd[5784]: input_userauth_request: invalid user ts3 [preauth]
Sep 29 11:43:12 nativespace-cdp sshd[5784]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 11:43:12 nativespace-cdp sshd[5784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Sep 29 11:43:14 nativespace-cdp sshd[5784]: Failed password for invalid user ts3 from 116.212.135.137 port 46298 ssh2
Sep 29 11:43:14 nativespace-cdp sshd[5784]: Received disconnect from 116.212.135.137 port 46298:11: Bye Bye [preauth]
Sep 29 11:43:14 nativespace-cdp sshd[5784]: Disconnected from 116.212.135.137 port 46298 [preauth]
Sep 29 11:45:24 nativespace-cdp sshd[6212]: Invalid user debianuser from 47.84.187.251 port 39736
Sep 29 11:45:24 nativespace-cdp sshd[6212]: input_userauth_request: invalid user debianuser [preauth]
Sep 29 11:45:24 nativespace-cdp sshd[6212]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 11:45:24 nativespace-cdp sshd[6212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.84.187.251
Sep 29 11:45:26 nativespace-cdp sshd[6212]: Failed password for invalid user debianuser from 47.84.187.251 port 39736 ssh2
Sep 29 11:45:27 nativespace-cdp sshd[6212]: Received disconnect from 47.84.187.251 port 39736:11: Bye Bye [preauth]
Sep 29 11:45:27 nativespace-cdp sshd[6212]: Disconnected from 47.84.187.251 port 39736 [preauth]
Sep 29 11:45:59 nativespace-cdp sshd[6358]: Connection reset by 116.212.135.137 port 60580 [preauth]
Sep 29 11:46:35 nativespace-cdp sshd[6547]: Connection closed by 159.100.136.21 port 56840 [preauth]
Sep 29 11:46:49 nativespace-cdp sshd[6584]: Invalid user usuario from 116.212.135.137 port 57158
Sep 29 11:46:49 nativespace-cdp sshd[6584]: input_userauth_request: invalid user usuario [preauth]
Sep 29 11:46:49 nativespace-cdp sshd[6584]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 11:46:49 nativespace-cdp sshd[6584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Sep 29 11:46:51 nativespace-cdp sshd[6584]: Failed password for invalid user usuario from 116.212.135.137 port 57158 ssh2
Sep 29 11:46:54 nativespace-cdp sshd[6584]: Received disconnect from 116.212.135.137 port 57158:11: Bye Bye [preauth]
Sep 29 11:46:54 nativespace-cdp sshd[6584]: Disconnected from 116.212.135.137 port 57158 [preauth]
Sep 29 11:46:58 nativespace-cdp sshd[6600]: Invalid user admin from 47.84.187.251 port 44446
Sep 29 11:46:58 nativespace-cdp sshd[6600]: input_userauth_request: invalid user admin [preauth]
Sep 29 11:46:58 nativespace-cdp sshd[6600]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 11:46:58 nativespace-cdp sshd[6600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.84.187.251
Sep 29 11:47:00 nativespace-cdp sshd[6600]: Failed password for invalid user admin from 47.84.187.251 port 44446 ssh2
Sep 29 11:47:00 nativespace-cdp sshd[6600]: Received disconnect from 47.84.187.251 port 44446:11: Bye Bye [preauth]
Sep 29 11:47:00 nativespace-cdp sshd[6600]: Disconnected from 47.84.187.251 port 44446 [preauth]
Sep 29 11:47:20 nativespace-cdp sshd[6674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.84.187.251  user=root
Sep 29 11:47:20 nativespace-cdp sshd[6674]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 11:47:21 nativespace-cdp sshd[6679]: Invalid user administrator from 47.236.125.99 port 45618
Sep 29 11:47:21 nativespace-cdp sshd[6679]: input_userauth_request: invalid user administrator [preauth]
Sep 29 11:47:21 nativespace-cdp sshd[6679]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 11:47:21 nativespace-cdp sshd[6679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.125.99
Sep 29 11:47:23 nativespace-cdp sshd[6674]: Failed password for root from 47.84.187.251 port 39792 ssh2
Sep 29 11:47:23 nativespace-cdp sshd[6679]: Failed password for invalid user administrator from 47.236.125.99 port 45618 ssh2
Sep 29 11:47:23 nativespace-cdp sshd[6674]: Received disconnect from 47.84.187.251 port 39792:11: Bye Bye [preauth]
Sep 29 11:47:23 nativespace-cdp sshd[6674]: Disconnected from 47.84.187.251 port 39792 [preauth]
Sep 29 11:47:27 nativespace-cdp sshd[6679]: Received disconnect from 47.236.125.99 port 45618:11: Bye Bye [preauth]
Sep 29 11:47:27 nativespace-cdp sshd[6679]: Disconnected from 47.236.125.99 port 45618 [preauth]
Sep 29 11:47:32 nativespace-cdp sshd[6731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.125.99  user=root
Sep 29 11:47:32 nativespace-cdp sshd[6731]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 11:47:35 nativespace-cdp sshd[6731]: Failed password for root from 47.236.125.99 port 50702 ssh2
Sep 29 11:47:40 nativespace-cdp sshd[6769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137  user=root
Sep 29 11:47:40 nativespace-cdp sshd[6769]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 11:47:42 nativespace-cdp sshd[6769]: Failed password for root from 116.212.135.137 port 45506 ssh2
Sep 29 11:47:43 nativespace-cdp sshd[6769]: Received disconnect from 116.212.135.137 port 45506:11: Bye Bye [preauth]
Sep 29 11:47:43 nativespace-cdp sshd[6769]: Disconnected from 116.212.135.137 port 45506 [preauth]
Sep 29 11:51:34 nativespace-cdp sshd[7867]: Connection closed by 159.100.136.21 port 37736 [preauth]
Sep 29 11:56:33 nativespace-cdp sshd[8844]: Connection closed by 159.100.136.21 port 47346 [preauth]
Sep 29 12:01:33 nativespace-cdp sshd[10140]: Connection closed by 159.100.136.21 port 56576 [preauth]
Sep 29 12:06:33 nativespace-cdp sshd[11313]: Connection closed by 159.100.136.21 port 37900 [preauth]
Sep 29 12:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 12:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:34 nativespace-cdp sudo[12021]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 12:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:34 nativespace-cdp sudo[12025]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 12:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:36 nativespace-cdp sudo[12028]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 12:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:36 nativespace-cdp sudo[12034]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 12:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:40 nativespace-cdp sudo[12038]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 12:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:40 nativespace-cdp sudo[12056]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 12:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:40 nativespace-cdp sudo[12059]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 12:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:40 nativespace-cdp sudo[12062]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 12:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:40 nativespace-cdp sudo[12065]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 12:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:40 nativespace-cdp sudo[12068]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 12:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:40 nativespace-cdp sudo[12071]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 12:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:48 nativespace-cdp sudo[12094]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 12:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:49 nativespace-cdp sudo[12098]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=theblack user-2=hodgesonweb user-3=spectrum user-4=jarvisin user-5=leereyn1 user-6=stephani user-7=agproduc user-8=still user-9=lbscrmod user-10=maflemin user-11=vantagep user-12=connect9 user-13=athenare user-14=foundation user-15=markward user-16=booff user-17=ulsukarm user-18=ptkxhsbt user-19=dickemery123 user-20=martsblo user-21=magichat user-22=hhdugcor user-23=lbhyisi user-24=atestord user-25=sarafoundation user-26=strathar user-27=lakesan1 user-28=brmrjxl user-29=megacards user-30=musorguk user-31=wilsonsw user-32=fetch user-33=carsinyo user-34=hubmaster user-35=elecleis user-36=milloyco user-37=gilpin user-38=thqkgnbz user-39=connectedshoppin user-40=ianrayne user-41=accooper user-42=opaiscyx user-43=coursemc user-44=firstres user-45=ultbcrra user-46=jonhartl user-47=seftvta
Sep 29 12:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=highlegh user-49=southlon user-50=firstred user-51=costestimatorco user-52=firstrel user-53=clarkass user-54=skyfirec user-55=alexadmin user-56=nativene user-57=askhform user-58=stuartge user-59=innovat1 user-60=oneoarco user-61=battlere user-62=vivienn1 user-63=firstre2 user-64=nstriton user-65=brighto1 user-66=bemadonn user-67=newstoda user-68=ggaaorgu user-69=belle user-70=bedfords user-71=nsceres user-72=fawcettd user-73=burydropin user-74=dhyana user-75=darkstar user-76=eatspam user-77=beauty user-78=sibtoncc user-79=asandcoc user-80=steve user-81=zebrapho user-82=bwppodcast user-83=cwsocial user-84=paulmca1 user-85=howardon user-86=pugwash user-87=ninejimm user-88=reliable user-89=cambria1 user-90=cathski user-91=courseme user-92=eugincou user-93=hirefootballgame user-94=donnychicago user-95=firstre5 user-96=steakbridieme user-97=ctedorgu user-98=philmcph user-99=lkpier user-100=leftie
Sep 29 12:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-101=foods user-102=fortunaz user-103=health2045 user-104=nscdp user-105=barbersh user-106=tigerlet user-107=nomistakes user-108=hidden user-109=smrszyqg user-110=isleofwi user-111=onlycont user-112=lucy user-113=attlebor user-114=romaldki user-115=branko user-116=hodgsonmail user-117=outdoorc user-118=ranxterc user-119=jennimil user-120=tomandle user-121=david user-122=careers user-123=nbhavers user-124=mcdermos user-125=chrisdal user-126=nvihkvu user-127=havantho user-128=sketchy user-129=cath user-130=what user-131=oubpgvbx user-132=tstardom user-133=design user-134=kategilpin user-135=stagingerris user-136=dancinggardener user-137=ladburyp user-138=boldover user-139=nove user-140=crrtipdl user-141=sosevalu user-142=bakery feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 29 12:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 12:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:51 nativespace-cdp sudo[12104]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 12:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:51 nativespace-cdp sudo[12111]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cvHtwML0JtGOlvnG.~
Sep 29 12:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:51 nativespace-cdp sudo[12114]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cvHtwML0JtGOlvnG.~'
Sep 29 12:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:51 nativespace-cdp sudo[12117]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-cvHtwML0JtGOlvnG.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 12:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:51 nativespace-cdp sudo[12121]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 12:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:51 nativespace-cdp sudo[12124]: pam_unix(sudo:session): session closed for user root
Sep 29 12:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 12:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 12:09:59 nativespace-cdp sudo[12162]: pam_unix(sudo:session): session closed for user root
Sep 29 12:11:33 nativespace-cdp sshd[12624]: Connection closed by 159.100.136.21 port 46920 [preauth]
Sep 29 12:16:33 nativespace-cdp sshd[13557]: Connection closed by 159.100.136.21 port 56690 [preauth]
Sep 29 12:21:33 nativespace-cdp sshd[14795]: Connection closed by 159.100.136.21 port 37900 [preauth]
Sep 29 12:26:33 nativespace-cdp sshd[15807]: Connection closed by 159.100.136.21 port 47904 [preauth]
Sep 29 12:31:33 nativespace-cdp sshd[16937]: Connection closed by 159.100.136.21 port 57494 [preauth]
Sep 29 12:36:33 nativespace-cdp sshd[18671]: Connection closed by 159.100.136.21 port 39148 [preauth]
Sep 29 12:41:33 nativespace-cdp sshd[19907]: Connection closed by 159.100.136.21 port 48640 [preauth]
Sep 29 12:46:35 nativespace-cdp sshd[21083]: Connection closed by 159.100.136.21 port 58220 [preauth]
Sep 29 12:51:33 nativespace-cdp sshd[22438]: Connection closed by 159.100.136.21 port 38992 [preauth]
Sep 29 12:56:33 nativespace-cdp sshd[23648]: Connection closed by 159.100.136.21 port 47690 [preauth]
Sep 29 13:01:33 nativespace-cdp sshd[24987]: Connection closed by 159.100.136.21 port 57082 [preauth]
Sep 29 13:04:55 nativespace-cdp crond[25673]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 29 13:04:55 nativespace-cdp crond[25672]: pam_systemd(crond:session): Failed to create session: Connection timed out
Sep 29 13:06:26 nativespace-cdp CROND[25728]: pam_systemd(crond:session): Failed to release session: Connection timed out
Sep 29 13:06:37 nativespace-cdp sshd[26075]: Connection closed by 159.100.136.21 port 37864 [preauth]
Sep 29 13:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 13:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:38 nativespace-cdp sudo[27311]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 13:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:38 nativespace-cdp sudo[27314]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 13:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:40 nativespace-cdp sudo[27317]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 13:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:40 nativespace-cdp sudo[27337]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 13:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:44 nativespace-cdp sudo[27341]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 13:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:44 nativespace-cdp sudo[27390]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 13:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:44 nativespace-cdp sudo[27394]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 13:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:44 nativespace-cdp sudo[27397]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 13:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:45 nativespace-cdp sudo[27400]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 13:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:45 nativespace-cdp sudo[27403]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 13:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:45 nativespace-cdp sudo[27408]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 13:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:57 nativespace-cdp sudo[27507]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 13:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:09:59 nativespace-cdp sudo[27511]: pam_unix(sudo:session): session closed for user root
Sep 29 13:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstrel user-2=clarkass user-3=costestimatorco user-4=firstred user-5=highlegh user-6=southlon user-7=ultbcrra user-8=seftvta user-9=jonhartl user-10=firstres user-11=opaiscyx user-12=coursemc user-13=accooper user-14=ianrayne user-15=connectedshoppin user-16=thqkgnbz user-17=milloyco user-18=gilpin user-19=elecleis user-20=hubmaster user-21=fetch user-22=carsinyo user-23=bedfords user-24=newstoda user-25=ggaaorgu user-26=belle user-27=bemadonn user-28=nstriton user-29=brighto1 user-30=vivienn1 user-31=firstre2 user-32=oneoarco user-33=battlere user-34=innovat1 user-35=askhform user-36=stuartge user-37=nativene user-38=skyfirec user-39=alexadmin user-40=ulsukarm user-41=booff user-42=markward user-43=foundation user-44=vantagep user-45=connect9 user-46=athenare user-47=lbscrmod user-48=maflemin
Sep 29 13:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=agproduc user-50=still user-51=stephani user-52=leereyn1 user-53=jarvisin user-54=spectrum user-55=hodgesonweb user-56=theblack user-57=wilsonsw user-58=megacards user-59=musorguk user-60=lakesan1 user-61=brmrjxl user-62=strathar user-63=atestord user-64=sarafoundation user-65=hhdugcor user-66=lbhyisi user-67=magichat user-68=martsblo user-69=dickemery123 user-70=ptkxhsbt user-71=chrisdal user-72=mcdermos user-73=david user-74=careers user-75=nbhavers user-76=tomandle user-77=jennimil user-78=hodgsonmail user-79=outdoorc user-80=ranxterc user-81=branko user-82=romaldki user-83=lucy user-84=attlebor user-85=onlycont user-86=bakery user-87=crrtipdl user-88=sosevalu user-89=nove user-90=boldover user-91=dancinggardener user-92=stagingerris user-93=ladburyp user-94=kategilpin user-95=design user-96=tstardom user-97=oubpgvbx user-98=what user-99=havantho user-100=cath user-101=sketchy user-102=nvihkvu
Sep 29 13:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=bwppodcast user-104=zebrapho user-105=steve user-106=sibtoncc user-107=asandcoc user-108=beauty user-109=darkstar user-110=eatspam user-111=dhyana user-112=fawcettd user-113=burydropin user-114=nsceres user-115=isleofwi user-116=smrszyqg user-117=nomistakes user-118=hidden user-119=tigerlet user-120=barbersh user-121=nscdp user-122=foods user-123=leftie user-124=health2045 user-125=fortunaz user-126=lkpier user-127=donnychicago user-128=steakbridieme user-129=firstre5 user-130=philmcph user-131=ctedorgu user-132=hirefootballgame user-133=eugincou user-134=courseme user-135=cathski user-136=cambria1 user-137=ninejimm user-138=reliable user-139=cwsocial user-140=pugwash user-141=paulmca1 user-142=howardon feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 13:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 13:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:10:00 nativespace-cdp sudo[27521]: pam_unix(sudo:session): session closed for user root
Sep 29 13:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 13:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:10:01 nativespace-cdp sudo[27531]: pam_unix(sudo:session): session closed for user root
Sep 29 13:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fb6AClGHhabZ1LoH.~
Sep 29 13:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:10:01 nativespace-cdp sudo[27534]: pam_unix(sudo:session): session closed for user root
Sep 29 13:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fb6AClGHhabZ1LoH.~'
Sep 29 13:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:10:01 nativespace-cdp sudo[27537]: pam_unix(sudo:session): session closed for user root
Sep 29 13:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-fb6AClGHhabZ1LoH.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 13:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:10:01 nativespace-cdp sudo[27542]: pam_unix(sudo:session): session closed for user root
Sep 29 13:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 13:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:10:01 nativespace-cdp sudo[27545]: pam_unix(sudo:session): session closed for user root
Sep 29 13:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 13:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 13:10:10 nativespace-cdp sudo[27714]: pam_unix(sudo:session): session closed for user root
Sep 29 13:11:33 nativespace-cdp sshd[28247]: Connection closed by 159.100.136.21 port 47286 [preauth]
Sep 29 13:16:33 nativespace-cdp sshd[30246]: Connection closed by 159.100.136.21 port 56298 [preauth]
Sep 29 13:21:33 nativespace-cdp sshd[32762]: Connection closed by 159.100.136.21 port 37324 [preauth]
Sep 29 13:26:33 nativespace-cdp sshd[2640]: Connection closed by 159.100.136.21 port 46338 [preauth]
Sep 29 13:31:33 nativespace-cdp sshd[6122]: Connection closed by 159.100.136.21 port 55978 [preauth]
Sep 29 13:36:33 nativespace-cdp sshd[7283]: Connection closed by 159.100.136.21 port 37234 [preauth]
Sep 29 13:41:33 nativespace-cdp sshd[8194]: Connection closed by 159.100.136.21 port 45776 [preauth]
Sep 29 13:46:34 nativespace-cdp sshd[9144]: Connection closed by 159.100.136.21 port 55372 [preauth]
Sep 29 13:51:35 nativespace-cdp sshd[10405]: Connection closed by 159.100.136.21 port 35856 [preauth]
Sep 29 13:56:34 nativespace-cdp sshd[11397]: Connection closed by 159.100.136.21 port 45286 [preauth]
Sep 29 13:56:37 nativespace-cdp sshd[11403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.241.112  user=root
Sep 29 13:56:37 nativespace-cdp sshd[11403]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 13:56:39 nativespace-cdp sshd[11403]: Failed password for root from 142.44.241.112 port 41250 ssh2
Sep 29 13:56:39 nativespace-cdp sshd[11403]: Received disconnect from 142.44.241.112 port 41250:11: Bye Bye [preauth]
Sep 29 13:56:39 nativespace-cdp sshd[11403]: Disconnected from 142.44.241.112 port 41250 [preauth]
Sep 29 13:59:43 nativespace-cdp sshd[11970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.182.234  user=root
Sep 29 13:59:43 nativespace-cdp sshd[11970]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 13:59:45 nativespace-cdp sshd[11970]: Failed password for root from 51.15.182.234 port 43558 ssh2
Sep 29 13:59:52 nativespace-cdp sshd[11970]: Received disconnect from 51.15.182.234 port 43558:11: Bye Bye [preauth]
Sep 29 13:59:52 nativespace-cdp sshd[11970]: Disconnected from 51.15.182.234 port 43558 [preauth]
Sep 29 14:01:35 nativespace-cdp sshd[12445]: Connection closed by 159.100.136.21 port 54666 [preauth]
Sep 29 14:02:00 nativespace-cdp sshd[12496]: Invalid user master from 142.44.241.112 port 38898
Sep 29 14:02:00 nativespace-cdp sshd[12496]: input_userauth_request: invalid user master [preauth]
Sep 29 14:02:00 nativespace-cdp sshd[12496]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:02:00 nativespace-cdp sshd[12496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.241.112
Sep 29 14:02:02 nativespace-cdp sshd[12496]: Failed password for invalid user master from 142.44.241.112 port 38898 ssh2
Sep 29 14:02:02 nativespace-cdp sshd[12496]: Received disconnect from 142.44.241.112 port 38898:11: Bye Bye [preauth]
Sep 29 14:02:02 nativespace-cdp sshd[12496]: Disconnected from 142.44.241.112 port 38898 [preauth]
Sep 29 14:02:43 nativespace-cdp sshd[12697]: Invalid user testuser from 142.44.241.112 port 53336
Sep 29 14:02:43 nativespace-cdp sshd[12697]: input_userauth_request: invalid user testuser [preauth]
Sep 29 14:02:43 nativespace-cdp sshd[12697]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:02:43 nativespace-cdp sshd[12697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.241.112
Sep 29 14:02:44 nativespace-cdp sshd[12697]: Failed password for invalid user testuser from 142.44.241.112 port 53336 ssh2
Sep 29 14:02:45 nativespace-cdp sshd[12697]: Received disconnect from 142.44.241.112 port 53336:11: Bye Bye [preauth]
Sep 29 14:02:45 nativespace-cdp sshd[12697]: Disconnected from 142.44.241.112 port 53336 [preauth]
Sep 29 14:02:54 nativespace-cdp sshd[12794]: Invalid user administrator from 47.236.50.27 port 41550
Sep 29 14:02:54 nativespace-cdp sshd[12794]: input_userauth_request: invalid user administrator [preauth]
Sep 29 14:02:54 nativespace-cdp sshd[12794]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:02:54 nativespace-cdp sshd[12794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.50.27
Sep 29 14:02:56 nativespace-cdp sshd[12794]: Failed password for invalid user administrator from 47.236.50.27 port 41550 ssh2
Sep 29 14:02:56 nativespace-cdp sshd[12794]: Received disconnect from 47.236.50.27 port 41550:11: Bye Bye [preauth]
Sep 29 14:02:56 nativespace-cdp sshd[12794]: Disconnected from 47.236.50.27 port 41550 [preauth]
Sep 29 14:03:39 nativespace-cdp sshd[12916]: Invalid user admin from 51.15.182.234 port 51024
Sep 29 14:03:39 nativespace-cdp sshd[12916]: input_userauth_request: invalid user admin [preauth]
Sep 29 14:03:39 nativespace-cdp sshd[12916]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:03:39 nativespace-cdp sshd[12916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.182.234
Sep 29 14:03:41 nativespace-cdp sshd[12916]: Failed password for invalid user admin from 51.15.182.234 port 51024 ssh2
Sep 29 14:03:49 nativespace-cdp sshd[12916]: Received disconnect from 51.15.182.234 port 51024:11: Bye Bye [preauth]
Sep 29 14:03:49 nativespace-cdp sshd[12916]: Disconnected from 51.15.182.234 port 51024 [preauth]
Sep 29 14:04:00 nativespace-cdp sshd[12978]: Invalid user admin from 47.236.50.27 port 58150
Sep 29 14:04:00 nativespace-cdp sshd[12978]: input_userauth_request: invalid user admin [preauth]
Sep 29 14:04:00 nativespace-cdp sshd[12978]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:04:00 nativespace-cdp sshd[12978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.50.27
Sep 29 14:04:01 nativespace-cdp sshd[12978]: Failed password for invalid user admin from 47.236.50.27 port 58150 ssh2
Sep 29 14:04:01 nativespace-cdp sshd[12978]: Received disconnect from 47.236.50.27 port 58150:11: Bye Bye [preauth]
Sep 29 14:04:01 nativespace-cdp sshd[12978]: Disconnected from 47.236.50.27 port 58150 [preauth]
Sep 29 14:04:21 nativespace-cdp sshd[13030]: Invalid user admin from 47.236.50.27 port 58786
Sep 29 14:04:21 nativespace-cdp sshd[13030]: input_userauth_request: invalid user admin [preauth]
Sep 29 14:04:21 nativespace-cdp sshd[13030]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:04:21 nativespace-cdp sshd[13030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.50.27
Sep 29 14:04:22 nativespace-cdp sshd[13037]: Invalid user basesystem from 51.15.182.234 port 34836
Sep 29 14:04:22 nativespace-cdp sshd[13037]: input_userauth_request: invalid user basesystem [preauth]
Sep 29 14:04:22 nativespace-cdp sshd[13037]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:04:22 nativespace-cdp sshd[13037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.182.234
Sep 29 14:04:23 nativespace-cdp sshd[13030]: Failed password for invalid user admin from 47.236.50.27 port 58786 ssh2
Sep 29 14:04:24 nativespace-cdp sshd[13037]: Failed password for invalid user basesystem from 51.15.182.234 port 34836 ssh2
Sep 29 14:06:33 nativespace-cdp sshd[13523]: Connection closed by 159.100.136.21 port 36156 [preauth]
Sep 29 14:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 14:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:37 nativespace-cdp sudo[14373]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 14:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:37 nativespace-cdp sudo[14376]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 14:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:38 nativespace-cdp sudo[14379]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:38 nativespace-cdp sudo[14387]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 14:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:41 nativespace-cdp sudo[14390]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 14:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:41 nativespace-cdp sudo[14402]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 14:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:41 nativespace-cdp sudo[14405]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 14:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:41 nativespace-cdp sudo[14409]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 14:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:41 nativespace-cdp sudo[14413]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 14:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:41 nativespace-cdp sudo[14416]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 14:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:41 nativespace-cdp sudo[14421]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 14:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:46 nativespace-cdp sudo[14439]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 14:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:47 nativespace-cdp sudo[14443]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=asandcoc user-2=sibtoncc user-3=bwppodcast user-4=zebrapho user-5=steve user-6=fawcettd user-7=burydropin user-8=nsceres user-9=beauty user-10=darkstar user-11=eatspam user-12=dhyana user-13=nscdp user-14=leftie user-15=foods user-16=fortunaz user-17=health2045 user-18=lkpier user-19=firstre5 user-20=donnychicago user-21=steakbridieme user-22=philmcph user-23=ctedorgu user-24=isleofwi user-25=smrszyqg user-26=nomistakes user-27=hidden user-28=barbersh user-29=tigerlet user-30=cathski user-31=cambria1 user-32=reliable user-33=ninejimm user-34=cwsocial user-35=pugwash user-36=howardon user-37=paulmca1 user-38=hirefootballgame user-39=eugincou user-40=courseme user-41=tomandle user-42=jennimil user-43=chrisdal user-44=mcdermos user-45=david user-46=careers user-47=nbhavers user-48=lucy
Sep 29 14:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=attlebor user-50=onlycont user-51=outdoorc user-52=ranxterc user-53=hodgsonmail user-54=branko user-55=romaldki user-56=nove user-57=boldover user-58=bakery user-59=crrtipdl user-60=sosevalu user-61=oubpgvbx user-62=tstardom user-63=what user-64=havantho user-65=sketchy user-66=cath user-67=nvihkvu user-68=stagingerris user-69=dancinggardener user-70=ladburyp user-71=kategilpin user-72=design user-73=markward user-74=booff user-75=foundation user-76=vantagep user-77=connect9 user-78=athenare user-79=lbscrmod user-80=maflemin user-81=ulsukarm user-82=jarvisin user-83=spectrum user-84=hodgesonweb user-85=theblack user-86=agproduc user-87=still user-88=stephani user-89=leereyn1 user-90=lakesan1 user-91=brmrjxl user-92=strathar user-93=atestord user-94=sarafoundation user-95=wilsonsw user-96=megacards user-97=musorguk user-98=martsblo user-99=dickemery123 user-100=ptkxhsbt user-101=hhdugcor user-102=lbhyisi
Sep 29 14:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=magichat user-104=ultbcrra user-105=jonhartl user-106=seftvta user-107=firstres user-108=opaiscyx user-109=coursemc user-110=clarkass user-111=firstrel user-112=costestimatorco user-113=firstred user-114=highlegh user-115=southlon user-116=milloyco user-117=gilpin user-118=elecleis user-119=hubmaster user-120=fetch user-121=carsinyo user-122=accooper user-123=ianrayne user-124=connectedshoppin user-125=thqkgnbz user-126=nstriton user-127=brighto1 user-128=vivienn1 user-129=firstre2 user-130=oneoarco user-131=battlere user-132=bedfords user-133=newstoda user-134=belle user-135=ggaaorgu user-136=bemadonn user-137=alexadmin user-138=skyfirec user-139=innovat1 user-140=stuartge user-141=askhform user-142=nativene feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 14:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 14:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:48 nativespace-cdp sudo[14448]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:49 nativespace-cdp sudo[14464]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-onyCDuVrjLNDUZf6.~
Sep 29 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:49 nativespace-cdp sudo[14467]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-onyCDuVrjLNDUZf6.~'
Sep 29 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:49 nativespace-cdp sudo[14470]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-onyCDuVrjLNDUZf6.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:49 nativespace-cdp sudo[14474]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 14:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:49 nativespace-cdp sudo[14477]: pam_unix(sudo:session): session closed for user root
Sep 29 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 14:09:56 nativespace-cdp sudo[14515]: pam_unix(sudo:session): session closed for user root
Sep 29 14:11:33 nativespace-cdp sshd[14904]: Connection closed by 159.100.136.21 port 45254 [preauth]
Sep 29 14:16:33 nativespace-cdp sshd[15899]: Connection closed by 159.100.136.21 port 55040 [preauth]
Sep 29 14:21:33 nativespace-cdp sshd[17182]: Connection closed by 159.100.136.21 port 36322 [preauth]
Sep 29 14:24:14 nativespace-cdp sshd[17643]: Invalid user ubuntu from 190.167.237.191 port 60842
Sep 29 14:24:14 nativespace-cdp sshd[17643]: input_userauth_request: invalid user ubuntu [preauth]
Sep 29 14:24:14 nativespace-cdp sshd[17643]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:24:14 nativespace-cdp sshd[17643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.167.237.191
Sep 29 14:24:16 nativespace-cdp sshd[17643]: Failed password for invalid user ubuntu from 190.167.237.191 port 60842 ssh2
Sep 29 14:24:16 nativespace-cdp sshd[17643]: Received disconnect from 190.167.237.191 port 60842:11: Bye Bye [preauth]
Sep 29 14:24:16 nativespace-cdp sshd[17643]: Disconnected from 190.167.237.191 port 60842 [preauth]
Sep 29 14:25:23 nativespace-cdp sshd[17941]: Invalid user tg from 197.243.14.52 port 45948
Sep 29 14:25:23 nativespace-cdp sshd[17941]: input_userauth_request: invalid user tg [preauth]
Sep 29 14:25:23 nativespace-cdp sshd[17941]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:25:23 nativespace-cdp sshd[17941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.243.14.52
Sep 29 14:25:25 nativespace-cdp sshd[17941]: Failed password for invalid user tg from 197.243.14.52 port 45948 ssh2
Sep 29 14:25:25 nativespace-cdp sshd[17941]: Received disconnect from 197.243.14.52 port 45948:11: Bye Bye [preauth]
Sep 29 14:25:25 nativespace-cdp sshd[17941]: Disconnected from 197.243.14.52 port 45948 [preauth]
Sep 29 14:25:54 nativespace-cdp sshd[18004]: Invalid user adsl from 189.4.4.85 port 52790
Sep 29 14:25:54 nativespace-cdp sshd[18004]: input_userauth_request: invalid user adsl [preauth]
Sep 29 14:25:54 nativespace-cdp sshd[18004]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:25:54 nativespace-cdp sshd[18004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.4.85
Sep 29 14:25:56 nativespace-cdp sshd[18004]: Failed password for invalid user adsl from 189.4.4.85 port 52790 ssh2
Sep 29 14:25:56 nativespace-cdp sshd[18004]: Received disconnect from 189.4.4.85 port 52790:11: Bye Bye [preauth]
Sep 29 14:25:56 nativespace-cdp sshd[18004]: Disconnected from 189.4.4.85 port 52790 [preauth]
Sep 29 14:26:33 nativespace-cdp sshd[18098]: Connection closed by 159.100.136.21 port 46182 [preauth]
Sep 29 14:29:20 nativespace-cdp sshd[18610]: Invalid user odoo from 190.167.237.191 port 58338
Sep 29 14:29:20 nativespace-cdp sshd[18610]: input_userauth_request: invalid user odoo [preauth]
Sep 29 14:29:20 nativespace-cdp sshd[18610]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:29:20 nativespace-cdp sshd[18610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.167.237.191
Sep 29 14:29:22 nativespace-cdp sshd[18610]: Failed password for invalid user odoo from 190.167.237.191 port 58338 ssh2
Sep 29 14:29:22 nativespace-cdp sshd[18610]: Received disconnect from 190.167.237.191 port 58338:11: Bye Bye [preauth]
Sep 29 14:29:22 nativespace-cdp sshd[18610]: Disconnected from 190.167.237.191 port 58338 [preauth]
Sep 29 14:29:43 nativespace-cdp sshd[18652]: Invalid user steam from 197.243.14.52 port 60624
Sep 29 14:29:43 nativespace-cdp sshd[18652]: input_userauth_request: invalid user steam [preauth]
Sep 29 14:29:43 nativespace-cdp sshd[18652]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:29:43 nativespace-cdp sshd[18652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.243.14.52
Sep 29 14:29:45 nativespace-cdp sshd[18652]: Failed password for invalid user steam from 197.243.14.52 port 60624 ssh2
Sep 29 14:29:45 nativespace-cdp sshd[18652]: Received disconnect from 197.243.14.52 port 60624:11: Bye Bye [preauth]
Sep 29 14:29:45 nativespace-cdp sshd[18652]: Disconnected from 197.243.14.52 port 60624 [preauth]
Sep 29 14:29:52 nativespace-cdp sshd[18674]: Invalid user test_user from 189.4.4.85 port 34628
Sep 29 14:29:52 nativespace-cdp sshd[18674]: input_userauth_request: invalid user test_user [preauth]
Sep 29 14:29:52 nativespace-cdp sshd[18674]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:29:52 nativespace-cdp sshd[18674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.4.85
Sep 29 14:29:54 nativespace-cdp sshd[18674]: Failed password for invalid user test_user from 189.4.4.85 port 34628 ssh2
Sep 29 14:30:02 nativespace-cdp sshd[18674]: Received disconnect from 189.4.4.85 port 34628:11: Bye Bye [preauth]
Sep 29 14:30:02 nativespace-cdp sshd[18674]: Disconnected from 189.4.4.85 port 34628 [preauth]
Sep 29 14:30:15 nativespace-cdp sshd[18892]: Invalid user usuario from 190.167.237.191 port 38250
Sep 29 14:30:15 nativespace-cdp sshd[18892]: input_userauth_request: invalid user usuario [preauth]
Sep 29 14:30:15 nativespace-cdp sshd[18892]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:30:15 nativespace-cdp sshd[18892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.167.237.191
Sep 29 14:30:17 nativespace-cdp sshd[18892]: Failed password for invalid user usuario from 190.167.237.191 port 38250 ssh2
Sep 29 14:30:17 nativespace-cdp sshd[18892]: Received disconnect from 190.167.237.191 port 38250:11: Bye Bye [preauth]
Sep 29 14:30:17 nativespace-cdp sshd[18892]: Disconnected from 190.167.237.191 port 38250 [preauth]
Sep 29 14:30:39 nativespace-cdp sshd[18956]: Invalid user user from 197.243.14.52 port 46874
Sep 29 14:30:39 nativespace-cdp sshd[18956]: input_userauth_request: invalid user user [preauth]
Sep 29 14:30:39 nativespace-cdp sshd[18956]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:30:39 nativespace-cdp sshd[18956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.243.14.52
Sep 29 14:30:41 nativespace-cdp sshd[18956]: Failed password for invalid user user from 197.243.14.52 port 46874 ssh2
Sep 29 14:30:45 nativespace-cdp sshd[19000]: Invalid user test from 189.4.4.85 port 47132
Sep 29 14:30:45 nativespace-cdp sshd[19000]: input_userauth_request: invalid user test [preauth]
Sep 29 14:30:45 nativespace-cdp sshd[19000]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:30:45 nativespace-cdp sshd[19000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.4.85
Sep 29 14:30:47 nativespace-cdp sshd[19000]: Failed password for invalid user test from 189.4.4.85 port 47132 ssh2
Sep 29 14:30:48 nativespace-cdp sshd[19000]: Received disconnect from 189.4.4.85 port 47132:11: Bye Bye [preauth]
Sep 29 14:30:48 nativespace-cdp sshd[19000]: Disconnected from 189.4.4.85 port 47132 [preauth]
Sep 29 14:31:35 nativespace-cdp sshd[19190]: Connection closed by 159.100.136.21 port 55736 [preauth]
Sep 29 14:32:30 nativespace-cdp sshd[19314]: Invalid user user from 61.220.44.44 port 34798
Sep 29 14:32:30 nativespace-cdp sshd[19314]: input_userauth_request: invalid user user [preauth]
Sep 29 14:32:30 nativespace-cdp sshd[19314]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:32:30 nativespace-cdp sshd[19314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.220.44.44
Sep 29 14:32:32 nativespace-cdp sshd[19314]: Failed password for invalid user user from 61.220.44.44 port 34798 ssh2
Sep 29 14:32:32 nativespace-cdp sshd[19314]: Received disconnect from 61.220.44.44 port 34798:11: Bye Bye [preauth]
Sep 29 14:32:32 nativespace-cdp sshd[19314]: Disconnected from 61.220.44.44 port 34798 [preauth]
Sep 29 14:36:04 nativespace-cdp sshd[20411]: Received disconnect from 61.220.44.44 port 50344:11: Bye Bye [preauth]
Sep 29 14:36:04 nativespace-cdp sshd[20411]: Disconnected from 61.220.44.44 port 50344 [preauth]
Sep 29 14:36:33 nativespace-cdp sshd[20493]: Connection closed by 159.100.136.21 port 37600 [preauth]
Sep 29 14:37:20 nativespace-cdp sshd[20610]: Invalid user sysadmin from 61.220.44.44 port 40878
Sep 29 14:37:20 nativespace-cdp sshd[20610]: input_userauth_request: invalid user sysadmin [preauth]
Sep 29 14:37:20 nativespace-cdp sshd[20610]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:37:20 nativespace-cdp sshd[20610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.220.44.44
Sep 29 14:37:22 nativespace-cdp sshd[20610]: Failed password for invalid user sysadmin from 61.220.44.44 port 40878 ssh2
Sep 29 14:37:22 nativespace-cdp sshd[20610]: Received disconnect from 61.220.44.44 port 40878:11: Bye Bye [preauth]
Sep 29 14:37:22 nativespace-cdp sshd[20610]: Disconnected from 61.220.44.44 port 40878 [preauth]
Sep 29 14:38:39 nativespace-cdp sshd[20935]: Invalid user test from 61.220.44.44 port 59579
Sep 29 14:38:39 nativespace-cdp sshd[20935]: input_userauth_request: invalid user test [preauth]
Sep 29 14:38:39 nativespace-cdp sshd[20935]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 14:38:39 nativespace-cdp sshd[20935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.220.44.44
Sep 29 14:38:41 nativespace-cdp sshd[20935]: Failed password for invalid user test from 61.220.44.44 port 59579 ssh2
Sep 29 14:41:33 nativespace-cdp sshd[21583]: Connection closed by 159.100.136.21 port 46794 [preauth]
Sep 29 14:46:33 nativespace-cdp sshd[22586]: Connection closed by 159.100.136.21 port 56634 [preauth]
Sep 29 14:51:33 nativespace-cdp sshd[23712]: Connection closed by 159.100.136.21 port 38032 [preauth]
Sep 29 14:56:35 nativespace-cdp sshd[24894]: Connection closed by 159.100.136.21 port 47958 [preauth]
Sep 29 15:01:36 nativespace-cdp sshd[25981]: Connection closed by 159.100.136.21 port 57036 [preauth]
Sep 29 15:06:34 nativespace-cdp sshd[27198]: Connection closed by 159.100.136.21 port 37552 [preauth]
Sep 29 15:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 15:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:32 nativespace-cdp sudo[27807]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 15:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:32 nativespace-cdp sudo[27810]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 15:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:33 nativespace-cdp sudo[27813]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 15:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:33 nativespace-cdp sudo[27820]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 15:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:36 nativespace-cdp sudo[27823]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 15:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:36 nativespace-cdp sudo[27832]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 15:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:36 nativespace-cdp sudo[27835]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 15:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:36 nativespace-cdp sudo[27838]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 15:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:36 nativespace-cdp sudo[27841]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 15:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:36 nativespace-cdp sudo[27844]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 15:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:36 nativespace-cdp sudo[27847]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 15:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:44 nativespace-cdp sudo[27873]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 15:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:45 nativespace-cdp sudo[27877]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=chrisdal user-2=mcdermos user-3=david user-4=careers user-5=nbhavers user-6=tomandle user-7=jennimil user-8=outdoorc user-9=ranxterc user-10=hodgsonmail user-11=branko user-12=romaldki user-13=lucy user-14=attlebor user-15=onlycont user-16=bakery user-17=crrtipdl user-18=sosevalu user-19=nove user-20=boldover user-21=stagingerris user-22=dancinggardener user-23=ladburyp user-24=kategilpin user-25=design user-26=oubpgvbx user-27=tstardom user-28=what user-29=havantho user-30=cath user-31=sketchy user-32=nvihkvu user-33=bwppodcast user-34=zebrapho user-35=steve user-36=sibtoncc user-37=asandcoc user-38=beauty user-39=darkstar user-40=eatspam user-41=dhyana user-42=fawcettd user-43=burydropin user-44=nsceres user-45=smrszyqg user-46=isleofwi user-47=nomistakes user-48=hidden user-49=tigerlet
Sep 29 15:09:45 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=barbersh user-51=nscdp user-52=foods user-53=leftie user-54=health2045 user-55=fortunaz user-56=lkpier user-57=donnychicago user-58=firstre5 user-59=steakbridieme user-60=ctedorgu user-61=philmcph user-62=hirefootballgame user-63=eugincou user-64=courseme user-65=cathski user-66=cambria1 user-67=ninejimm user-68=reliable user-69=cwsocial user-70=paulmca1 user-71=pugwash user-72=howardon user-73=firstrel user-74=clarkass user-75=costestimatorco user-76=firstred user-77=highlegh user-78=southlon user-79=ultbcrra user-80=jonhartl user-81=seftvta user-82=firstres user-83=coursemc user-84=opaiscyx user-85=accooper user-86=ianrayne user-87=connectedshoppin user-88=thqkgnbz user-89=gilpin user-90=milloyco user-91=elecleis user-92=hubmaster user-93=fetch user-94=carsinyo user-95=bedfords user-96=newstoda user-97=ggaaorgu user-98=belle user-99=bemadonn user-100=nstriton user-101=brighto1 user-102=vivienn1
Sep 29 15:09:45 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstre2 user-104=oneoarco user-105=battlere user-106=innovat1 user-107=stuartge user-108=askhform user-109=nativene user-110=skyfirec user-111=alexadmin user-112=ulsukarm user-113=markward user-114=booff user-115=foundation user-116=vantagep user-117=connect9 user-118=athenare user-119=lbscrmod user-120=maflemin user-121=agproduc user-122=still user-123=stephani user-124=leereyn1 user-125=jarvisin user-126=spectrum user-127=theblack user-128=hodgesonweb user-129=wilsonsw user-130=megacards user-131=musorguk user-132=brmrjxl user-133=lakesan1 user-134=strathar user-135=atestord user-136=sarafoundation user-137=hhdugcor user-138=lbhyisi user-139=magichat user-140=martsblo user-141=dickemery123 user-142=ptkxhsbt feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 15:09:45 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 15:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:46 nativespace-cdp sudo[27881]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:46 nativespace-cdp sudo[27887]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bT1t1zG9NxZEWy8b.~
Sep 29 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:46 nativespace-cdp sudo[27891]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bT1t1zG9NxZEWy8b.~'
Sep 29 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:46 nativespace-cdp sudo[27894]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-bT1t1zG9NxZEWy8b.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:46 nativespace-cdp sudo[27898]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 15:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:46 nativespace-cdp sudo[27901]: pam_unix(sudo:session): session closed for user root
Sep 29 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 15:09:53 nativespace-cdp sudo[27950]: pam_unix(sudo:session): session closed for user root
Sep 29 15:10:14 nativespace-cdp sshd[28207]: Invalid user administrator from 91.103.252.1 port 36490
Sep 29 15:10:14 nativespace-cdp sshd[28207]: input_userauth_request: invalid user administrator [preauth]
Sep 29 15:10:14 nativespace-cdp sshd[28207]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:10:14 nativespace-cdp sshd[28207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.103.252.1
Sep 29 15:10:16 nativespace-cdp sshd[28207]: Failed password for invalid user administrator from 91.103.252.1 port 36490 ssh2
Sep 29 15:10:16 nativespace-cdp sshd[28207]: Received disconnect from 91.103.252.1 port 36490:11: Bye Bye [preauth]
Sep 29 15:10:16 nativespace-cdp sshd[28207]: Disconnected from 91.103.252.1 port 36490 [preauth]
Sep 29 15:11:33 nativespace-cdp sshd[28482]: Connection closed by 159.100.136.21 port 46866 [preauth]
Sep 29 15:13:06 nativespace-cdp sshd[28840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.182.255.133  user=root
Sep 29 15:13:06 nativespace-cdp sshd[28840]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 15:13:08 nativespace-cdp sshd[28840]: Failed password for root from 147.182.255.133 port 51000 ssh2
Sep 29 15:13:10 nativespace-cdp sshd[28840]: Received disconnect from 147.182.255.133 port 51000:11: Bye Bye [preauth]
Sep 29 15:13:10 nativespace-cdp sshd[28840]: Disconnected from 147.182.255.133 port 51000 [preauth]
Sep 29 15:16:26 nativespace-cdp sshd[29568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.103.252.1  user=root
Sep 29 15:16:26 nativespace-cdp sshd[29568]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 15:16:28 nativespace-cdp sshd[29568]: Failed password for root from 91.103.252.1 port 50082 ssh2
Sep 29 15:16:28 nativespace-cdp sshd[29568]: Received disconnect from 91.103.252.1 port 50082:11: Bye Bye [preauth]
Sep 29 15:16:28 nativespace-cdp sshd[29568]: Disconnected from 91.103.252.1 port 50082 [preauth]
Sep 29 15:16:39 nativespace-cdp sshd[29611]: Invalid user cacti from 147.182.255.133 port 39078
Sep 29 15:16:39 nativespace-cdp sshd[29611]: input_userauth_request: invalid user cacti [preauth]
Sep 29 15:16:39 nativespace-cdp sshd[29611]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:16:39 nativespace-cdp sshd[29611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.182.255.133
Sep 29 15:16:41 nativespace-cdp sshd[29611]: Failed password for invalid user cacti from 147.182.255.133 port 39078 ssh2
Sep 29 15:16:41 nativespace-cdp sshd[29611]: Received disconnect from 147.182.255.133 port 39078:11: Bye Bye [preauth]
Sep 29 15:16:41 nativespace-cdp sshd[29611]: Disconnected from 147.182.255.133 port 39078 [preauth]
Sep 29 15:17:04 nativespace-cdp sshd[29675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.103.252.1  user=root
Sep 29 15:17:04 nativespace-cdp sshd[29675]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 15:17:06 nativespace-cdp sshd[29675]: Failed password for root from 91.103.252.1 port 33728 ssh2
Sep 29 15:17:06 nativespace-cdp sshd[29675]: Received disconnect from 91.103.252.1 port 33728:11: Bye Bye [preauth]
Sep 29 15:17:06 nativespace-cdp sshd[29675]: Disconnected from 91.103.252.1 port 33728 [preauth]
Sep 29 15:17:21 nativespace-cdp sshd[29734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.182.255.133  user=david
Sep 29 15:17:23 nativespace-cdp sshd[29734]: Failed password for david from 147.182.255.133 port 47270 ssh2
Sep 29 15:17:25 nativespace-cdp sshd[29734]: Received disconnect from 147.182.255.133 port 47270:11: Bye Bye [preauth]
Sep 29 15:17:25 nativespace-cdp sshd[29734]: Disconnected from 147.182.255.133 port 47270 [preauth]
Sep 29 15:21:33 nativespace-cdp sshd[30917]: Connection closed by 159.100.136.21 port 37648 [preauth]
Sep 29 15:26:34 nativespace-cdp sshd[31946]: Connection closed by 159.100.136.21 port 47508 [preauth]
Sep 29 15:31:12 nativespace-cdp sshd[478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.84.84.252  user=root
Sep 29 15:31:12 nativespace-cdp sshd[478]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 15:31:15 nativespace-cdp sshd[478]: Failed password for root from 47.84.84.252 port 4668 ssh2
Sep 29 15:31:15 nativespace-cdp sshd[478]: Received disconnect from 47.84.84.252 port 4668:11: Bye Bye [preauth]
Sep 29 15:31:15 nativespace-cdp sshd[478]: Disconnected from 47.84.84.252 port 4668 [preauth]
Sep 29 15:31:33 nativespace-cdp sshd[559]: Connection closed by 159.100.136.21 port 57162 [preauth]
Sep 29 15:31:42 nativespace-cdp sshd[575]: Invalid user test_user from 103.28.52.6 port 37660
Sep 29 15:31:42 nativespace-cdp sshd[575]: input_userauth_request: invalid user test_user [preauth]
Sep 29 15:31:42 nativespace-cdp sshd[575]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:31:42 nativespace-cdp sshd[575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.28.52.6
Sep 29 15:31:44 nativespace-cdp sshd[575]: Failed password for invalid user test_user from 103.28.52.6 port 37660 ssh2
Sep 29 15:31:47 nativespace-cdp sshd[575]: Received disconnect from 103.28.52.6 port 37660:11: Bye Bye [preauth]
Sep 29 15:31:47 nativespace-cdp sshd[575]: Disconnected from 103.28.52.6 port 37660 [preauth]
Sep 29 15:33:29 nativespace-cdp sshd[973]: Invalid user test_user from 47.84.84.252 port 33250
Sep 29 15:33:29 nativespace-cdp sshd[973]: input_userauth_request: invalid user test_user [preauth]
Sep 29 15:33:29 nativespace-cdp sshd[973]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:33:29 nativespace-cdp sshd[973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.84.84.252
Sep 29 15:33:31 nativespace-cdp sshd[973]: Failed password for invalid user test_user from 47.84.84.252 port 33250 ssh2
Sep 29 15:33:31 nativespace-cdp sshd[973]: Received disconnect from 47.84.84.252 port 33250:11: Bye Bye [preauth]
Sep 29 15:33:31 nativespace-cdp sshd[973]: Disconnected from 47.84.84.252 port 33250 [preauth]
Sep 29 15:33:44 nativespace-cdp sshd[1021]: Invalid user cacti from 146.190.136.122 port 34882
Sep 29 15:33:44 nativespace-cdp sshd[1021]: input_userauth_request: invalid user cacti [preauth]
Sep 29 15:33:44 nativespace-cdp sshd[1021]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:33:44 nativespace-cdp sshd[1021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.136.122
Sep 29 15:33:45 nativespace-cdp sshd[1029]: Invalid user administrator from 47.84.84.252 port 38078
Sep 29 15:33:45 nativespace-cdp sshd[1029]: input_userauth_request: invalid user administrator [preauth]
Sep 29 15:33:45 nativespace-cdp sshd[1029]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:33:45 nativespace-cdp sshd[1029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.84.84.252
Sep 29 15:33:46 nativespace-cdp sshd[1021]: Failed password for invalid user cacti from 146.190.136.122 port 34882 ssh2
Sep 29 15:33:46 nativespace-cdp sshd[1021]: Received disconnect from 146.190.136.122 port 34882:11: Bye Bye [preauth]
Sep 29 15:33:46 nativespace-cdp sshd[1021]: Disconnected from 146.190.136.122 port 34882 [preauth]
Sep 29 15:33:47 nativespace-cdp sshd[1029]: Failed password for invalid user administrator from 47.84.84.252 port 38078 ssh2
Sep 29 15:33:50 nativespace-cdp sshd[1029]: Received disconnect from 47.84.84.252 port 38078:11: Bye Bye [preauth]
Sep 29 15:33:50 nativespace-cdp sshd[1029]: Disconnected from 47.84.84.252 port 38078 [preauth]
Sep 29 15:34:38 nativespace-cdp sshd[1202]: Invalid user basesystem from 138.68.140.83 port 35336
Sep 29 15:34:38 nativespace-cdp sshd[1202]: input_userauth_request: invalid user basesystem [preauth]
Sep 29 15:34:38 nativespace-cdp sshd[1202]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:34:38 nativespace-cdp sshd[1202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.140.83
Sep 29 15:34:40 nativespace-cdp sshd[1202]: Failed password for invalid user basesystem from 138.68.140.83 port 35336 ssh2
Sep 29 15:34:40 nativespace-cdp sshd[1202]: Received disconnect from 138.68.140.83 port 35336:11: Bye Bye [preauth]
Sep 29 15:34:40 nativespace-cdp sshd[1202]: Disconnected from 138.68.140.83 port 35336 [preauth]
Sep 29 15:35:16 nativespace-cdp sshd[1645]: Invalid user anand from 146.190.136.122 port 54466
Sep 29 15:35:16 nativespace-cdp sshd[1645]: input_userauth_request: invalid user anand [preauth]
Sep 29 15:35:16 nativespace-cdp sshd[1645]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:35:16 nativespace-cdp sshd[1645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.136.122
Sep 29 15:35:18 nativespace-cdp sshd[1645]: Failed password for invalid user anand from 146.190.136.122 port 54466 ssh2
Sep 29 15:35:18 nativespace-cdp sshd[1645]: Received disconnect from 146.190.136.122 port 54466:11: Bye Bye [preauth]
Sep 29 15:35:18 nativespace-cdp sshd[1645]: Disconnected from 146.190.136.122 port 54466 [preauth]
Sep 29 15:35:24 nativespace-cdp sshd[1671]: Invalid user admin from 138.68.140.83 port 51616
Sep 29 15:35:24 nativespace-cdp sshd[1671]: input_userauth_request: invalid user admin [preauth]
Sep 29 15:35:24 nativespace-cdp sshd[1671]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:35:24 nativespace-cdp sshd[1671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.140.83
Sep 29 15:35:26 nativespace-cdp sshd[1671]: Failed password for invalid user admin from 138.68.140.83 port 51616 ssh2
Sep 29 15:35:26 nativespace-cdp sshd[1671]: Received disconnect from 138.68.140.83 port 51616:11: Bye Bye [preauth]
Sep 29 15:35:26 nativespace-cdp sshd[1671]: Disconnected from 138.68.140.83 port 51616 [preauth]
Sep 29 15:35:58 nativespace-cdp sshd[1793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.136.122  user=root
Sep 29 15:35:58 nativespace-cdp sshd[1793]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 15:36:00 nativespace-cdp sshd[1793]: Failed password for root from 146.190.136.122 port 35824 ssh2
Sep 29 15:36:08 nativespace-cdp sshd[1877]: Invalid user admin from 138.68.140.83 port 55254
Sep 29 15:36:08 nativespace-cdp sshd[1877]: input_userauth_request: invalid user admin [preauth]
Sep 29 15:36:08 nativespace-cdp sshd[1877]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:36:08 nativespace-cdp sshd[1877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.140.83
Sep 29 15:36:08 nativespace-cdp sshd[1869]: Connection closed by 103.28.52.6 port 51298 [preauth]
Sep 29 15:36:10 nativespace-cdp sshd[1877]: Failed password for invalid user admin from 138.68.140.83 port 55254 ssh2
Sep 29 15:36:33 nativespace-cdp sshd[1962]: Connection closed by 159.100.136.21 port 38938 [preauth]
Sep 29 15:38:00 nativespace-cdp sshd[2186]: Invalid user daniel from 103.28.52.6 port 45748
Sep 29 15:38:00 nativespace-cdp sshd[2186]: input_userauth_request: invalid user daniel [preauth]
Sep 29 15:38:00 nativespace-cdp sshd[2186]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 15:38:00 nativespace-cdp sshd[2186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.28.52.6
Sep 29 15:38:02 nativespace-cdp sshd[2186]: Failed password for invalid user daniel from 103.28.52.6 port 45748 ssh2
Sep 29 15:38:03 nativespace-cdp sshd[2186]: Received disconnect from 103.28.52.6 port 45748:11: Bye Bye [preauth]
Sep 29 15:38:03 nativespace-cdp sshd[2186]: Disconnected from 103.28.52.6 port 45748 [preauth]
Sep 29 15:38:53 nativespace-cdp sshd[2408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.28.52.6  user=root
Sep 29 15:38:53 nativespace-cdp sshd[2408]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 15:38:54 nativespace-cdp sshd[2408]: Failed password for root from 103.28.52.6 port 45278 ssh2
Sep 29 15:41:33 nativespace-cdp sshd[3030]: Connection closed by 159.100.136.21 port 48582 [preauth]
Sep 29 15:46:34 nativespace-cdp sshd[4077]: Connection closed by 159.100.136.21 port 58266 [preauth]
Sep 29 15:51:35 nativespace-cdp sshd[5277]: Connection closed by 159.100.136.21 port 39160 [preauth]
Sep 29 15:56:35 nativespace-cdp sshd[6249]: Connection closed by 159.100.136.21 port 48804 [preauth]
Sep 29 16:01:33 nativespace-cdp sshd[7434]: Connection closed by 159.100.136.21 port 58236 [preauth]
Sep 29 16:06:33 nativespace-cdp sshd[8827]: Connection closed by 159.100.136.21 port 39874 [preauth]
Sep 29 16:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 16:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:39 nativespace-cdp sudo[9356]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 16:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:39 nativespace-cdp sudo[9360]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 16:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:41 nativespace-cdp sudo[9363]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 16:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:41 nativespace-cdp sudo[9375]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 16:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:47 nativespace-cdp sudo[9378]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:47 nativespace-cdp sudo[9398]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:47 nativespace-cdp sudo[9402]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:47 nativespace-cdp sudo[9405]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:47 nativespace-cdp sudo[9408]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:47 nativespace-cdp sudo[9411]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:47 nativespace-cdp sudo[9414]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 16:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:51 nativespace-cdp sudo[9425]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 16:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:52 nativespace-cdp sudo[9436]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=costestimatorco user-2=clarkass user-3=firstrel user-4=highlegh user-5=southlon user-6=firstred user-7=firstres user-8=ultbcrra user-9=jonhartl user-10=seftvta user-11=opaiscyx user-12=coursemc user-13=ianrayne user-14=accooper user-15=thqkgnbz user-16=connectedshoppin user-17=elecleis user-18=milloyco user-19=gilpin user-20=fetch user-21=carsinyo user-22=hubmaster user-23=bedfords user-24=bemadonn user-25=newstoda user-26=belle user-27=ggaaorgu user-28=nstriton user-29=brighto1 user-30=oneoarco user-31=battlere user-32=vivienn1 user-33=firstre2 user-34=askhform user-35=stuartge user-36=innovat1 user-37=nativene user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=markward user-42=foundation user-43=booff user-44=lbscrmod user-45=maflemin user-46=vantagep user-47=athenare user-48=connect9
Sep 29 16:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=agproduc user-50=still user-51=leereyn1 user-52=stephani user-53=jarvisin user-54=hodgesonweb user-55=theblack user-56=spectrum user-57=wilsonsw user-58=megacards user-59=musorguk user-60=brmrjxl user-61=lakesan1 user-62=atestord user-63=sarafoundation user-64=strathar user-65=hhdugcor user-66=lbhyisi user-67=magichat user-68=martsblo user-69=ptkxhsbt user-70=dickemery123 user-71=mcdermos user-72=chrisdal user-73=david user-74=careers user-75=nbhavers user-76=tomandle user-77=jennimil user-78=branko user-79=ranxterc user-80=outdoorc user-81=hodgsonmail user-82=romaldki user-83=lucy user-84=attlebor user-85=onlycont user-86=crrtipdl user-87=sosevalu user-88=bakery user-89=nove user-90=boldover user-91=kategilpin user-92=stagingerris user-93=dancinggardener user-94=ladburyp user-95=design user-96=what user-97=tstardom user-98=oubpgvbx user-99=nvihkvu user-100=havantho user-101=cath user-102=sketchy
Sep 29 16:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=zebrapho user-104=bwppodcast user-105=steve user-106=sibtoncc user-107=asandcoc user-108=darkstar user-109=eatspam user-110=beauty user-111=dhyana user-112=fawcettd user-113=burydropin user-114=nsceres user-115=isleofwi user-116=smrszyqg user-117=tigerlet user-118=barbersh user-119=nomistakes user-120=hidden user-121=foods user-122=leftie user-123=health2045 user-124=fortunaz user-125=nscdp user-126=donnychicago user-127=firstre5 user-128=steakbridieme user-129=philmcph user-130=ctedorgu user-131=lkpier user-132=hirefootballgame user-133=courseme user-134=eugincou user-135=reliable user-136=ninejimm user-137=cambria1 user-138=cathski user-139=cwsocial user-140=pugwash user-141=howardon user-142=paulmca1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 16:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 16:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:55 nativespace-cdp sudo[9442]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:56 nativespace-cdp sudo[9450]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-e5uDwUioo7tac7rm.~
Sep 29 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:56 nativespace-cdp sudo[9455]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-e5uDwUioo7tac7rm.~'
Sep 29 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:56 nativespace-cdp sudo[9458]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-e5uDwUioo7tac7rm.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:56 nativespace-cdp sudo[9462]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:56 nativespace-cdp sudo[9465]: pam_unix(sudo:session): session closed for user root
Sep 29 16:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 16:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 16:09:58 nativespace-cdp sudo[9481]: pam_unix(sudo:session): session closed for user root
Sep 29 16:11:33 nativespace-cdp sshd[9900]: Connection closed by 159.100.136.21 port 48846 [preauth]
Sep 29 16:14:34 nativespace-cdp sshd[10585]: Connection closed by 199.45.155.80 port 41988 [preauth]
Sep 29 16:16:34 nativespace-cdp sshd[11060]: Connection closed by 159.100.136.21 port 58564 [preauth]
Sep 29 16:21:35 nativespace-cdp sshd[12236]: Connection closed by 159.100.136.21 port 39910 [preauth]
Sep 29 16:26:34 nativespace-cdp sshd[13257]: Connection closed by 159.100.136.21 port 49568 [preauth]
Sep 29 16:31:21 nativespace-cdp sshd[14326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.137.240  user=root
Sep 29 16:31:21 nativespace-cdp sshd[14326]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 29 16:31:23 nativespace-cdp sshd[14326]: Failed password for root from 51.68.137.240 port 42696 ssh2
Sep 29 16:31:23 nativespace-cdp sshd[14326]: Received disconnect from 51.68.137.240 port 42696:11: Bye Bye [preauth]
Sep 29 16:31:23 nativespace-cdp sshd[14326]: Disconnected from 51.68.137.240 port 42696 [preauth]
Sep 29 16:31:33 nativespace-cdp sshd[14374]: Connection closed by 159.100.136.21 port 59026 [preauth]
Sep 29 16:32:32 nativespace-cdp sshd[14515]: Invalid user daniel from 51.68.137.240 port 44240
Sep 29 16:32:32 nativespace-cdp sshd[14515]: input_userauth_request: invalid user daniel [preauth]
Sep 29 16:32:32 nativespace-cdp sshd[14515]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 16:32:32 nativespace-cdp sshd[14515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.137.240
Sep 29 16:32:34 nativespace-cdp sshd[14515]: Failed password for invalid user daniel from 51.68.137.240 port 44240 ssh2
Sep 29 16:32:34 nativespace-cdp sshd[14515]: Received disconnect from 51.68.137.240 port 44240:11: Bye Bye [preauth]
Sep 29 16:32:34 nativespace-cdp sshd[14515]: Disconnected from 51.68.137.240 port 44240 [preauth]
Sep 29 16:33:11 nativespace-cdp sshd[14629]: Invalid user adminftp from 51.68.137.240 port 33920
Sep 29 16:33:11 nativespace-cdp sshd[14629]: input_userauth_request: invalid user adminftp [preauth]
Sep 29 16:33:11 nativespace-cdp sshd[14629]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 16:33:11 nativespace-cdp sshd[14629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.137.240
Sep 29 16:33:14 nativespace-cdp sshd[14629]: Failed password for invalid user adminftp from 51.68.137.240 port 33920 ssh2
Sep 29 16:33:14 nativespace-cdp sshd[14629]: Received disconnect from 51.68.137.240 port 33920:11: Bye Bye [preauth]
Sep 29 16:33:14 nativespace-cdp sshd[14629]: Disconnected from 51.68.137.240 port 33920 [preauth]
Sep 29 16:36:33 nativespace-cdp sshd[15659]: Connection closed by 159.100.136.21 port 40584 [preauth]
Sep 29 16:41:33 nativespace-cdp sshd[16712]: Connection closed by 159.100.136.21 port 50050 [preauth]
Sep 29 16:46:33 nativespace-cdp sshd[17804]: Connection closed by 159.100.136.21 port 59582 [preauth]
Sep 29 16:51:33 nativespace-cdp sshd[18924]: Connection closed by 159.100.136.21 port 40662 [preauth]
Sep 29 16:56:33 nativespace-cdp sshd[20215]: Connection closed by 159.100.136.21 port 50100 [preauth]
Sep 29 17:01:35 nativespace-cdp sshd[21532]: Connection closed by 159.100.136.21 port 59718 [preauth]
Sep 29 17:06:33 nativespace-cdp sshd[22879]: Connection closed by 159.100.136.21 port 41260 [preauth]
Sep 29 17:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 17:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:09:42 nativespace-cdp sudo[23479]: pam_unix(sudo:session): session closed for user root
Sep 29 17:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 17:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:09:42 nativespace-cdp sudo[23484]: pam_unix(sudo:session): session closed for user root
Sep 29 17:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 17:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:09:45 nativespace-cdp sudo[23487]: pam_unix(sudo:session): session closed for user root
Sep 29 17:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 17:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:09:45 nativespace-cdp sudo[23495]: pam_unix(sudo:session): session closed for user root
Sep 29 17:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 17:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:07 nativespace-cdp sudo[23498]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 17:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:08 nativespace-cdp sudo[23687]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 17:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:08 nativespace-cdp sudo[23690]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 17:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:08 nativespace-cdp sudo[23693]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 17:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:08 nativespace-cdp sudo[23697]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 17:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:08 nativespace-cdp sudo[23700]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 17:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:08 nativespace-cdp sudo[23705]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 17:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:11 nativespace-cdp sudo[23722]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 17:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:12 nativespace-cdp sudo[23729]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=lucy user-2=attlebor user-3=onlycont user-4=outdoorc user-5=ranxterc user-6=hodgsonmail user-7=branko user-8=romaldki user-9=tomandle user-10=jennimil user-11=chrisdal user-12=mcdermos user-13=david user-14=careers user-15=nbhavers user-16=oubpgvbx user-17=tstardom user-18=what user-19=havantho user-20=cath user-21=sketchy user-22=nvihkvu user-23=dancinggardener user-24=stagingerris user-25=ladburyp user-26=kategilpin user-27=design user-28=nove user-29=boldover user-30=bakery user-31=crrtipdl user-32=sosevalu user-33=fawcettd user-34=burydropin user-35=nsceres user-36=beauty user-37=darkstar user-38=eatspam user-39=dhyana user-40=asandcoc user-41=sibtoncc user-42=bwppodcast user-43=zebrapho user-44=steve user-45=cathski user-46=cambria1 user-47=ninejimm user-48=reliable user-49=cwsocial
Sep 29 17:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=howardon user-51=pugwash user-52=paulmca1 user-53=hirefootballgame user-54=eugincou user-55=courseme user-56=nscdp user-57=leftie user-58=foods user-59=fortunaz user-60=health2045 user-61=lkpier user-62=donnychicago user-63=steakbridieme user-64=firstre5 user-65=ctedorgu user-66=philmcph user-67=isleofwi user-68=smrszyqg user-69=nomistakes user-70=hidden user-71=barbersh user-72=tigerlet user-73=gilpin user-74=milloyco user-75=elecleis user-76=hubmaster user-77=fetch user-78=carsinyo user-79=accooper user-80=ianrayne user-81=connectedshoppin user-82=thqkgnbz user-83=ultbcrra user-84=seftvta user-85=jonhartl user-86=firstres user-87=coursemc user-88=opaiscyx user-89=firstrel user-90=clarkass user-91=costestimatorco user-92=firstred user-93=highlegh user-94=southlon user-95=skyfirec user-96=alexadmin user-97=innovat1 user-98=stuartge user-99=askhform user-100=nativene user-101=nstriton user-102=brighto1
Sep 29 17:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=vivienn1 user-104=firstre2 user-105=oneoarco user-106=battlere user-107=bedfords user-108=newstoda user-109=belle user-110=ggaaorgu user-111=bemadonn user-112=jarvisin user-113=spectrum user-114=hodgesonweb user-115=theblack user-116=agproduc user-117=still user-118=stephani user-119=leereyn1 user-120=foundation user-121=markward user-122=booff user-123=vantagep user-124=connect9 user-125=athenare user-126=lbscrmod user-127=maflemin user-128=ulsukarm user-129=martsblo user-130=dickemery123 user-131=ptkxhsbt user-132=hhdugcor user-133=lbhyisi user-134=magichat user-135=brmrjxl user-136=lakesan1 user-137=strathar user-138=atestord user-139=sarafoundation user-140=wilsonsw user-141=megacards user-142=musorguk feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 17:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 17:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:15 nativespace-cdp sudo[23739]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 17:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:16 nativespace-cdp sudo[23755]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YtajxtFkfFoeZhp9.~
Sep 29 17:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:16 nativespace-cdp sudo[23759]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YtajxtFkfFoeZhp9.~'
Sep 29 17:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:16 nativespace-cdp sudo[23762]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YtajxtFkfFoeZhp9.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 17:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:16 nativespace-cdp sudo[23766]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 17:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:16 nativespace-cdp sudo[23769]: pam_unix(sudo:session): session closed for user root
Sep 29 17:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 17:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 17:10:18 nativespace-cdp sudo[23792]: pam_unix(sudo:session): session closed for user root
Sep 29 17:11:34 nativespace-cdp sshd[24105]: Connection closed by 159.100.136.21 port 50730 [preauth]
Sep 29 17:16:33 nativespace-cdp sshd[25118]: Connection closed by 159.100.136.21 port 60522 [preauth]
Sep 29 17:21:36 nativespace-cdp sshd[26314]: Connection closed by 159.100.136.21 port 40820 [preauth]
Sep 29 17:26:36 nativespace-cdp sshd[27270]: Connection closed by 159.100.136.21 port 49990 [preauth]
Sep 29 17:31:33 nativespace-cdp sshd[28338]: Connection closed by 159.100.136.21 port 59526 [preauth]
Sep 29 17:36:33 nativespace-cdp sshd[29559]: Connection closed by 159.100.136.21 port 41166 [preauth]
Sep 29 17:41:36 nativespace-cdp sshd[30585]: Connection closed by 159.100.136.21 port 50682 [preauth]
Sep 29 17:46:33 nativespace-cdp sshd[31995]: Connection closed by 159.100.136.21 port 60468 [preauth]
Sep 29 17:51:33 nativespace-cdp sshd[840]: Connection closed by 159.100.136.21 port 41308 [preauth]
Sep 29 17:56:34 nativespace-cdp sshd[1833]: Connection closed by 159.100.136.21 port 50982 [preauth]
Sep 29 18:01:33 nativespace-cdp sshd[3023]: Connection closed by 159.100.136.21 port 60526 [preauth]
Sep 29 18:06:36 nativespace-cdp sshd[4229]: Connection closed by 159.100.136.21 port 42106 [preauth]
Sep 29 18:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 18:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:38 nativespace-cdp sudo[4801]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 18:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:38 nativespace-cdp sudo[4804]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 18:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:40 nativespace-cdp sudo[4807]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 18:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:40 nativespace-cdp sudo[4817]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 18:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:44 nativespace-cdp sudo[4820]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 18:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:44 nativespace-cdp sudo[4843]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 18:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:44 nativespace-cdp sudo[4847]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 18:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:44 nativespace-cdp sudo[4850]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 18:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:44 nativespace-cdp sudo[4853]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 18:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:44 nativespace-cdp sudo[4856]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 18:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:44 nativespace-cdp sudo[4859]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:46 nativespace-cdp sudo[4869]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 18:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:47 nativespace-cdp sudo[4875]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=courseme user-2=eugincou user-3=hirefootballgame user-4=paulmca1 user-5=pugwash user-6=howardon user-7=cwsocial user-8=reliable user-9=ninejimm user-10=cambria1 user-11=cathski user-12=tigerlet user-13=barbersh user-14=hidden user-15=nomistakes user-16=smrszyqg user-17=isleofwi user-18=ctedorgu user-19=philmcph user-20=firstre5 user-21=donnychicago user-22=steakbridieme user-23=lkpier user-24=fortunaz user-25=health2045 user-26=leftie user-27=foods user-28=nscdp user-29=dhyana user-30=eatspam user-31=darkstar user-32=beauty user-33=nsceres user-34=burydropin user-35=fawcettd user-36=steve user-37=zebrapho user-38=bwppodcast user-39=sibtoncc user-40=asandcoc user-41=design user-42=kategilpin user-43=ladburyp user-44=stagingerris user-45=dancinggardener user-46=nvihkvu user-47=sketchy user-48=cath
Sep 29 18:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=havantho user-50=what user-51=tstardom user-52=oubpgvbx user-53=sosevalu user-54=crrtipdl user-55=bakery user-56=boldover user-57=nove user-58=romaldki user-59=branko user-60=hodgsonmail user-61=outdoorc user-62=ranxterc user-63=onlycont user-64=attlebor user-65=lucy user-66=careers user-67=nbhavers user-68=david user-69=mcdermos user-70=chrisdal user-71=jennimil user-72=tomandle user-73=magichat user-74=lbhyisi user-75=hhdugcor user-76=ptkxhsbt user-77=dickemery123 user-78=martsblo user-79=musorguk user-80=megacards user-81=wilsonsw user-82=sarafoundation user-83=atestord user-84=strathar user-85=lakesan1 user-86=brmrjxl user-87=leereyn1 user-88=stephani user-89=still user-90=agproduc user-91=theblack user-92=hodgesonweb user-93=spectrum user-94=jarvisin user-95=ulsukarm user-96=maflemin user-97=lbscrmod user-98=connect9 user-99=athenare user-100=vantagep user-101=foundation user-102=markward
Sep 29 18:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=booff user-104=nativene user-105=askhform user-106=stuartge user-107=innovat1 user-108=alexadmin user-109=skyfirec user-110=bemadonn user-111=belle user-112=ggaaorgu user-113=newstoda user-114=bedfords user-115=battlere user-116=oneoarco user-117=firstre2 user-118=vivienn1 user-119=brighto1 user-120=nstriton user-121=thqkgnbz user-122=connectedshoppin user-123=ianrayne user-124=accooper user-125=carsinyo user-126=fetch user-127=hubmaster user-128=elecleis user-129=gilpin user-130=milloyco user-131=southlon user-132=highlegh user-133=firstred user-134=costestimatorco user-135=firstrel user-136=clarkass user-137=coursemc user-138=opaiscyx user-139=firstres user-140=jonhartl user-141=seftvta user-142=ultbcrra feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 18:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 18:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:48 nativespace-cdp sudo[4880]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:49 nativespace-cdp sudo[4891]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ItGeO6t2GMjvdrEB.~
Sep 29 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:49 nativespace-cdp sudo[4895]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ItGeO6t2GMjvdrEB.~'
Sep 29 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:49 nativespace-cdp sudo[4898]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ItGeO6t2GMjvdrEB.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:49 nativespace-cdp sudo[4902]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:49 nativespace-cdp sudo[4905]: pam_unix(sudo:session): session closed for user root
Sep 29 18:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 18:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 18:09:50 nativespace-cdp sudo[4923]: pam_unix(sudo:session): session closed for user root
Sep 29 18:11:33 nativespace-cdp sshd[5331]: Connection closed by 159.100.136.21 port 51758 [preauth]
Sep 29 18:16:33 nativespace-cdp sshd[6342]: Connection closed by 159.100.136.21 port 32830 [preauth]
Sep 29 18:21:33 nativespace-cdp sshd[7352]: Connection closed by 159.100.136.21 port 42526 [preauth]
Sep 29 18:26:37 nativespace-cdp sshd[8513]: Connection closed by 159.100.136.21 port 52338 [preauth]
Sep 29 18:31:33 nativespace-cdp sshd[9544]: Connection closed by 159.100.136.21 port 33600 [preauth]
Sep 29 18:36:33 nativespace-cdp sshd[10881]: Connection closed by 159.100.136.21 port 43568 [preauth]
Sep 29 18:41:33 nativespace-cdp sshd[11834]: Connection closed by 159.100.136.21 port 53220 [preauth]
Sep 29 18:46:34 nativespace-cdp sshd[12879]: Connection closed by 159.100.136.21 port 34960 [preauth]
Sep 29 18:51:33 nativespace-cdp sshd[14095]: Connection closed by 159.100.136.21 port 44626 [preauth]
Sep 29 18:56:33 nativespace-cdp sshd[15087]: Connection closed by 159.100.136.21 port 54188 [preauth]
Sep 29 19:01:33 nativespace-cdp sshd[16171]: Connection closed by 159.100.136.21 port 35508 [preauth]
Sep 29 19:06:33 nativespace-cdp sshd[17280]: Connection closed by 159.100.136.21 port 45654 [preauth]
Sep 29 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:37 nativespace-cdp sudo[17911]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:37 nativespace-cdp sudo[17914]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 19:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:38 nativespace-cdp sudo[17919]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:38 nativespace-cdp sudo[17930]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:41 nativespace-cdp sudo[17933]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:41 nativespace-cdp sudo[18032]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:41 nativespace-cdp sudo[18035]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:41 nativespace-cdp sudo[18038]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:41 nativespace-cdp sudo[18041]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:41 nativespace-cdp sudo[18044]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 19:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:41 nativespace-cdp sudo[18047]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 19:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:54 nativespace-cdp sudo[18090]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 19:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:55 nativespace-cdp sudo[18094]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=connectedshoppin user-2=thqkgnbz user-3=accooper user-4=ianrayne user-5=hubmaster user-6=carsinyo user-7=fetch user-8=milloyco user-9=gilpin user-10=elecleis user-11=firstred user-12=southlon user-13=highlegh user-14=firstrel user-15=clarkass user-16=costestimatorco user-17=opaiscyx user-18=coursemc user-19=jonhartl user-20=seftvta user-21=ultbcrra user-22=firstres user-23=nativene user-24=innovat1 user-25=askhform user-26=stuartge user-27=skyfirec user-28=alexadmin user-29=belle user-30=ggaaorgu user-31=newstoda user-32=bemadonn user-33=bedfords user-34=firstre2 user-35=vivienn1 user-36=battlere user-37=oneoarco user-38=brighto1 user-39=nstriton user-40=stephani user-41=leereyn1 user-42=still user-43=agproduc user-44=spectrum user-45=theblack user-46=hodgesonweb user-47=jarvisin
Sep 29 19:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=connect9 user-50=athenare user-51=vantagep user-52=maflemin user-53=lbscrmod user-54=foundation user-55=markward user-56=booff user-57=magichat user-58=lbhyisi user-59=hhdugcor user-60=dickemery123 user-61=ptkxhsbt user-62=martsblo user-63=musorguk user-64=megacards user-65=wilsonsw user-66=strathar user-67=sarafoundation user-68=atestord user-69=lakesan1 user-70=brmrjxl user-71=romaldki user-72=outdoorc user-73=ranxterc user-74=hodgsonmail user-75=branko user-76=onlycont user-77=attlebor user-78=lucy user-79=nbhavers user-80=careers user-81=david user-82=chrisdal user-83=mcdermos user-84=jennimil user-85=tomandle user-86=design user-87=ladburyp user-88=stagingerris user-89=dancinggardener user-90=kategilpin user-91=sketchy user-92=cath user-93=havantho user-94=nvihkvu user-95=tstardom user-96=oubpgvbx user-97=what user-98=bakery user-99=sosevalu user-100=crrtipdl user-101=boldover
Sep 29 19:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=nove user-103=dhyana user-104=beauty user-105=eatspam user-106=darkstar user-107=nsceres user-108=burydropin user-109=fawcettd user-110=steve user-111=bwppodcast user-112=zebrapho user-113=sibtoncc user-114=asandcoc user-115=eugincou user-116=courseme user-117=hirefootballgame user-118=paulmca1 user-119=pugwash user-120=howardon user-121=cwsocial user-122=cambria1 user-123=cathski user-124=ninejimm user-125=reliable user-126=hidden user-127=nomistakes user-128=tigerlet user-129=barbersh user-130=isleofwi user-131=smrszyqg user-132=lkpier user-133=philmcph user-134=ctedorgu user-135=steakbridieme user-136=donnychicago user-137=firstre5 user-138=nscdp user-139=fortunaz user-140=health2045 user-141=leftie user-142=foods feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 29 19:09:55 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 19:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:56 nativespace-cdp sudo[18100]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:56 nativespace-cdp sudo[18105]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JTXrkjrwiCeY86N8.~
Sep 29 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:56 nativespace-cdp sudo[18108]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JTXrkjrwiCeY86N8.~'
Sep 29 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:56 nativespace-cdp sudo[18111]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-JTXrkjrwiCeY86N8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:56 nativespace-cdp sudo[18115]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:56 nativespace-cdp sudo[18118]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 29 19:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:57 nativespace-cdp sudo[18122]: pam_unix(sudo:session): session closed for user root
Sep 29 19:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 19:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 19:09:58 nativespace-cdp sudo[18144]: pam_unix(sudo:session): session closed for user root
Sep 29 19:11:34 nativespace-cdp sshd[18569]: Connection closed by 159.100.136.21 port 55326 [preauth]
Sep 29 19:16:33 nativespace-cdp sshd[19682]: Connection closed by 159.100.136.21 port 36816 [preauth]
Sep 29 19:21:40 nativespace-cdp sshd[20831]: Connection closed by 159.100.136.21 port 46350 [preauth]
Sep 29 19:26:37 nativespace-cdp sshd[21804]: Connection closed by 159.100.136.21 port 56318 [preauth]
Sep 29 19:31:33 nativespace-cdp sshd[22851]: Connection closed by 159.100.136.21 port 37568 [preauth]
Sep 29 19:36:35 nativespace-cdp sshd[24030]: Connection closed by 159.100.136.21 port 47596 [preauth]
Sep 29 19:41:34 nativespace-cdp sshd[24973]: Connection closed by 159.100.136.21 port 57142 [preauth]
Sep 29 19:46:35 nativespace-cdp sshd[25962]: Connection closed by 159.100.136.21 port 38768 [preauth]
Sep 29 19:51:35 nativespace-cdp sshd[27281]: Connection closed by 159.100.136.21 port 48374 [preauth]
Sep 29 19:56:34 nativespace-cdp sshd[28319]: Connection closed by 159.100.136.21 port 58310 [preauth]
Sep 29 20:01:33 nativespace-cdp sshd[29408]: Connection closed by 159.100.136.21 port 39612 [preauth]
Sep 29 20:06:33 nativespace-cdp sshd[30647]: Connection closed by 159.100.136.21 port 49198 [preauth]
Sep 29 20:06:40 nativespace-cdp sshd[30658]: Did not receive identification string from 13.58.97.162 port 57634
Sep 29 20:06:40 nativespace-cdp sshd[30661]: Bad protocol version identification '\026\003\001' from 13.58.97.162 port 57636
Sep 29 20:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:32 nativespace-cdp sudo[31145]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:32 nativespace-cdp sudo[31149]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 20:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:33 nativespace-cdp sudo[31152]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 20:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:33 nativespace-cdp sudo[31159]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 20:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:36 nativespace-cdp sudo[31163]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:36 nativespace-cdp sudo[31172]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:36 nativespace-cdp sudo[31175]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:36 nativespace-cdp sudo[31178]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:36 nativespace-cdp sudo[31181]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:36 nativespace-cdp sudo[31185]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 20:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:36 nativespace-cdp sudo[31188]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 20:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:47 nativespace-cdp sudo[31221]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 20:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:47 nativespace-cdp sudo[31225]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nsceres user-2=burydropin user-3=fawcettd user-4=dhyana user-5=eatspam user-6=darkstar user-7=beauty user-8=asandcoc user-9=sibtoncc user-10=steve user-11=zebrapho user-12=bwppodcast user-13=pugwash user-14=howardon user-15=paulmca1 user-16=cwsocial user-17=ninejimm user-18=reliable user-19=cambria1 user-20=cathski user-21=courseme user-22=eugincou user-23=hirefootballgame user-24=philmcph user-25=ctedorgu user-26=steakbridieme user-27=donnychicago user-28=firstre5 user-29=lkpier user-30=fortunaz user-31=health2045 user-32=foods user-33=leftie user-34=nscdp user-35=tigerlet user-36=barbersh user-37=hidden user-38=nomistakes user-39=smrszyqg user-40=isleofwi user-41=onlycont user-42=attlebor user-43=lucy user-44=romaldki user-45=branko user-46=outdoorc user-47=hodgsonmail user-48=ranxterc
Sep 29 20:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jennimil user-50=tomandle user-51=nbhavers user-52=careers user-53=david user-54=mcdermos user-55=chrisdal user-56=nvihkvu user-57=cath user-58=sketchy user-59=havantho user-60=what user-61=oubpgvbx user-62=tstardom user-63=design user-64=kategilpin user-65=ladburyp user-66=dancinggardener user-67=stagingerris user-68=boldover user-69=nove user-70=sosevalu user-71=crrtipdl user-72=bakery user-73=hodgesonweb user-74=theblack user-75=spectrum user-76=jarvisin user-77=leereyn1 user-78=stephani user-79=still user-80=agproduc user-81=maflemin user-82=lbscrmod user-83=connect9 user-84=athenare user-85=vantagep user-86=markward user-87=foundation user-88=booff user-89=ulsukarm user-90=ptkxhsbt user-91=dickemery123 user-92=martsblo user-93=magichat user-94=lbhyisi user-95=hhdugcor user-96=sarafoundation user-97=atestord user-98=strathar user-99=lakesan1 user-100=brmrjxl user-101=musorguk user-102=megacards
Sep 29 20:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=wilsonsw user-104=carsinyo user-105=fetch user-106=hubmaster user-107=elecleis user-108=gilpin user-109=milloyco user-110=thqkgnbz user-111=connectedshoppin user-112=ianrayne user-113=accooper user-114=coursemc user-115=opaiscyx user-116=firstres user-117=seftvta user-118=jonhartl user-119=ultbcrra user-120=southlon user-121=highlegh user-122=firstred user-123=costestimatorco user-124=firstrel user-125=clarkass user-126=skyfirec user-127=alexadmin user-128=nativene user-129=stuartge user-130=askhform user-131=innovat1 user-132=battlere user-133=oneoarco user-134=firstre2 user-135=vivienn1 user-136=brighto1 user-137=nstriton user-138=bemadonn user-139=belle user-140=ggaaorgu user-141=newstoda user-142=bedfords feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 20:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 20:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:48 nativespace-cdp sudo[31231]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 20:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:48 nativespace-cdp sudo[31237]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BiPjaQ1SfJNomapN.~
Sep 29 20:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:48 nativespace-cdp sudo[31240]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BiPjaQ1SfJNomapN.~'
Sep 29 20:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:48 nativespace-cdp sudo[31243]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BiPjaQ1SfJNomapN.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 20:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:48 nativespace-cdp sudo[31247]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 20:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:48 nativespace-cdp sudo[31250]: pam_unix(sudo:session): session closed for user root
Sep 29 20:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 20:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 20:09:50 nativespace-cdp sudo[31269]: pam_unix(sudo:session): session closed for user root
Sep 29 20:11:36 nativespace-cdp sshd[31777]: Connection closed by 159.100.136.21 port 58878 [preauth]
Sep 29 20:16:35 nativespace-cdp sshd[338]: Connection closed by 159.100.136.21 port 39844 [preauth]
Sep 29 20:21:34 nativespace-cdp sshd[1462]: Connection closed by 159.100.136.21 port 49510 [preauth]
Sep 29 20:24:47 nativespace-cdp sshd[2191]: Accepted publickey for root from 185.67.178.249 port 46264 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 29 20:24:47 nativespace-cdp sshd[2191]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 29 20:26:33 nativespace-cdp sshd[2739]: Connection closed by 159.100.136.21 port 59452 [preauth]
Sep 29 20:31:34 nativespace-cdp sshd[3802]: Connection closed by 159.100.136.21 port 40780 [preauth]
Sep 29 20:36:33 nativespace-cdp sshd[4989]: Connection closed by 159.100.136.21 port 50510 [preauth]
Sep 29 20:41:33 nativespace-cdp sshd[6082]: Connection closed by 159.100.136.21 port 59972 [preauth]
Sep 29 20:46:33 nativespace-cdp sshd[7251]: Connection closed by 159.100.136.21 port 41282 [preauth]
Sep 29 20:49:50 nativespace-cdp sshd[2191]: Received disconnect from 185.67.178.249 port 46264:11: Normal Shutdown
Sep 29 20:49:50 nativespace-cdp sshd[2191]: Disconnected from 185.67.178.249 port 46264
Sep 29 20:49:50 nativespace-cdp sshd[2191]: pam_unix(sshd:session): session closed for user root
Sep 29 20:51:33 nativespace-cdp sshd[8487]: Connection closed by 159.100.136.21 port 50988 [preauth]
Sep 29 20:56:33 nativespace-cdp sshd[9509]: Connection closed by 159.100.136.21 port 60616 [preauth]
Sep 29 21:01:34 nativespace-cdp sshd[10611]: Connection closed by 159.100.136.21 port 41896 [preauth]
Sep 29 21:06:33 nativespace-cdp sshd[11771]: Connection closed by 159.100.136.21 port 51656 [preauth]
Sep 29 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:37 nativespace-cdp sudo[12282]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:37 nativespace-cdp sudo[12288]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 21:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:38 nativespace-cdp sudo[12291]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 21:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:38 nativespace-cdp sudo[12298]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 21:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:41 nativespace-cdp sudo[12310]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 21:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:41 nativespace-cdp sudo[12318]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 21:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:41 nativespace-cdp sudo[12321]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 21:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:41 nativespace-cdp sudo[12324]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 21:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:41 nativespace-cdp sudo[12327]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 21:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:41 nativespace-cdp sudo[12330]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 21:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:41 nativespace-cdp sudo[12333]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 21:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:48 nativespace-cdp sudo[12352]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 21:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:49 nativespace-cdp sudo[12357]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=markward user-3=foundation user-4=booff user-5=maflemin user-6=lbscrmod user-7=connect9 user-8=athenare user-9=vantagep user-10=still user-11=agproduc user-12=leereyn1 user-13=stephani user-14=jarvisin user-15=hodgesonweb user-16=theblack user-17=spectrum user-18=wilsonsw user-19=musorguk user-20=megacards user-21=lakesan1 user-22=brmrjxl user-23=sarafoundation user-24=atestord user-25=strathar user-26=lbhyisi user-27=hhdugcor user-28=magichat user-29=martsblo user-30=ptkxhsbt user-31=dickemery123 user-32=costestimatorco user-33=clarkass user-34=firstrel user-35=southlon user-36=highlegh user-37=firstred user-38=firstres user-39=jonhartl user-40=seftvta user-41=ultbcrra user-42=coursemc user-43=opaiscyx user-44=ianrayne user-45=accooper user-46=thqkgnbz user-47=connectedshoppin
Sep 29 21:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=elecleis user-49=milloyco user-50=gilpin user-51=carsinyo user-52=fetch user-53=hubmaster user-54=bedfords user-55=bemadonn user-56=ggaaorgu user-57=belle user-58=newstoda user-59=brighto1 user-60=nstriton user-61=battlere user-62=oneoarco user-63=firstre2 user-64=vivienn1 user-65=askhform user-66=stuartge user-67=innovat1 user-68=nativene user-69=skyfirec user-70=alexadmin user-71=zebrapho user-72=bwppodcast user-73=steve user-74=sibtoncc user-75=asandcoc user-76=eatspam user-77=darkstar user-78=beauty user-79=dhyana user-80=burydropin user-81=fawcettd user-82=nsceres user-83=isleofwi user-84=smrszyqg user-85=tigerlet user-86=barbersh user-87=hidden user-88=nomistakes user-89=health2045 user-90=fortunaz user-91=foods user-92=leftie user-93=nscdp user-94=ctedorgu user-95=philmcph user-96=donnychicago user-97=steakbridieme user-98=firstre5 user-99=lkpier user-100=hirefootballgame user-101=courseme
Sep 29 21:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eugincou user-103=ninejimm user-104=reliable user-105=cathski user-106=cambria1 user-107=howardon user-108=pugwash user-109=paulmca1 user-110=cwsocial user-111=mcdermos user-112=chrisdal user-113=careers user-114=nbhavers user-115=david user-116=tomandle user-117=jennimil user-118=branko user-119=outdoorc user-120=hodgsonmail user-121=ranxterc user-122=romaldki user-123=attlebor user-124=lucy user-125=onlycont user-126=sosevalu user-127=crrtipdl user-128=bakery user-129=nove user-130=boldover user-131=kategilpin user-132=ladburyp user-133=dancinggardener user-134=stagingerris user-135=design user-136=what user-137=tstardom user-138=oubpgvbx user-139=nvihkvu user-140=sketchy user-141=cath user-142=havantho feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 21:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 21:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:50 nativespace-cdp sudo[12362]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 21:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:51 nativespace-cdp sudo[12367]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V1bN2pW54cVMlVXq.~
Sep 29 21:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:51 nativespace-cdp sudo[12371]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V1bN2pW54cVMlVXq.~'
Sep 29 21:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:51 nativespace-cdp sudo[12374]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-V1bN2pW54cVMlVXq.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 21:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:51 nativespace-cdp sudo[12379]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 21:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:51 nativespace-cdp sudo[12382]: pam_unix(sudo:session): session closed for user root
Sep 29 21:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 21:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 21:09:58 nativespace-cdp sudo[12413]: pam_unix(sudo:session): session closed for user root
Sep 29 21:11:34 nativespace-cdp sshd[12949]: Connection closed by 159.100.136.21 port 60956 [preauth]
Sep 29 21:16:33 nativespace-cdp sshd[14077]: Connection closed by 159.100.136.21 port 42398 [preauth]
Sep 29 21:21:34 nativespace-cdp sshd[15130]: Connection closed by 159.100.136.21 port 51714 [preauth]
Sep 29 21:26:33 nativespace-cdp sshd[16261]: Connection closed by 159.100.136.21 port 60872 [preauth]
Sep 29 21:31:33 nativespace-cdp sshd[17480]: Connection closed by 159.100.136.21 port 42370 [preauth]
Sep 29 21:36:35 nativespace-cdp sshd[18688]: Connection closed by 159.100.136.21 port 51880 [preauth]
Sep 29 21:41:33 nativespace-cdp sshd[19913]: Connection closed by 159.100.136.21 port 32942 [preauth]
Sep 29 21:46:33 nativespace-cdp sshd[20911]: Connection closed by 159.100.136.21 port 42656 [preauth]
Sep 29 21:48:21 nativespace-cdp sshd[21185]: Accepted publickey for root from 185.67.178.249 port 54302 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 29 21:48:21 nativespace-cdp sshd[21185]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 29 21:51:36 nativespace-cdp sshd[22117]: Connection closed by 159.100.136.21 port 51728 [preauth]
Sep 29 21:52:45 nativespace-cdp sshd[22323]: Accepted publickey for root from 185.67.178.249 port 36354 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 29 21:52:45 nativespace-cdp sshd[22323]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 29 21:56:33 nativespace-cdp sshd[23150]: Connection closed by 159.100.136.21 port 32954 [preauth]
Sep 29 22:01:34 nativespace-cdp sshd[24452]: Connection closed by 159.100.136.21 port 42044 [preauth]
Sep 29 22:06:33 nativespace-cdp sshd[25611]: Connection closed by 159.100.136.21 port 51738 [preauth]
Sep 29 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:39 nativespace-cdp sudo[26186]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 22:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:40 nativespace-cdp sudo[26191]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 22:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:42 nativespace-cdp sudo[26194]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 22:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:42 nativespace-cdp sudo[26201]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 22:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:45 nativespace-cdp sudo[26204]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 22:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:45 nativespace-cdp sudo[26218]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 22:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:45 nativespace-cdp sudo[26221]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 22:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:45 nativespace-cdp sudo[26224]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 22:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:45 nativespace-cdp sudo[26228]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 22:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:45 nativespace-cdp sudo[26232]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 22:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:46 nativespace-cdp sudo[26235]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 22:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:47 nativespace-cdp sudo[26245]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 22:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:49 nativespace-cdp sudo[26249]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=mcdermos user-2=chrisdal user-3=nbhavers user-4=careers user-5=david user-6=tomandle user-7=jennimil user-8=branko user-9=ranxterc user-10=outdoorc user-11=hodgsonmail user-12=romaldki user-13=attlebor user-14=lucy user-15=onlycont user-16=sosevalu user-17=crrtipdl user-18=bakery user-19=nove user-20=boldover user-21=kategilpin user-22=ladburyp user-23=stagingerris user-24=dancinggardener user-25=design user-26=what user-27=oubpgvbx user-28=tstardom user-29=nvihkvu user-30=cath user-31=sketchy user-32=havantho user-33=zebrapho user-34=bwppodcast user-35=steve user-36=asandcoc user-37=sibtoncc user-38=eatspam user-39=darkstar user-40=beauty user-41=dhyana user-42=burydropin user-43=fawcettd user-44=nsceres user-45=isleofwi user-46=smrszyqg user-47=barbersh user-48=tigerlet user-49=hidden
Sep 29 22:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=nomistakes user-51=fortunaz user-52=health2045 user-53=leftie user-54=foods user-55=nscdp user-56=ctedorgu user-57=philmcph user-58=firstre5 user-59=donnychicago user-60=steakbridieme user-61=lkpier user-62=hirefootballgame user-63=courseme user-64=eugincou user-65=ninejimm user-66=reliable user-67=cathski user-68=cambria1 user-69=paulmca1 user-70=pugwash user-71=howardon user-72=cwsocial user-73=costestimatorco user-74=clarkass user-75=firstrel user-76=southlon user-77=highlegh user-78=firstred user-79=firstres user-80=jonhartl user-81=seftvta user-82=ultbcrra user-83=opaiscyx user-84=coursemc user-85=ianrayne user-86=accooper user-87=thqkgnbz user-88=connectedshoppin user-89=elecleis user-90=milloyco user-91=gilpin user-92=carsinyo user-93=fetch user-94=hubmaster user-95=bedfords user-96=bemadonn user-97=ggaaorgu user-98=belle user-99=newstoda user-100=brighto1 user-101=nstriton user-102=battlere
Sep 29 22:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=oneoarco user-104=firstre2 user-105=vivienn1 user-106=stuartge user-107=askhform user-108=innovat1 user-109=nativene user-110=alexadmin user-111=skyfirec user-112=ulsukarm user-113=foundation user-114=markward user-115=booff user-116=maflemin user-117=lbscrmod user-118=connect9 user-119=athenare user-120=vantagep user-121=still user-122=agproduc user-123=leereyn1 user-124=stephani user-125=jarvisin user-126=theblack user-127=hodgesonweb user-128=spectrum user-129=wilsonsw user-130=musorguk user-131=megacards user-132=brmrjxl user-133=lakesan1 user-134=sarafoundation user-135=atestord user-136=strathar user-137=lbhyisi user-138=hhdugcor user-139=magichat user-140=martsblo user-141=ptkxhsbt user-142=dickemery123 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 29 22:09:49 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 22:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:51 nativespace-cdp sudo[26255]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 22:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:51 nativespace-cdp sudo[26261]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-l7mMQb44gWtZ3F8X.~
Sep 29 22:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:51 nativespace-cdp sudo[26265]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-l7mMQb44gWtZ3F8X.~'
Sep 29 22:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:51 nativespace-cdp sudo[26268]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-l7mMQb44gWtZ3F8X.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 22:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:51 nativespace-cdp sudo[26273]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 22:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:51 nativespace-cdp sudo[26276]: pam_unix(sudo:session): session closed for user root
Sep 29 22:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 22:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 22:09:54 nativespace-cdp sudo[26299]: pam_unix(sudo:session): session closed for user root
Sep 29 22:11:35 nativespace-cdp sshd[26831]: Connection closed by 159.100.136.21 port 33040 [preauth]
Sep 29 22:16:33 nativespace-cdp sshd[27873]: Connection closed by 159.100.136.21 port 42304 [preauth]
Sep 29 22:21:33 nativespace-cdp sshd[28839]: Connection closed by 159.100.136.21 port 51764 [preauth]
Sep 29 22:26:33 nativespace-cdp sshd[29995]: Connection closed by 159.100.136.21 port 33610 [preauth]
Sep 29 22:31:33 nativespace-cdp sshd[31025]: Connection closed by 159.100.136.21 port 43186 [preauth]
Sep 29 22:36:33 nativespace-cdp sshd[32197]: Connection closed by 159.100.136.21 port 53194 [preauth]
Sep 29 22:41:33 nativespace-cdp sshd[711]: Connection closed by 159.100.136.21 port 34300 [preauth]
Sep 29 22:44:43 nativespace-cdp sshd[22323]: pam_unix(sshd:session): session closed for user root
Sep 29 22:46:33 nativespace-cdp sshd[1745]: Connection closed by 159.100.136.21 port 44122 [preauth]
Sep 29 22:46:50 nativespace-cdp sshd[1787]: Invalid user user from 69.49.229.80 port 54478
Sep 29 22:46:50 nativespace-cdp sshd[1787]: input_userauth_request: invalid user user [preauth]
Sep 29 22:46:50 nativespace-cdp sshd[1787]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 22:46:50 nativespace-cdp sshd[1787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.49.229.80
Sep 29 22:46:52 nativespace-cdp sshd[1787]: Failed password for invalid user user from 69.49.229.80 port 54478 ssh2
Sep 29 22:46:52 nativespace-cdp sshd[1787]: Received disconnect from 69.49.229.80 port 54478:11: Bye Bye [preauth]
Sep 29 22:46:52 nativespace-cdp sshd[1787]: Disconnected from 69.49.229.80 port 54478 [preauth]
Sep 29 22:49:32 nativespace-cdp sshd[2253]: Invalid user testuser from 205.185.113.140 port 57958
Sep 29 22:49:32 nativespace-cdp sshd[2253]: input_userauth_request: invalid user testuser [preauth]
Sep 29 22:49:32 nativespace-cdp sshd[2253]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 22:49:32 nativespace-cdp sshd[2253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.113.140
Sep 29 22:49:34 nativespace-cdp sshd[2253]: Failed password for invalid user testuser from 205.185.113.140 port 57958 ssh2
Sep 29 22:49:36 nativespace-cdp sshd[2253]: Received disconnect from 205.185.113.140 port 57958:11: Bye Bye [preauth]
Sep 29 22:49:36 nativespace-cdp sshd[2253]: Disconnected from 205.185.113.140 port 57958 [preauth]
Sep 29 22:49:36 nativespace-cdp sshd[2255]: Invalid user superman from 123.231.237.6 port 38852
Sep 29 22:49:36 nativespace-cdp sshd[2255]: input_userauth_request: invalid user superman [preauth]
Sep 29 22:49:36 nativespace-cdp sshd[2255]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 22:49:36 nativespace-cdp sshd[2255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.231.237.6
Sep 29 22:49:38 nativespace-cdp sshd[2255]: Failed password for invalid user superman from 123.231.237.6 port 38852 ssh2
Sep 29 22:49:38 nativespace-cdp sshd[2255]: Received disconnect from 123.231.237.6 port 38852:11: Bye Bye [preauth]
Sep 29 22:49:38 nativespace-cdp sshd[2255]: Disconnected from 123.231.237.6 port 38852 [preauth]
Sep 29 22:49:50 nativespace-cdp sshd[2387]: Invalid user ubuntu from 69.49.229.80 port 39892
Sep 29 22:49:50 nativespace-cdp sshd[2387]: input_userauth_request: invalid user ubuntu [preauth]
Sep 29 22:49:50 nativespace-cdp sshd[2387]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 22:49:50 nativespace-cdp sshd[2387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.49.229.80
Sep 29 22:49:52 nativespace-cdp sshd[2387]: Failed password for invalid user ubuntu from 69.49.229.80 port 39892 ssh2
Sep 29 22:49:52 nativespace-cdp sshd[2387]: Received disconnect from 69.49.229.80 port 39892:11: Bye Bye [preauth]
Sep 29 22:49:52 nativespace-cdp sshd[2387]: Disconnected from 69.49.229.80 port 39892 [preauth]
Sep 29 22:50:31 nativespace-cdp sshd[2789]: Invalid user user from 69.49.229.80 port 60438
Sep 29 22:50:31 nativespace-cdp sshd[2789]: input_userauth_request: invalid user user [preauth]
Sep 29 22:50:31 nativespace-cdp sshd[2789]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 22:50:31 nativespace-cdp sshd[2789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.49.229.80
Sep 29 22:50:33 nativespace-cdp sshd[2789]: Failed password for invalid user user from 69.49.229.80 port 60438 ssh2
Sep 29 22:50:33 nativespace-cdp sshd[2789]: Received disconnect from 69.49.229.80 port 60438:11: Bye Bye [preauth]
Sep 29 22:50:33 nativespace-cdp sshd[2789]: Disconnected from 69.49.229.80 port 60438 [preauth]
Sep 29 22:50:44 nativespace-cdp sshd[2840]: Invalid user nexus from 123.231.237.6 port 47708
Sep 29 22:50:44 nativespace-cdp sshd[2840]: input_userauth_request: invalid user nexus [preauth]
Sep 29 22:50:44 nativespace-cdp sshd[2840]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 22:50:44 nativespace-cdp sshd[2840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.231.237.6
Sep 29 22:50:46 nativespace-cdp sshd[2840]: Failed password for invalid user nexus from 123.231.237.6 port 47708 ssh2
Sep 29 22:50:46 nativespace-cdp sshd[2840]: Received disconnect from 123.231.237.6 port 47708:11: Bye Bye [preauth]
Sep 29 22:50:46 nativespace-cdp sshd[2840]: Disconnected from 123.231.237.6 port 47708 [preauth]
Sep 29 22:51:26 nativespace-cdp sshd[3056]: Invalid user ubuntu from 205.185.113.140 port 51788
Sep 29 22:51:26 nativespace-cdp sshd[3056]: input_userauth_request: invalid user ubuntu [preauth]
Sep 29 22:51:26 nativespace-cdp sshd[3056]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 22:51:26 nativespace-cdp sshd[3056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.113.140
Sep 29 22:51:28 nativespace-cdp sshd[3056]: Failed password for invalid user ubuntu from 205.185.113.140 port 51788 ssh2
Sep 29 22:51:28 nativespace-cdp sshd[3056]: Received disconnect from 205.185.113.140 port 51788:11: Bye Bye [preauth]
Sep 29 22:51:28 nativespace-cdp sshd[3056]: Disconnected from 205.185.113.140 port 51788 [preauth]
Sep 29 22:51:31 nativespace-cdp sshd[3072]: Invalid user ubuntu from 123.231.237.6 port 34698
Sep 29 22:51:31 nativespace-cdp sshd[3072]: input_userauth_request: invalid user ubuntu [preauth]
Sep 29 22:51:31 nativespace-cdp sshd[3072]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 22:51:31 nativespace-cdp sshd[3072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.231.237.6
Sep 29 22:51:33 nativespace-cdp sshd[3072]: Failed password for invalid user ubuntu from 123.231.237.6 port 34698 ssh2
Sep 29 22:51:33 nativespace-cdp sshd[3072]: Received disconnect from 123.231.237.6 port 34698:11: Bye Bye [preauth]
Sep 29 22:51:33 nativespace-cdp sshd[3072]: Disconnected from 123.231.237.6 port 34698 [preauth]
Sep 29 22:51:33 nativespace-cdp sshd[3082]: Connection closed by 159.100.136.21 port 53756 [preauth]
Sep 29 22:52:06 nativespace-cdp sshd[3227]: Invalid user test from 205.185.113.140 port 36018
Sep 29 22:52:06 nativespace-cdp sshd[3227]: input_userauth_request: invalid user test [preauth]
Sep 29 22:52:06 nativespace-cdp sshd[3227]: pam_unix(sshd:auth): check pass; user unknown
Sep 29 22:52:06 nativespace-cdp sshd[3227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.113.140
Sep 29 22:52:08 nativespace-cdp sshd[3227]: Failed password for invalid user test from 205.185.113.140 port 36018 ssh2
Sep 29 22:52:08 nativespace-cdp sshd[3227]: Received disconnect from 205.185.113.140 port 36018:11: Bye Bye [preauth]
Sep 29 22:52:08 nativespace-cdp sshd[3227]: Disconnected from 205.185.113.140 port 36018 [preauth]
Sep 29 22:56:33 nativespace-cdp sshd[4142]: Connection closed by 159.100.136.21 port 35302 [preauth]
Sep 29 23:01:33 nativespace-cdp sshd[5227]: Connection closed by 159.100.136.21 port 44910 [preauth]
Sep 29 23:06:33 nativespace-cdp sshd[6221]: Connection closed by 159.100.136.21 port 54618 [preauth]
Sep 29 23:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 29 23:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:32 nativespace-cdp sudo[6858]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 29 23:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:32 nativespace-cdp sudo[6861]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 29 23:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:33 nativespace-cdp sudo[6864]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 29 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:33 nativespace-cdp sudo[6869]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 29 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:37 nativespace-cdp sudo[6873]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 29 23:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:37 nativespace-cdp sudo[6885]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 29 23:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:37 nativespace-cdp sudo[6888]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 29 23:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:37 nativespace-cdp sudo[6892]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 29 23:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:37 nativespace-cdp sudo[6895]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 29 23:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:37 nativespace-cdp sudo[6898]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 29 23:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:37 nativespace-cdp sudo[6902]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 29 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:44 nativespace-cdp sudo[6926]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 29 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:44 nativespace-cdp sudo[6930]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=markward user-2=foundation user-3=booff user-4=vantagep user-5=athenare user-6=connect9 user-7=lbscrmod user-8=maflemin user-9=ulsukarm user-10=jarvisin user-11=spectrum user-12=hodgesonweb user-13=theblack user-14=agproduc user-15=still user-16=stephani user-17=leereyn1 user-18=brmrjxl user-19=lakesan1 user-20=strathar user-21=atestord user-22=sarafoundation user-23=wilsonsw user-24=megacards user-25=musorguk user-26=martsblo user-27=dickemery123 user-28=ptkxhsbt user-29=hhdugcor user-30=lbhyisi user-31=magichat user-32=ultbcrra user-33=seftvta user-34=jonhartl user-35=firstres user-36=opaiscyx user-37=coursemc user-38=clarkass user-39=firstrel user-40=costestimatorco user-41=firstred user-42=highlegh user-43=southlon user-44=gilpin user-45=milloyco user-46=elecleis user-47=hubmaster
Sep 29 23:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=fetch user-49=carsinyo user-50=accooper user-51=ianrayne user-52=connectedshoppin user-53=thqkgnbz user-54=nstriton user-55=brighto1 user-56=vivienn1 user-57=firstre2 user-58=oneoarco user-59=battlere user-60=bedfords user-61=newstoda user-62=belle user-63=ggaaorgu user-64=bemadonn user-65=skyfirec user-66=alexadmin user-67=innovat1 user-68=stuartge user-69=askhform user-70=nativene user-71=sibtoncc user-72=asandcoc user-73=bwppodcast user-74=zebrapho user-75=steve user-76=fawcettd user-77=burydropin user-78=nsceres user-79=beauty user-80=darkstar user-81=eatspam user-82=dhyana user-83=nscdp user-84=foods user-85=leftie user-86=fortunaz user-87=health2045 user-88=lkpier user-89=steakbridieme user-90=donnychicago user-91=firstre5 user-92=ctedorgu user-93=philmcph user-94=smrszyqg user-95=isleofwi user-96=nomistakes user-97=hidden user-98=tigerlet user-99=barbersh user-100=cambria1 user-101=cathski
Sep 29 23:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=ninejimm user-103=reliable user-104=cwsocial user-105=paulmca1 user-106=pugwash user-107=howardon user-108=hirefootballgame user-109=eugincou user-110=courseme user-111=tomandle user-112=jennimil user-113=chrisdal user-114=mcdermos user-115=david user-116=nbhavers user-117=careers user-118=lucy user-119=attlebor user-120=onlycont user-121=outdoorc user-122=hodgsonmail user-123=ranxterc user-124=branko user-125=romaldki user-126=nove user-127=boldover user-128=bakery user-129=crrtipdl user-130=sosevalu user-131=oubpgvbx user-132=tstardom user-133=what user-134=havantho user-135=sketchy user-136=cath user-137=nvihkvu user-138=stagingerris user-139=dancinggardener user-140=ladburyp user-141=kategilpin user-142=design feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 29 23:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 29 23:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:45 nativespace-cdp sudo[6934]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 23:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:46 nativespace-cdp sudo[6940]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Pc4jvyw7BzMf7yM3.~
Sep 29 23:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:46 nativespace-cdp sudo[6944]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Pc4jvyw7BzMf7yM3.~'
Sep 29 23:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:46 nativespace-cdp sudo[6947]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Pc4jvyw7BzMf7yM3.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 29 23:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:46 nativespace-cdp sudo[6951]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 29 23:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:46 nativespace-cdp sudo[6955]: pam_unix(sudo:session): session closed for user root
Sep 29 23:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 29 23:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 29 23:09:47 nativespace-cdp sudo[6975]: pam_unix(sudo:session): session closed for user root
Sep 29 23:11:34 nativespace-cdp sshd[7544]: Connection closed by 159.100.136.21 port 35938 [preauth]
Sep 29 23:16:33 nativespace-cdp sshd[8516]: Connection closed by 159.100.136.21 port 45234 [preauth]
Sep 29 23:21:34 nativespace-cdp sshd[9732]: Connection closed by 159.100.136.21 port 54970 [preauth]
Sep 29 23:26:18 nativespace-cdp sshd[10554]: Accepted publickey for root from 185.67.178.249 port 52534 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 29 23:26:18 nativespace-cdp sshd[10554]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 29 23:26:33 nativespace-cdp sshd[10702]: Connection closed by 159.100.136.21 port 36298 [preauth]
Sep 29 23:31:36 nativespace-cdp sshd[11657]: Connection closed by 159.100.136.21 port 45736 [preauth]
Sep 29 23:36:38 nativespace-cdp sshd[12692]: Connection closed by 159.100.136.21 port 55630 [preauth]
Sep 29 23:41:35 nativespace-cdp sshd[13606]: Connection closed by 159.100.136.21 port 36736 [preauth]
Sep 29 23:46:34 nativespace-cdp sshd[14621]: Connection closed by 159.100.136.21 port 46698 [preauth]
Sep 29 23:51:33 nativespace-cdp sshd[15816]: Connection closed by 159.100.136.21 port 56350 [preauth]
Sep 29 23:56:34 nativespace-cdp sshd[16729]: Connection closed by 159.100.136.21 port 38054 [preauth]
Sep 30 00:06:36 nativespace-cdp sshd[18857]: Connection closed by 159.100.136.21 port 57076 [preauth]
Sep 30 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:32 nativespace-cdp sudo[19380]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:32 nativespace-cdp sudo[19383]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 00:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:33 nativespace-cdp sudo[19386]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:33 nativespace-cdp sudo[19391]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:34 nativespace-cdp sudo[19394]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:34 nativespace-cdp sudo[19402]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:34 nativespace-cdp sudo[19405]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:34 nativespace-cdp sudo[19408]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:34 nativespace-cdp sudo[19411]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:34 nativespace-cdp sudo[19414]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:34 nativespace-cdp sudo[19417]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 00:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:36 nativespace-cdp sudo[19427]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 00:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:36 nativespace-cdp sudo[19431]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sibtoncc user-2=asandcoc user-3=zebrapho user-4=bwppodcast user-5=steve user-6=fawcettd user-7=burydropin user-8=nsceres user-9=darkstar user-10=eatspam user-11=beauty user-12=dhyana user-13=foods user-14=leftie user-15=fortunaz user-16=health2045 user-17=nscdp user-18=donnychicago user-19=steakbridieme user-20=firstre5 user-21=ctedorgu user-22=philmcph user-23=lkpier user-24=smrszyqg user-25=isleofwi user-26=barbersh user-27=tigerlet user-28=nomistakes user-29=hidden user-30=reliable user-31=ninejimm user-32=cathski user-33=cambria1 user-34=cwsocial user-35=paulmca1 user-36=howardon user-37=pugwash user-38=hirefootballgame user-39=courseme user-40=eugincou user-41=tomandle user-42=jennimil user-43=mcdermos user-44=chrisdal user-45=david user-46=careers user-47=nbhavers user-48=lucy
Sep 30 00:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=attlebor user-50=onlycont user-51=branko user-52=hodgsonmail user-53=outdoorc user-54=ranxterc user-55=romaldki user-56=nove user-57=boldover user-58=crrtipdl user-59=sosevalu user-60=bakery user-61=what user-62=oubpgvbx user-63=tstardom user-64=nvihkvu user-65=havantho user-66=sketchy user-67=cath user-68=kategilpin user-69=stagingerris user-70=dancinggardener user-71=ladburyp user-72=design user-73=markward user-74=foundation user-75=booff user-76=lbscrmod user-77=maflemin user-78=vantagep user-79=athenare user-80=connect9 user-81=ulsukarm user-82=jarvisin user-83=hodgesonweb user-84=theblack user-85=spectrum user-86=agproduc user-87=still user-88=leereyn1 user-89=stephani user-90=brmrjxl user-91=lakesan1 user-92=atestord user-93=sarafoundation user-94=strathar user-95=wilsonsw user-96=megacards user-97=musorguk user-98=martsblo user-99=ptkxhsbt user-100=dickemery123 user-101=hhdugcor user-102=lbhyisi
Sep 30 00:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=magichat user-104=firstres user-105=ultbcrra user-106=seftvta user-107=jonhartl user-108=opaiscyx user-109=coursemc user-110=costestimatorco user-111=clarkass user-112=firstrel user-113=highlegh user-114=southlon user-115=firstred user-116=elecleis user-117=gilpin user-118=milloyco user-119=fetch user-120=carsinyo user-121=hubmaster user-122=ianrayne user-123=accooper user-124=thqkgnbz user-125=connectedshoppin user-126=nstriton user-127=brighto1 user-128=oneoarco user-129=battlere user-130=vivienn1 user-131=firstre2 user-132=bedfords user-133=bemadonn user-134=newstoda user-135=belle user-136=ggaaorgu user-137=skyfirec user-138=alexadmin user-139=stuartge user-140=askhform user-141=innovat1 user-142=nativene feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 00:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 00:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:36 nativespace-cdp sudo[19438]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 00:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:37 nativespace-cdp sudo[19443]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kWnYxfBeR8kbWq0k.~
Sep 30 00:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:37 nativespace-cdp sudo[19446]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kWnYxfBeR8kbWq0k.~'
Sep 30 00:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:37 nativespace-cdp sudo[19449]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-kWnYxfBeR8kbWq0k.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 00:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:37 nativespace-cdp sudo[19453]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 00:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:37 nativespace-cdp sudo[19456]: pam_unix(sudo:session): session closed for user root
Sep 30 00:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 00:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 00:09:38 nativespace-cdp sudo[19475]: pam_unix(sudo:session): session closed for user root
Sep 30 00:11:33 nativespace-cdp sshd[20024]: Connection closed by 159.100.136.21 port 37628 [preauth]
Sep 30 00:16:33 nativespace-cdp sshd[21069]: Connection closed by 159.100.136.21 port 47064 [preauth]
Sep 30 00:18:44 nativespace-cdp sshd[10554]: pam_systemd(sshd:session): Failed to release session: Interrupted system call
Sep 30 00:18:44 nativespace-cdp sshd[10554]: pam_unix(sshd:session): session closed for user root
Sep 30 00:21:34 nativespace-cdp sshd[22239]: Connection closed by 159.100.136.21 port 56524 [preauth]
Sep 30 00:24:45 nativespace-cdp sshd[22759]: Invalid user user from 165.154.71.165 port 51518
Sep 30 00:24:45 nativespace-cdp sshd[22759]: input_userauth_request: invalid user user [preauth]
Sep 30 00:24:45 nativespace-cdp sshd[22759]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 00:24:45 nativespace-cdp sshd[22759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.71.165
Sep 30 00:24:47 nativespace-cdp sshd[22759]: Failed password for invalid user user from 165.154.71.165 port 51518 ssh2
Sep 30 00:24:47 nativespace-cdp sshd[22759]: Received disconnect from 165.154.71.165 port 51518:11: Bye Bye [preauth]
Sep 30 00:24:47 nativespace-cdp sshd[22759]: Disconnected from 165.154.71.165 port 51518 [preauth]
Sep 30 00:26:33 nativespace-cdp sshd[23135]: Connection closed by 159.100.136.21 port 38234 [preauth]
Sep 30 00:27:15 nativespace-cdp sshd[23321]: Invalid user steam from 165.154.71.165 port 51534
Sep 30 00:27:15 nativespace-cdp sshd[23321]: input_userauth_request: invalid user steam [preauth]
Sep 30 00:27:15 nativespace-cdp sshd[23321]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 00:27:15 nativespace-cdp sshd[23321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.71.165
Sep 30 00:27:16 nativespace-cdp sshd[23321]: Failed password for invalid user steam from 165.154.71.165 port 51534 ssh2
Sep 30 00:27:17 nativespace-cdp sshd[23321]: Received disconnect from 165.154.71.165 port 51534:11: Bye Bye [preauth]
Sep 30 00:27:17 nativespace-cdp sshd[23321]: Disconnected from 165.154.71.165 port 51534 [preauth]
Sep 30 00:28:03 nativespace-cdp sshd[23430]: Invalid user tomcat from 165.154.71.165 port 36968
Sep 30 00:28:03 nativespace-cdp sshd[23430]: input_userauth_request: invalid user tomcat [preauth]
Sep 30 00:28:03 nativespace-cdp sshd[23430]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 00:28:03 nativespace-cdp sshd[23430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.71.165
Sep 30 00:28:05 nativespace-cdp sshd[23430]: Failed password for invalid user tomcat from 165.154.71.165 port 36968 ssh2
Sep 30 00:28:05 nativespace-cdp sshd[23430]: Received disconnect from 165.154.71.165 port 36968:11: Bye Bye [preauth]
Sep 30 00:28:05 nativespace-cdp sshd[23430]: Disconnected from 165.154.71.165 port 36968 [preauth]
Sep 30 00:31:33 nativespace-cdp sshd[24143]: Connection closed by 159.100.136.21 port 47954 [preauth]
Sep 30 00:36:33 nativespace-cdp sshd[25286]: Connection closed by 159.100.136.21 port 57774 [preauth]
Sep 30 00:39:49 nativespace-cdp sshd[21185]: pam_unix(sshd:session): session closed for user root
Sep 30 00:41:33 nativespace-cdp sshd[26252]: Connection closed by 159.100.136.21 port 39010 [preauth]
Sep 30 00:46:33 nativespace-cdp sshd[27253]: Connection closed by 159.100.136.21 port 48972 [preauth]
Sep 30 00:51:33 nativespace-cdp sshd[28516]: Connection closed by 159.100.136.21 port 58692 [preauth]
Sep 30 00:56:33 nativespace-cdp sshd[29520]: Connection closed by 159.100.136.21 port 40260 [preauth]
Sep 30 01:01:33 nativespace-cdp sshd[30610]: Connection closed by 159.100.136.21 port 49234 [preauth]
Sep 30 01:06:33 nativespace-cdp sshd[31707]: Connection closed by 159.100.136.21 port 59126 [preauth]
Sep 30 01:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 01:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:38 nativespace-cdp sudo[32330]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 01:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:38 nativespace-cdp sudo[32334]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 01:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:40 nativespace-cdp sudo[32337]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 01:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:40 nativespace-cdp sudo[32346]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 01:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:42 nativespace-cdp sudo[32349]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 01:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:42 nativespace-cdp sudo[32368]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 01:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:42 nativespace-cdp sudo[32372]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 01:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:42 nativespace-cdp sudo[32375]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 01:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:42 nativespace-cdp sudo[32378]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 01:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:42 nativespace-cdp sudo[32381]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 01:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:42 nativespace-cdp sudo[32385]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 01:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:44 nativespace-cdp sudo[32396]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 01:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:45 nativespace-cdp sudo[32401]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=spectrum user-3=hodgesonweb user-4=theblack user-5=agproduc user-6=still user-7=stephani user-8=leereyn1 user-9=foundation user-10=markward user-11=booff user-12=vantagep user-13=athenare user-14=connect9 user-15=lbscrmod user-16=maflemin user-17=ulsukarm user-18=martsblo user-19=dickemery123 user-20=ptkxhsbt user-21=hhdugcor user-22=lbhyisi user-23=magichat user-24=brmrjxl user-25=lakesan1 user-26=strathar user-27=atestord user-28=sarafoundation user-29=wilsonsw user-30=megacards user-31=musorguk user-32=gilpin user-33=milloyco user-34=elecleis user-35=hubmaster user-36=fetch user-37=carsinyo user-38=accooper user-39=ianrayne user-40=connectedshoppin user-41=thqkgnbz user-42=ultbcrra user-43=jonhartl user-44=seftvta user-45=firstres user-46=coursemc user-47=opaiscyx
Sep 30 01:09:45 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=firstrel user-49=clarkass user-50=costestimatorco user-51=firstred user-52=highlegh user-53=southlon user-54=skyfirec user-55=alexadmin user-56=innovat1 user-57=askhform user-58=stuartge user-59=nativene user-60=nstriton user-61=brighto1 user-62=vivienn1 user-63=firstre2 user-64=oneoarco user-65=battlere user-66=bedfords user-67=newstoda user-68=belle user-69=ggaaorgu user-70=bemadonn user-71=fawcettd user-72=burydropin user-73=nsceres user-74=beauty user-75=darkstar user-76=eatspam user-77=dhyana user-78=sibtoncc user-79=asandcoc user-80=bwppodcast user-81=zebrapho user-82=steve user-83=cambria1 user-84=cathski user-85=reliable user-86=ninejimm user-87=cwsocial user-88=pugwash user-89=paulmca1 user-90=howardon user-91=hirefootballgame user-92=eugincou user-93=courseme user-94=nscdp user-95=foods user-96=leftie user-97=fortunaz user-98=health2045 user-99=lkpier user-100=donnychicago user-101=steakbridieme
Sep 30 01:09:45 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=firstre5 user-103=ctedorgu user-104=philmcph user-105=isleofwi user-106=smrszyqg user-107=nomistakes user-108=hidden user-109=barbersh user-110=tigerlet user-111=lucy user-112=attlebor user-113=onlycont user-114=hodgsonmail user-115=outdoorc user-116=ranxterc user-117=branko user-118=romaldki user-119=tomandle user-120=jennimil user-121=chrisdal user-122=mcdermos user-123=david user-124=nbhavers user-125=careers user-126=tstardom user-127=oubpgvbx user-128=what user-129=havantho user-130=cath user-131=sketchy user-132=nvihkvu user-133=stagingerris user-134=dancinggardener user-135=ladburyp user-136=kategilpin user-137=design user-138=nove user-139=boldover user-140=bakery user-141=crrtipdl user-142=sosevalu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 01:09:45 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 01:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:47 nativespace-cdp sudo[32407]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 01:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:47 nativespace-cdp sudo[32413]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Uff8lChxygCpXQtK.~
Sep 30 01:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:47 nativespace-cdp sudo[32416]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Uff8lChxygCpXQtK.~'
Sep 30 01:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:47 nativespace-cdp sudo[32419]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Uff8lChxygCpXQtK.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 01:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:47 nativespace-cdp sudo[32423]: pam_unix(sudo:session): session closed for user root
Sep 30 01:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 01:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:09:47 nativespace-cdp sudo[32426]: pam_unix(sudo:session): session closed for user root
Sep 30 01:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 01:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 01:10:00 nativespace-cdp sudo[32475]: pam_unix(sudo:session): session closed for user root
Sep 30 01:11:34 nativespace-cdp sshd[390]: Connection closed by 159.100.136.21 port 40618 [preauth]
Sep 30 01:16:33 nativespace-cdp sshd[1386]: Connection closed by 159.100.136.21 port 50134 [preauth]
Sep 30 01:21:33 nativespace-cdp sshd[2563]: Connection closed by 159.100.136.21 port 59638 [preauth]
Sep 30 01:26:33 nativespace-cdp sshd[3898]: Connection closed by 159.100.136.21 port 41006 [preauth]
Sep 30 01:31:33 nativespace-cdp sshd[4865]: Connection closed by 159.100.136.21 port 50478 [preauth]
Sep 30 01:36:34 nativespace-cdp sshd[5980]: Connection closed by 159.100.136.21 port 60356 [preauth]
Sep 30 01:41:33 nativespace-cdp sshd[6871]: Connection closed by 159.100.136.21 port 41440 [preauth]
Sep 30 01:46:33 nativespace-cdp sshd[7904]: Connection closed by 159.100.136.21 port 51376 [preauth]
Sep 30 01:51:36 nativespace-cdp sshd[9672]: Connection closed by 159.100.136.21 port 60878 [preauth]
Sep 30 01:56:33 nativespace-cdp sshd[10568]: Connection closed by 159.100.136.21 port 41816 [preauth]
Sep 30 02:01:33 nativespace-cdp sshd[11584]: Connection closed by 159.100.136.21 port 51168 [preauth]
Sep 30 02:06:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 02:06:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:06:03 nativespace-cdp sudo[12632]: pam_unix(sudo:session): session closed for user root
Sep 30 02:06:34 nativespace-cdp sshd[12697]: Connection closed by 159.100.136.21 port 60932 [preauth]
Sep 30 02:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 02:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:32 nativespace-cdp sudo[13181]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 02:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:32 nativespace-cdp sudo[13184]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 02:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:33 nativespace-cdp sudo[13187]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:33 nativespace-cdp sudo[13194]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:36 nativespace-cdp sudo[13197]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:36 nativespace-cdp sudo[13208]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:36 nativespace-cdp sudo[13212]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:36 nativespace-cdp sudo[13215]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:36 nativespace-cdp sudo[13218]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:36 nativespace-cdp sudo[13222]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 02:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:36 nativespace-cdp sudo[13225]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 02:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:38 nativespace-cdp sudo[13235]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 02:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:38 nativespace-cdp sudo[13242]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=skyfirec user-2=alexadmin user-3=nativene user-4=stuartge user-5=askhform user-6=innovat1 user-7=oneoarco user-8=battlere user-9=vivienn1 user-10=firstre2 user-11=nstriton user-12=brighto1 user-13=bemadonn user-14=newstoda user-15=ggaaorgu user-16=belle user-17=bedfords user-18=fetch user-19=carsinyo user-20=hubmaster user-21=elecleis user-22=gilpin user-23=milloyco user-24=thqkgnbz user-25=connectedshoppin user-26=ianrayne user-27=accooper user-28=coursemc user-29=opaiscyx user-30=firstres user-31=ultbcrra user-32=jonhartl user-33=seftvta user-34=highlegh user-35=southlon user-36=firstred user-37=costestimatorco user-38=firstrel user-39=clarkass user-40=ptkxhsbt user-41=dickemery123 user-42=martsblo user-43=magichat user-44=hhdugcor user-45=lbhyisi user-46=atestord user-47=sarafoundation
Sep 30 02:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=strathar user-49=lakesan1 user-50=brmrjxl user-51=megacards user-52=musorguk user-53=wilsonsw user-54=theblack user-55=hodgesonweb user-56=spectrum user-57=jarvisin user-58=leereyn1 user-59=stephani user-60=agproduc user-61=still user-62=lbscrmod user-63=maflemin user-64=vantagep user-65=athenare user-66=connect9 user-67=markward user-68=booff user-69=foundation user-70=ulsukarm user-71=nvihkvu user-72=havantho user-73=sketchy user-74=cath user-75=what user-76=tstardom user-77=oubpgvbx user-78=design user-79=kategilpin user-80=stagingerris user-81=dancinggardener user-82=ladburyp user-83=boldover user-84=nove user-85=crrtipdl user-86=sosevalu user-87=bakery user-88=onlycont user-89=lucy user-90=attlebor user-91=romaldki user-92=branko user-93=outdoorc user-94=hodgsonmail user-95=ranxterc user-96=jennimil user-97=tomandle user-98=david user-99=careers user-100=nbhavers user-101=mcdermos user-102=chrisdal
Sep 30 02:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=cwsocial user-104=pugwash user-105=paulmca1 user-106=howardon user-107=reliable user-108=ninejimm user-109=cathski user-110=cambria1 user-111=courseme user-112=eugincou user-113=hirefootballgame user-114=donnychicago user-115=firstre5 user-116=steakbridieme user-117=ctedorgu user-118=philmcph user-119=lkpier user-120=leftie user-121=foods user-122=fortunaz user-123=health2045 user-124=nscdp user-125=barbersh user-126=tigerlet user-127=nomistakes user-128=hidden user-129=isleofwi user-130=smrszyqg user-131=nsceres user-132=fawcettd user-133=burydropin user-134=dhyana user-135=darkstar user-136=eatspam user-137=beauty user-138=sibtoncc user-139=asandcoc user-140=steve user-141=zebrapho user-142=bwppodcast feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 02:09:38 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 02:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:39 nativespace-cdp sudo[13248]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 02:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:40 nativespace-cdp sudo[13257]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-z4KduPgrEJyM5fUm.~
Sep 30 02:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:40 nativespace-cdp sudo[13260]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-z4KduPgrEJyM5fUm.~'
Sep 30 02:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:40 nativespace-cdp sudo[13263]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-z4KduPgrEJyM5fUm.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 02:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:40 nativespace-cdp sudo[13268]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 02:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:40 nativespace-cdp sudo[13271]: pam_unix(sudo:session): session closed for user root
Sep 30 02:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 02:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 02:09:41 nativespace-cdp sudo[13290]: pam_unix(sudo:session): session closed for user root
Sep 30 02:11:33 nativespace-cdp sshd[13715]: Connection closed by 159.100.136.21 port 42172 [preauth]
Sep 30 02:16:35 nativespace-cdp sshd[14618]: Connection closed by 159.100.136.21 port 52000 [preauth]
Sep 30 02:21:33 nativespace-cdp sshd[15745]: Connection closed by 159.100.136.21 port 33374 [preauth]
Sep 30 02:26:33 nativespace-cdp sshd[16706]: Connection closed by 159.100.136.21 port 43290 [preauth]
Sep 30 02:31:33 nativespace-cdp sshd[17713]: Connection closed by 159.100.136.21 port 52610 [preauth]
Sep 30 02:36:34 nativespace-cdp sshd[18775]: Connection closed by 159.100.136.21 port 34132 [preauth]
Sep 30 02:41:35 nativespace-cdp sshd[19832]: Connection closed by 159.100.136.21 port 43442 [preauth]
Sep 30 02:46:33 nativespace-cdp sshd[20779]: Connection closed by 159.100.136.21 port 53268 [preauth]
Sep 30 02:51:33 nativespace-cdp sshd[21945]: Connection closed by 159.100.136.21 port 34286 [preauth]
Sep 30 02:56:35 nativespace-cdp sshd[22973]: Connection closed by 159.100.136.21 port 43922 [preauth]
Sep 30 03:01:33 nativespace-cdp sshd[24101]: Connection closed by 159.100.136.21 port 52308 [preauth]
Sep 30 03:06:35 nativespace-cdp sshd[25428]: Connection closed by 159.100.136.21 port 33814 [preauth]
Sep 30 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:33 nativespace-cdp sudo[26006]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:33 nativespace-cdp sudo[26009]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:33 nativespace-cdp sudo[26012]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:33 nativespace-cdp sudo[26018]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 03:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:35 nativespace-cdp sudo[26021]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:35 nativespace-cdp sudo[26030]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:35 nativespace-cdp sudo[26033]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:35 nativespace-cdp sudo[26036]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:35 nativespace-cdp sudo[26039]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 03:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:36 nativespace-cdp sudo[26042]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 03:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:36 nativespace-cdp sudo[26045]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 03:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:43 nativespace-cdp sudo[26067]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 03:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:43 nativespace-cdp sudo[26072]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=branko user-2=hodgsonmail user-3=outdoorc user-4=ranxterc user-5=romaldki user-6=lucy user-7=attlebor user-8=onlycont user-9=mcdermos user-10=chrisdal user-11=david user-12=careers user-13=nbhavers user-14=tomandle user-15=jennimil user-16=kategilpin user-17=stagingerris user-18=dancinggardener user-19=ladburyp user-20=design user-21=what user-22=tstardom user-23=oubpgvbx user-24=nvihkvu user-25=havantho user-26=sketchy user-27=cath user-28=crrtipdl user-29=sosevalu user-30=bakery user-31=nove user-32=boldover user-33=darkstar user-34=eatspam user-35=beauty user-36=dhyana user-37=fawcettd user-38=burydropin user-39=nsceres user-40=zebrapho user-41=bwppodcast user-42=steve user-43=asandcoc user-44=sibtoncc user-45=hirefootballgame user-46=courseme user-47=eugincou user-48=reliable
Sep 30 03:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ninejimm user-50=cambria1 user-51=cathski user-52=cwsocial user-53=pugwash user-54=paulmca1 user-55=howardon user-56=isleofwi user-57=smrszyqg user-58=tigerlet user-59=barbersh user-60=nomistakes user-61=hidden user-62=foods user-63=leftie user-64=fortunaz user-65=health2045 user-66=nscdp user-67=firstre5 user-68=donnychicago user-69=steakbridieme user-70=ctedorgu user-71=philmcph user-72=lkpier user-73=ianrayne user-74=accooper user-75=thqkgnbz user-76=connectedshoppin user-77=elecleis user-78=milloyco user-79=gilpin user-80=fetch user-81=carsinyo user-82=hubmaster user-83=costestimatorco user-84=clarkass user-85=firstrel user-86=highlegh user-87=southlon user-88=firstred user-89=firstres user-90=ultbcrra user-91=jonhartl user-92=seftvta user-93=coursemc user-94=opaiscyx user-95=stuartge user-96=askhform user-97=innovat1 user-98=nativene user-99=skyfirec user-100=alexadmin user-101=bedfords
Sep 30 03:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bemadonn user-103=newstoda user-104=ggaaorgu user-105=belle user-106=nstriton user-107=brighto1 user-108=oneoarco user-109=battlere user-110=vivienn1 user-111=firstre2 user-112=agproduc user-113=still user-114=leereyn1 user-115=stephani user-116=jarvisin user-117=theblack user-118=hodgesonweb user-119=spectrum user-120=ulsukarm user-121=booff user-122=markward user-123=foundation user-124=lbscrmod user-125=maflemin user-126=vantagep user-127=athenare user-128=connect9 user-129=hhdugcor user-130=lbhyisi user-131=magichat user-132=martsblo user-133=ptkxhsbt user-134=dickemery123 user-135=wilsonsw user-136=megacards user-137=musorguk user-138=lakesan1 user-139=brmrjxl user-140=atestord user-141=sarafoundation user-142=strathar feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 30 03:09:43 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 03:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:44 nativespace-cdp sudo[26078]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 03:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:44 nativespace-cdp sudo[26085]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Rj43Lr3Gowhs63Jy.~
Sep 30 03:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:44 nativespace-cdp sudo[26088]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Rj43Lr3Gowhs63Jy.~'
Sep 30 03:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:44 nativespace-cdp sudo[26091]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Rj43Lr3Gowhs63Jy.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 03:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:44 nativespace-cdp sudo[26095]: pam_unix(sudo:session): session closed for user root
Sep 30 03:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 03:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:09:44 nativespace-cdp sudo[26099]: pam_unix(sudo:session): session closed for user root
Sep 30 03:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 03:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 03:10:01 nativespace-cdp sudo[26156]: pam_unix(sudo:session): session closed for user root
Sep 30 03:11:33 nativespace-cdp sshd[26579]: Connection closed by 159.100.136.21 port 43480 [preauth]
Sep 30 03:16:33 nativespace-cdp sshd[27582]: Connection closed by 159.100.136.21 port 52850 [preauth]
Sep 30 03:21:33 nativespace-cdp sshd[28563]: Connection closed by 159.100.136.21 port 34070 [preauth]
Sep 30 03:26:33 nativespace-cdp sshd[29635]: Connection closed by 159.100.136.21 port 44012 [preauth]
Sep 30 03:31:33 nativespace-cdp sshd[30664]: Connection closed by 159.100.136.21 port 53876 [preauth]
Sep 30 03:36:33 nativespace-cdp sshd[31860]: Connection closed by 159.100.136.21 port 35338 [preauth]
Sep 30 03:41:33 nativespace-cdp sshd[692]: Connection closed by 159.100.136.21 port 44750 [preauth]
Sep 30 03:46:33 nativespace-cdp sshd[1754]: Connection closed by 159.100.136.21 port 54420 [preauth]
Sep 30 03:51:33 nativespace-cdp sshd[3032]: Connection closed by 159.100.136.21 port 35772 [preauth]
Sep 30 03:56:33 nativespace-cdp sshd[4010]: Connection closed by 159.100.136.21 port 45844 [preauth]
Sep 30 04:01:33 nativespace-cdp sshd[5160]: Connection closed by 159.100.136.21 port 55020 [preauth]
Sep 30 04:06:35 nativespace-cdp sshd[6191]: Connection closed by 159.100.136.21 port 36656 [preauth]
Sep 30 04:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 04:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:37 nativespace-cdp sudo[6936]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 04:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:37 nativespace-cdp sudo[6940]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 04:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:37 nativespace-cdp sudo[6943]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 04:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:37 nativespace-cdp sudo[6950]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 04:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:39 nativespace-cdp sudo[6953]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:39 nativespace-cdp sudo[6962]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:39 nativespace-cdp sudo[6966]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:39 nativespace-cdp sudo[6970]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:39 nativespace-cdp sudo[6973]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:39 nativespace-cdp sudo[6978]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:39 nativespace-cdp sudo[6981]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 04:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:41 nativespace-cdp sudo[6996]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 04:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:42 nativespace-cdp sudo[7001]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=onlycont user-2=attlebor user-3=lucy user-4=romaldki user-5=branko user-6=ranxterc user-7=outdoorc user-8=hodgsonmail user-9=jennimil user-10=tomandle user-11=careers user-12=nbhavers user-13=david user-14=mcdermos user-15=chrisdal user-16=nvihkvu user-17=sketchy user-18=cath user-19=havantho user-20=what user-21=oubpgvbx user-22=tstardom user-23=design user-24=kategilpin user-25=ladburyp user-26=stagingerris user-27=dancinggardener user-28=boldover user-29=nove user-30=sosevalu user-31=crrtipdl user-32=bakery user-33=nsceres user-34=burydropin user-35=fawcettd user-36=dhyana user-37=eatspam user-38=darkstar user-39=beauty user-40=sibtoncc user-41=asandcoc user-42=steve user-43=zebrapho user-44=bwppodcast user-45=howardon user-46=pugwash user-47=paulmca1 user-48=cwsocial user-49=ninejimm
Sep 30 04:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=reliable user-51=cambria1 user-52=cathski user-53=courseme user-54=eugincou user-55=hirefootballgame user-56=ctedorgu user-57=philmcph user-58=donnychicago user-59=steakbridieme user-60=firstre5 user-61=lkpier user-62=fortunaz user-63=health2045 user-64=leftie user-65=foods user-66=nscdp user-67=tigerlet user-68=barbersh user-69=hidden user-70=nomistakes user-71=smrszyqg user-72=isleofwi user-73=carsinyo user-74=fetch user-75=hubmaster user-76=elecleis user-77=milloyco user-78=gilpin user-79=thqkgnbz user-80=connectedshoppin user-81=ianrayne user-82=accooper user-83=coursemc user-84=opaiscyx user-85=firstres user-86=jonhartl user-87=seftvta user-88=ultbcrra user-89=southlon user-90=highlegh user-91=firstred user-92=costestimatorco user-93=clarkass user-94=firstrel user-95=alexadmin user-96=skyfirec user-97=nativene user-98=stuartge user-99=askhform user-100=innovat1 user-101=battlere user-102=oneoarco
Sep 30 04:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstre2 user-104=vivienn1 user-105=brighto1 user-106=nstriton user-107=bemadonn user-108=ggaaorgu user-109=belle user-110=newstoda user-111=bedfords user-112=theblack user-113=hodgesonweb user-114=spectrum user-115=jarvisin user-116=leereyn1 user-117=stephani user-118=still user-119=agproduc user-120=maflemin user-121=lbscrmod user-122=connect9 user-123=athenare user-124=vantagep user-125=booff user-126=markward user-127=foundation user-128=ulsukarm user-129=ptkxhsbt user-130=dickemery123 user-131=martsblo user-132=magichat user-133=lbhyisi user-134=hhdugcor user-135=sarafoundation user-136=atestord user-137=strathar user-138=lakesan1 user-139=brmrjxl user-140=musorguk user-141=megacards user-142=wilsonsw feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 04:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:43 nativespace-cdp sudo[7007]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 04:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:43 nativespace-cdp sudo[7020]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZnRJ6wpuPLTKm3sF.~
Sep 30 04:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:44 nativespace-cdp sudo[7025]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZnRJ6wpuPLTKm3sF.~'
Sep 30 04:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:44 nativespace-cdp sudo[7029]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZnRJ6wpuPLTKm3sF.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 04:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:44 nativespace-cdp sudo[7033]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 04:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:44 nativespace-cdp sudo[7036]: pam_unix(sudo:session): session closed for user root
Sep 30 04:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 04:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:09:45 nativespace-cdp sudo[7058]: pam_unix(sudo:session): session closed for user root
Sep 30 04:11:33 nativespace-cdp sshd[7539]: Connection closed by 159.100.136.21 port 45938 [preauth]
Sep 30 04:16:33 nativespace-cdp sshd[8463]: Connection closed by 159.100.136.21 port 55162 [preauth]
Sep 30 04:20:52 nativespace-cdp sshd[9679]: Invalid user usuario from 222.165.138.144 port 35204
Sep 30 04:20:52 nativespace-cdp sshd[9679]: input_userauth_request: invalid user usuario [preauth]
Sep 30 04:20:52 nativespace-cdp sshd[9679]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 04:20:52 nativespace-cdp sshd[9679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.165.138.144
Sep 30 04:20:54 nativespace-cdp sshd[9679]: Failed password for invalid user usuario from 222.165.138.144 port 35204 ssh2
Sep 30 04:20:54 nativespace-cdp sshd[9679]: Received disconnect from 222.165.138.144 port 35204:11: Bye Bye [preauth]
Sep 30 04:20:54 nativespace-cdp sshd[9679]: Disconnected from 222.165.138.144 port 35204 [preauth]
Sep 30 04:21:10 nativespace-cdp sshd[9729]: Invalid user deploy from 46.101.153.128 port 57656
Sep 30 04:21:10 nativespace-cdp sshd[9729]: input_userauth_request: invalid user deploy [preauth]
Sep 30 04:21:10 nativespace-cdp sshd[9729]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 04:21:10 nativespace-cdp sshd[9729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.153.128
Sep 30 04:21:12 nativespace-cdp sshd[9729]: Failed password for invalid user deploy from 46.101.153.128 port 57656 ssh2
Sep 30 04:21:12 nativespace-cdp sshd[9729]: Received disconnect from 46.101.153.128 port 57656:11: Bye Bye [preauth]
Sep 30 04:21:12 nativespace-cdp sshd[9729]: Disconnected from 46.101.153.128 port 57656 [preauth]
Sep 30 04:21:33 nativespace-cdp sshd[9789]: Connection closed by 159.100.136.21 port 35980 [preauth]
Sep 30 04:23:30 nativespace-cdp sshd[10071]: Invalid user username from 34.92.18.156 port 35392
Sep 30 04:23:30 nativespace-cdp sshd[10071]: input_userauth_request: invalid user username [preauth]
Sep 30 04:23:30 nativespace-cdp sshd[10071]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 04:23:30 nativespace-cdp sshd[10071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.18.156
Sep 30 04:23:31 nativespace-cdp sshd[10071]: Failed password for invalid user username from 34.92.18.156 port 35392 ssh2
Sep 30 04:23:32 nativespace-cdp sshd[10071]: Received disconnect from 34.92.18.156 port 35392:11: Bye Bye [preauth]
Sep 30 04:23:32 nativespace-cdp sshd[10071]: Disconnected from 34.92.18.156 port 35392 [preauth]
Sep 30 04:25:37 nativespace-cdp sshd[10574]: Invalid user usuario from 46.101.153.128 port 42916
Sep 30 04:25:37 nativespace-cdp sshd[10574]: input_userauth_request: invalid user usuario [preauth]
Sep 30 04:25:37 nativespace-cdp sshd[10574]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 04:25:37 nativespace-cdp sshd[10574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.153.128
Sep 30 04:25:39 nativespace-cdp sshd[10574]: Failed password for invalid user usuario from 46.101.153.128 port 42916 ssh2
Sep 30 04:25:41 nativespace-cdp sshd[10574]: Received disconnect from 46.101.153.128 port 42916:11: Bye Bye [preauth]
Sep 30 04:25:41 nativespace-cdp sshd[10574]: Disconnected from 46.101.153.128 port 42916 [preauth]
Sep 30 04:26:11 nativespace-cdp sshd[10730]: Connection closed by 222.165.138.144 port 18254 [preauth]
Sep 30 04:26:11 nativespace-cdp sshd[10728]: Invalid user acer from 34.92.18.156 port 41996
Sep 30 04:26:11 nativespace-cdp sshd[10728]: input_userauth_request: invalid user acer [preauth]
Sep 30 04:26:11 nativespace-cdp sshd[10728]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 04:26:11 nativespace-cdp sshd[10728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.18.156
Sep 30 04:26:13 nativespace-cdp sshd[10737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.153.128  user=root
Sep 30 04:26:13 nativespace-cdp sshd[10737]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 04:26:14 nativespace-cdp sshd[10728]: Failed password for invalid user acer from 34.92.18.156 port 41996 ssh2
Sep 30 04:26:14 nativespace-cdp sshd[10728]: Received disconnect from 34.92.18.156 port 41996:11: Bye Bye [preauth]
Sep 30 04:26:14 nativespace-cdp sshd[10728]: Disconnected from 34.92.18.156 port 41996 [preauth]
Sep 30 04:26:15 nativespace-cdp sshd[10737]: Failed password for root from 46.101.153.128 port 47532 ssh2
Sep 30 04:26:15 nativespace-cdp sshd[10737]: Received disconnect from 46.101.153.128 port 47532:11: Bye Bye [preauth]
Sep 30 04:26:15 nativespace-cdp sshd[10737]: Disconnected from 46.101.153.128 port 47532 [preauth]
Sep 30 04:26:33 nativespace-cdp sshd[10815]: Connection closed by 159.100.136.21 port 45116 [preauth]
Sep 30 04:26:55 nativespace-cdp sshd[10875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.18.156  user=root
Sep 30 04:26:55 nativespace-cdp sshd[10875]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 04:26:57 nativespace-cdp sshd[10875]: Failed password for root from 34.92.18.156 port 56388 ssh2
Sep 30 04:27:00 nativespace-cdp sshd[10875]: Received disconnect from 34.92.18.156 port 56388:11: Bye Bye [preauth]
Sep 30 04:27:00 nativespace-cdp sshd[10875]: Disconnected from 34.92.18.156 port 56388 [preauth]
Sep 30 04:27:03 nativespace-cdp sshd[10887]: Connection closed by 222.165.138.144 port 49764 [preauth]
Sep 30 04:27:47 nativespace-cdp sshd[11002]: Invalid user ubuntu from 222.165.138.144 port 11952
Sep 30 04:27:47 nativespace-cdp sshd[11002]: input_userauth_request: invalid user ubuntu [preauth]
Sep 30 04:27:47 nativespace-cdp sshd[11002]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 04:27:47 nativespace-cdp sshd[11002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.165.138.144
Sep 30 04:27:49 nativespace-cdp sshd[11002]: Failed password for invalid user ubuntu from 222.165.138.144 port 11952 ssh2
Sep 30 04:27:52 nativespace-cdp sshd[11002]: Received disconnect from 222.165.138.144 port 11952:11: Bye Bye [preauth]
Sep 30 04:27:52 nativespace-cdp sshd[11002]: Disconnected from 222.165.138.144 port 11952 [preauth]
Sep 30 04:29:18 nativespace-cdp sshd[11221]: Invalid user ubuntu from 222.165.138.144 port 63968
Sep 30 04:29:18 nativespace-cdp sshd[11221]: input_userauth_request: invalid user ubuntu [preauth]
Sep 30 04:29:18 nativespace-cdp sshd[11221]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 04:29:18 nativespace-cdp sshd[11221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.165.138.144
Sep 30 04:29:20 nativespace-cdp sshd[11221]: Failed password for invalid user ubuntu from 222.165.138.144 port 63968 ssh2
Sep 30 04:29:21 nativespace-cdp sshd[11221]: Received disconnect from 222.165.138.144 port 63968:11: Bye Bye [preauth]
Sep 30 04:29:21 nativespace-cdp sshd[11221]: Disconnected from 222.165.138.144 port 63968 [preauth]
Sep 30 04:31:33 nativespace-cdp sshd[11904]: Connection closed by 159.100.136.21 port 54016 [preauth]
Sep 30 04:36:36 nativespace-cdp sshd[13567]: Connection closed by 159.100.136.21 port 34818 [preauth]
Sep 30 04:41:32 nativespace-cdp sshd[15289]: Connection closed by 159.100.136.21 port 43884 [preauth]
Sep 30 04:46:33 nativespace-cdp sshd[16206]: Connection closed by 159.100.136.21 port 52406 [preauth]
Sep 30 04:51:35 nativespace-cdp sshd[17371]: Connection closed by 159.100.136.21 port 33426 [preauth]
Sep 30 04:56:34 nativespace-cdp sshd[18284]: Connection closed by 159.100.136.21 port 42978 [preauth]
Sep 30 04:56:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 04:56:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:56:36 nativespace-cdp sudo[18294]: pam_unix(sudo:session): session closed for user root
Sep 30 04:56:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 04:56:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:56:37 nativespace-cdp sudo[18304]: pam_unix(sudo:session): session closed for user root
Sep 30 04:56:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 04:56:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:56:40 nativespace-cdp sudo[18317]: pam_unix(sudo:session): session closed for user root
Sep 30 04:56:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=tstardom user-2=oubpgvbx user-3=what user-4=sketchy user-5=cath user-6=havantho user-7=nvihkvu user-8=ladburyp user-9=dancinggardener user-10=stagingerris user-11=kategilpin user-12=design user-13=nove user-14=boldover user-15=bakery user-16=sosevalu user-17=crrtipdl user-18=attlebor user-19=lucy user-20=onlycont user-21=outdoorc user-22=hodgsonmail user-23=ranxterc user-24=branko user-25=romaldki user-26=tomandle user-27=jennimil user-28=chrisdal user-29=mcdermos user-30=careers user-31=nbhavers user-32=david user-33=cathski user-34=cambria1 user-35=ninejimm user-36=reliable user-37=paulmca1 user-38=howardon user-39=pugwash user-40=cwsocial user-41=hirefootballgame user-42=eugincou user-43=courseme user-44=nscdp user-45=health2045 user-46=fortunaz user-47=foods user-48=leftie user-49=lkpier
Sep 30 04:56:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=ctedorgu user-51=philmcph user-52=firstre5 user-53=steakbridieme user-54=donnychicago user-55=smrszyqg user-56=isleofwi user-57=hidden user-58=nomistakes user-59=tigerlet user-60=barbersh user-61=burydropin user-62=fawcettd user-63=nsceres user-64=beauty user-65=eatspam user-66=darkstar user-67=dhyana user-68=asandcoc user-69=sibtoncc user-70=bwppodcast user-71=zebrapho user-72=steve user-73=skyfirec user-74=alexadmin user-75=innovat1 user-76=askhform user-77=stuartge user-78=nativene user-79=brighto1 user-80=nstriton user-81=firstre2 user-82=vivienn1 user-83=battlere user-84=oneoarco user-85=bedfords user-86=ggaaorgu user-87=belle user-88=newstoda user-89=bemadonn user-90=milloyco user-91=gilpin user-92=elecleis user-93=hubmaster user-94=carsinyo user-95=fetch user-96=accooper user-97=ianrayne user-98=connectedshoppin user-99=thqkgnbz user-100=jonhartl user-101=seftvta user-102=ultbcrra user-103=firstres
Sep 30 04:56:40 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=coursemc user-105=opaiscyx user-106=clarkass user-107=firstrel user-108=costestimatorco user-109=firstred user-110=southlon user-111=highlegh user-112=martsblo user-113=dickemery123 user-114=ptkxhsbt user-115=lbhyisi user-116=hhdugcor user-117=magichat user-118=lakesan1 user-119=brmrjxl user-120=strathar user-121=sarafoundation user-122=atestord user-123=wilsonsw user-124=musorguk user-125=megacards user-126=jarvisin user-127=spectrum user-128=theblack user-129=hodgesonweb user-130=still user-131=agproduc user-132=stephani user-133=leereyn1 user-134=markward user-135=booff user-136=foundation user-137=athenare user-138=connect9 user-139=vantagep user-140=maflemin user-141=lbscrmod user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 04:56:40 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 04:56:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:56:41 nativespace-cdp sudo[18323]: pam_unix(sudo:session): session closed for user root
Sep 30 04:56:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 30 04:56:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:56:42 nativespace-cdp sudo[18329]: pam_unix(sudo:session): session closed for user root
Sep 30 04:56:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Sep 30 04:56:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:56:43 nativespace-cdp sudo[18334]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 30 04:57:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 30 04:57:09 nativespace-cdp sudo[18446]: pam_unix(sudo:session): session closed for user onlycont
Sep 30 04:57:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Sep 30 04:57:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:09 nativespace-cdp sudo[18452]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Sep 30 04:57:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:10 nativespace-cdp sudo[18458]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Sep 30 04:57:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:12 nativespace-cdp sudo[18463]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 30 04:57:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:12 nativespace-cdp sudo[18470]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Sep 30 04:57:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:14 nativespace-cdp sudo[18482]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Sep 30 04:57:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:18 nativespace-cdp sudo[18489]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Sep 30 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:18 nativespace-cdp sudo[18504]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Sep 30 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:18 nativespace-cdp sudo[18509]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Sep 30 04:57:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:30 nativespace-cdp sudo[18590]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 30 04:57:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 30 04:57:33 nativespace-cdp sudo[18722]: pam_unix(sudo:session): session closed for user onlycont
Sep 30 04:57:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 30 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 30 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 30 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 04:57:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 30 04:57:33 nativespace-cdp sudo[18728]: pam_unix(sudo:session): session closed for user onlycont
Sep 30 04:57:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 30 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 30 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 30 04:57:33 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 04:57:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 30 04:57:34 nativespace-cdp sudo[18735]: pam_unix(sudo:session): session closed for user onlycont
Sep 30 04:57:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 30 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 30 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 30 04:57:34 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 04:57:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 30 04:57:37 nativespace-cdp sudo[18744]: pam_unix(sudo:session): session closed for user onlycont
Sep 30 04:57:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 30 04:57:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 30 04:57:47 nativespace-cdp sudo[18860]: pam_unix(sudo:session): session closed for user onlycont
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 04:57:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 30 04:57:47 nativespace-cdp sudo[18867]: pam_unix(sudo:session): session closed for user onlycont
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 04:57:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 30 04:57:47 nativespace-cdp sudo[18873]: pam_unix(sudo:session): session closed for user onlycont
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Sep 30 04:57:47 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 04:57:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 30 04:57:47 nativespace-cdp sudo[18880]: pam_unix(sudo:session): session closed for user onlycont
Sep 30 04:57:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 30 04:57:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:49 nativespace-cdp sudo[18914]: pam_unix(sudo:session): session closed for user root
Sep 30 04:57:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Sep 30 04:57:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:57:49 nativespace-cdp sudo[18920]: pam_unix(sudo:session): session closed for user root
Sep 30 04:58:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 30 04:58:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 04:58:53 nativespace-cdp sudo[19108]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 04:58:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 30 04:58:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:58:54 nativespace-cdp sudo[19115]: pam_unix(sudo:session): session closed for user root
Sep 30 04:58:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Sep 30 04:58:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:58:54 nativespace-cdp sudo[19120]: pam_unix(sudo:session): session closed for user root
Sep 30 04:58:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Sep 30 04:58:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:58:56 nativespace-cdp sudo[19125]: pam_unix(sudo:session): session closed for user root
Sep 30 04:58:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 30 04:58:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:58:56 nativespace-cdp sudo[19132]: pam_unix(sudo:session): session closed for user root
Sep 30 04:58:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Sep 30 04:58:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:58:58 nativespace-cdp sudo[19147]: pam_unix(sudo:session): session closed for user root
Sep 30 04:58:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Sep 30 04:58:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:58:59 nativespace-cdp sudo[19152]: pam_unix(sudo:session): session closed for user root
Sep 30 04:59:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Sep 30 04:59:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:59:06 nativespace-cdp sudo[19234]: pam_unix(sudo:session): session closed for user root
Sep 30 04:59:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 30 04:59:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 04:59:09 nativespace-cdp sudo[19288]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 04:59:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 30 04:59:09 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 30 04:59:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 30 04:59:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 04:59:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 04:59:10 nativespace-cdp sudo[19296]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 04:59:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 30 04:59:10 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 30 04:59:10 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 30 04:59:10 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 04:59:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 04:59:27 nativespace-cdp sudo[19303]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 04:59:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 30 04:59:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 04:59:37 nativespace-cdp sudo[19450]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 04:59:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 30 04:59:37 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 30 04:59:37 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 30 04:59:37 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 04:59:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 04:59:37 nativespace-cdp sudo[19456]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 04:59:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Sep 30 04:59:38 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Sep 30 04:59:38 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Sep 30 04:59:38 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 04:59:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 04:59:38 nativespace-cdp sudo[19462]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 04:59:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 30 04:59:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:59:40 nativespace-cdp sudo[19499]: pam_unix(sudo:session): session closed for user root
Sep 30 04:59:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Sep 30 04:59:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:59:41 nativespace-cdp sudo[19504]: pam_unix(sudo:session): session closed for user root
Sep 30 04:59:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 30 04:59:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 30 04:59:55 nativespace-cdp sudo[19668]: pam_unix(sudo:session): session closed for user lkpier
Sep 30 04:59:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Sep 30 04:59:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:59:55 nativespace-cdp sudo[19674]: pam_unix(sudo:session): session closed for user root
Sep 30 04:59:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Sep 30 04:59:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:59:56 nativespace-cdp sudo[19679]: pam_unix(sudo:session): session closed for user root
Sep 30 04:59:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 30 04:59:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:59:56 nativespace-cdp sudo[19683]: pam_unix(sudo:session): session closed for user root
Sep 30 04:59:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Sep 30 04:59:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:59:57 nativespace-cdp sudo[19699]: pam_unix(sudo:session): session closed for user root
Sep 30 04:59:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Sep 30 04:59:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 04:59:57 nativespace-cdp sudo[19705]: pam_unix(sudo:session): session closed for user root
Sep 30 05:00:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Sep 30 05:00:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:00:08 nativespace-cdp sudo[19957]: pam_unix(sudo:session): session closed for user root
Sep 30 05:00:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 30 05:00:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 30 05:00:11 nativespace-cdp sudo[20018]: pam_unix(sudo:session): session closed for user lkpier
Sep 30 05:00:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 30 05:00:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 30 05:00:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 30 05:00:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 05:00:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 30 05:00:11 nativespace-cdp sudo[20025]: pam_unix(sudo:session): session closed for user lkpier
Sep 30 05:00:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 30 05:00:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 30 05:00:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 30 05:00:11 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 05:00:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 30 05:00:28 nativespace-cdp sudo[20033]: pam_unix(sudo:session): session closed for user lkpier
Sep 30 05:00:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 30 05:00:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 30 05:00:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 30 05:00:28 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 05:00:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 30 05:00:30 nativespace-cdp sudo[20131]: pam_unix(sudo:session): session closed for user lkpier
Sep 30 05:00:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 30 05:00:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 30 05:00:42 nativespace-cdp sudo[20258]: pam_unix(sudo:session): session closed for user lkpier
Sep 30 05:00:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 30 05:00:42 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 30 05:00:42 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 30 05:00:42 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 05:00:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 30 05:00:42 nativespace-cdp sudo[20264]: pam_unix(sudo:session): session closed for user lkpier
Sep 30 05:00:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 30 05:00:42 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 30 05:00:42 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 30 05:00:42 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 05:00:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 30 05:00:43 nativespace-cdp sudo[20270]: pam_unix(sudo:session): session closed for user lkpier
Sep 30 05:00:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Sep 30 05:00:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Sep 30 05:00:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Sep 30 05:00:43 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 05:00:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 30 05:00:43 nativespace-cdp sudo[20276]: pam_unix(sudo:session): session closed for user lkpier
Sep 30 05:00:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 30 05:00:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:00:48 nativespace-cdp sudo[20313]: pam_unix(sudo:session): session closed for user root
Sep 30 05:00:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Sep 30 05:00:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:00:48 nativespace-cdp sudo[20321]: pam_unix(sudo:session): session closed for user root
Sep 30 05:00:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Sep 30 05:00:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:00:50 nativespace-cdp sudo[20337]: pam_unix(sudo:session): session closed for user root
Sep 30 05:00:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Sep 30 05:00:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:00:50 nativespace-cdp sudo[20343]: pam_unix(sudo:session): session closed for user root
Sep 30 05:00:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 30 05:00:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 30 05:00:51 nativespace-cdp sudo[20355]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 30 05:00:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Sep 30 05:00:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:00:52 nativespace-cdp sudo[20361]: pam_unix(sudo:session): session closed for user root
Sep 30 05:00:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Sep 30 05:00:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:00:52 nativespace-cdp sudo[20366]: pam_unix(sudo:session): session closed for user root
Sep 30 05:00:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 30 05:00:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:00:52 nativespace-cdp sudo[20370]: pam_unix(sudo:session): session closed for user root
Sep 30 05:01:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 30 05:01:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 05:01:03 nativespace-cdp sudo[20465]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 05:01:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Sep 30 05:01:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:01:04 nativespace-cdp sudo[20473]: pam_unix(sudo:session): session closed for user root
Sep 30 05:01:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 30 05:01:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:01:04 nativespace-cdp sudo[20480]: pam_unix(sudo:session): session closed for user root
Sep 30 05:01:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Sep 30 05:01:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:01:05 nativespace-cdp sudo[20496]: pam_unix(sudo:session): session closed for user root
Sep 30 05:01:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Sep 30 05:01:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:01:11 nativespace-cdp sudo[20559]: pam_unix(sudo:session): session closed for user root
Sep 30 05:01:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 30 05:01:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 05:01:14 nativespace-cdp sudo[20623]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 05:01:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 30 05:01:14 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 30 05:01:14 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 30 05:01:14 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 05:01:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 05:01:15 nativespace-cdp sudo[20629]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 05:01:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 30 05:01:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 30 05:01:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 30 05:01:15 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 05:01:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 05:01:33 nativespace-cdp sshd[20685]: Connection closed by 159.100.136.21 port 52272 [preauth]
Sep 30 05:01:33 nativespace-cdp sudo[20640]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 05:01:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Sep 30 05:01:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 05:01:40 nativespace-cdp sudo[20785]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 05:01:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 30 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 30 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 30 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 05:01:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 05:01:40 nativespace-cdp sudo[20791]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 05:01:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Sep 30 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Sep 30 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Sep 30 05:01:40 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Sep 30 05:01:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 05:01:40 nativespace-cdp sudo[20797]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 05:01:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 30 05:01:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:01:43 nativespace-cdp sudo[20835]: pam_unix(sudo:session): session closed for user root
Sep 30 05:01:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Sep 30 05:01:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:01:43 nativespace-cdp sudo[20843]: pam_unix(sudo:session): session closed for user root
Sep 30 05:01:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Sep 30 05:01:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 30 05:01:56 nativespace-cdp sudo[20903]: pam_unix(sudo:session): session closed for user fortunaz
Sep 30 05:01:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Sep 30 05:01:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:01:57 nativespace-cdp sudo[20909]: pam_unix(sudo:session): session closed for user root
Sep 30 05:01:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Sep 30 05:01:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:01:57 nativespace-cdp sudo[20913]: pam_unix(sudo:session): session closed for user root
Sep 30 05:01:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Sep 30 05:01:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:01:58 nativespace-cdp sudo[20918]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Sep 30 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:00 nativespace-cdp sudo[20938]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Sep 30 05:02:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:01 nativespace-cdp sudo[20943]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Sep 30 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:06 nativespace-cdp sudo[21018]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oubpgvbx WpToolkitNotification send_admin_auto_updates_notification available_updates_text= available_updates_list= installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Sep 30 05:02:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:17 nativespace-cdp sudo[21197]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Sep 30 05:02:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21320]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21323]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21326]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21329]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21332]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21335]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21338]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21343]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21346]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21349]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21352]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21355]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:24 nativespace-cdp sudo[21358]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21361]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21364]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21367]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21370]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21373]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21376]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21379]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21382]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21385]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21388]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21391]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21394]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21397]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21400]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21403]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21406]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21409]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21412]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21415]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21419]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21422]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21425]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21428]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21431]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21434]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:25 nativespace-cdp sudo[21437]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21440]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21443]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21446]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21449]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21452]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21455]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21458]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21461]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21464]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21467]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21470]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21473]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21476]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21479]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21482]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21485]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21488]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21491]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21494]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21498]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21501]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21504]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21507]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21510]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:26 nativespace-cdp sudo[21513]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21516]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21519]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21522]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21525]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21528]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21531]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21534]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21537]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21540]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21543]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21546]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21550]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21553]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21556]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21559]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21562]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21565]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21568]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21571]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21575]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21578]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21581]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21584]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21587]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:27 nativespace-cdp sudo[21590]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21593]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21596]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21599]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21602]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21605]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21608]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21611]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21614]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21617]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21620]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21623]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21626]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21629]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21632]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21635]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21638]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21641]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21644]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21647]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21651]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21654]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21657]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21661]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21664]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21667]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Sep 30 05:02:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:28 nativespace-cdp sudo[21670]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21673]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21676]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21679]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21682]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21685]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21688]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21691]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21694]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21697]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21700]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21703]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21706]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21709]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21712]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21715]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21718]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21721]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21724]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21727]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21730]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21733]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21736]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21740]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21744]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21747]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21750]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21753]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21756]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21759]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Sep 30 05:02:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:29 nativespace-cdp sudo[21762]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21765]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21768]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21771]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21774]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21777]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21780]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21783]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21786]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21789]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21792]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21795]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21798]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21801]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21804]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21807]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21810]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21813]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21816]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21819]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21822]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21825]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21828]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21831]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21835]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21838]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21841]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21844]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:30 nativespace-cdp sudo[21847]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 30 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21850]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21853]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21856]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21859]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21862]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21865]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21868]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21871]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21875]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21878]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21881]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21884]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21887]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21890]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21893]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21896]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21899]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21902]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21905]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21908]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21911]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21914]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21917]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21920]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21924]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21927]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21930]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21933]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:31 nativespace-cdp sudo[21936]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21939]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21942]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21945]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21948]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21951]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21954]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21957]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21960]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21963]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21966]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21969]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21972]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21975]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21978]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21982]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21985]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21988]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21991]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21994]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[21997]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[22000]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[22003]: pam_unix(sudo:session): session closed for user root
Sep 30 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Sep 30 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:02:32 nativespace-cdp sudo[22006]: pam_unix(sudo:session): session closed for user root
Sep 30 05:06:33 nativespace-cdp sshd[23014]: Connection closed by 159.100.136.21 port 33866 [preauth]
Sep 30 05:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 05:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:35 nativespace-cdp sudo[23485]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 05:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:35 nativespace-cdp sudo[23488]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 05:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:35 nativespace-cdp sudo[23492]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 05:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:35 nativespace-cdp sudo[23499]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 05:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:37 nativespace-cdp sudo[23505]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:37 nativespace-cdp sudo[23518]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:37 nativespace-cdp sudo[23521]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:37 nativespace-cdp sudo[23524]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:37 nativespace-cdp sudo[23527]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:37 nativespace-cdp sudo[23530]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 05:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:37 nativespace-cdp sudo[23535]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 05:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:44 nativespace-cdp sudo[23553]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 05:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:44 nativespace-cdp sudo[23557]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sketchy user-2=cath user-3=havantho user-4=nvihkvu user-5=oubpgvbx user-6=tstardom user-7=what user-8=design user-9=ladburyp user-10=stagingerris user-11=dancinggardener user-12=kategilpin user-13=boldover user-14=nove user-15=bakery user-16=sosevalu user-17=crrtipdl user-18=onlycont user-19=attlebor user-20=lucy user-21=romaldki user-22=outdoorc user-23=ranxterc user-24=hodgsonmail user-25=branko user-26=jennimil user-27=tomandle user-28=careers user-29=nbhavers user-30=david user-31=chrisdal user-32=mcdermos user-33=paulmca1 user-34=howardon user-35=pugwash user-36=cwsocial user-37=cathski user-38=cambria1 user-39=ninejimm user-40=reliable user-41=eugincou user-42=courseme user-43=hirefootballgame user-44=lkpier user-45=ctedorgu user-46=philmcph user-47=donnychicago user-48=firstre5
Sep 30 05:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=steakbridieme user-50=nscdp user-51=health2045 user-52=fortunaz user-53=foods user-54=leftie user-55=hidden user-56=nomistakes user-57=barbersh user-58=tigerlet user-59=smrszyqg user-60=isleofwi user-61=nsceres user-62=burydropin user-63=fawcettd user-64=dhyana user-65=beauty user-66=eatspam user-67=darkstar user-68=asandcoc user-69=sibtoncc user-70=steve user-71=bwppodcast user-72=zebrapho user-73=alexadmin user-74=skyfirec user-75=nativene user-76=innovat1 user-77=askhform user-78=stuartge user-79=firstre2 user-80=vivienn1 user-81=battlere user-82=oneoarco user-83=brighto1 user-84=nstriton user-85=belle user-86=ggaaorgu user-87=newstoda user-88=bemadonn user-89=bedfords user-90=hubmaster user-91=carsinyo user-92=fetch user-93=gilpin user-94=milloyco user-95=elecleis user-96=connectedshoppin user-97=thqkgnbz user-98=accooper user-99=ianrayne user-100=coursemc user-101=opaiscyx user-102=jonhartl
Sep 30 05:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=seftvta user-104=ultbcrra user-105=firstres user-106=firstred user-107=southlon user-108=highlegh user-109=clarkass user-110=firstrel user-111=costestimatorco user-112=dickemery123 user-113=ptkxhsbt user-114=martsblo user-115=magichat user-116=lbhyisi user-117=hhdugcor user-118=strathar user-119=sarafoundation user-120=atestord user-121=brmrjxl user-122=lakesan1 user-123=musorguk user-124=megacards user-125=wilsonsw user-126=spectrum user-127=hodgesonweb user-128=theblack user-129=jarvisin user-130=stephani user-131=leereyn1 user-132=still user-133=agproduc user-134=athenare user-135=connect9 user-136=vantagep user-137=maflemin user-138=lbscrmod user-139=foundation user-140=booff user-141=markward user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 30 05:09:44 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 05:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:45 nativespace-cdp sudo[23562]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 05:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:45 nativespace-cdp sudo[23592]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Lq1UXi5N1s7xULj6.~
Sep 30 05:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:45 nativespace-cdp sudo[23596]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Lq1UXi5N1s7xULj6.~'
Sep 30 05:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:45 nativespace-cdp sudo[23602]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Lq1UXi5N1s7xULj6.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 05:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:45 nativespace-cdp sudo[23606]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 05:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:45 nativespace-cdp sudo[23609]: pam_unix(sudo:session): session closed for user root
Sep 30 05:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 05:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 05:09:47 nativespace-cdp sudo[23680]: pam_unix(sudo:session): session closed for user root
Sep 30 05:11:33 nativespace-cdp sshd[24097]: Connection closed by 159.100.136.21 port 42668 [preauth]
Sep 30 05:16:33 nativespace-cdp sshd[25136]: Connection closed by 159.100.136.21 port 52446 [preauth]
Sep 30 05:17:26 nativespace-cdp sshd[25232]: Invalid user sopuser from 23.30.71.49 port 35738
Sep 30 05:17:26 nativespace-cdp sshd[25232]: input_userauth_request: invalid user sopuser [preauth]
Sep 30 05:17:27 nativespace-cdp sshd[25232]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 05:17:27 nativespace-cdp sshd[25232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.30.71.49
Sep 30 05:17:29 nativespace-cdp sshd[25232]: Failed password for invalid user sopuser from 23.30.71.49 port 35738 ssh2
Sep 30 05:17:29 nativespace-cdp sshd[25232]: Received disconnect from 23.30.71.49 port 35738:11: Bye Bye [preauth]
Sep 30 05:17:29 nativespace-cdp sshd[25232]: Disconnected from 23.30.71.49 port 35738 [preauth]
Sep 30 05:18:30 nativespace-cdp sshd[25372]: Invalid user tg from 23.30.71.49 port 50526
Sep 30 05:18:30 nativespace-cdp sshd[25372]: input_userauth_request: invalid user tg [preauth]
Sep 30 05:18:30 nativespace-cdp sshd[25372]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 05:18:30 nativespace-cdp sshd[25372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.30.71.49
Sep 30 05:18:32 nativespace-cdp sshd[25372]: Failed password for invalid user tg from 23.30.71.49 port 50526 ssh2
Sep 30 05:18:35 nativespace-cdp sshd[25372]: Received disconnect from 23.30.71.49 port 50526:11: Bye Bye [preauth]
Sep 30 05:18:35 nativespace-cdp sshd[25372]: Disconnected from 23.30.71.49 port 50526 [preauth]
Sep 30 05:19:13 nativespace-cdp sshd[25480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.30.71.49  user=root
Sep 30 05:19:13 nativespace-cdp sshd[25480]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 05:19:16 nativespace-cdp sshd[25480]: Failed password for root from 23.30.71.49 port 40890 ssh2
Sep 30 05:19:16 nativespace-cdp sshd[25480]: Received disconnect from 23.30.71.49 port 40890:11: Bye Bye [preauth]
Sep 30 05:19:16 nativespace-cdp sshd[25480]: Disconnected from 23.30.71.49 port 40890 [preauth]
Sep 30 05:21:34 nativespace-cdp sshd[26216]: Connection closed by 159.100.136.21 port 33144 [preauth]
Sep 30 05:26:35 nativespace-cdp sshd[27151]: Connection closed by 159.100.136.21 port 41610 [preauth]
Sep 30 05:27:00 nativespace-cdp sshd[27196]: Invalid user jenkins from 103.96.148.81 port 45410
Sep 30 05:27:00 nativespace-cdp sshd[27196]: input_userauth_request: invalid user jenkins [preauth]
Sep 30 05:27:00 nativespace-cdp sshd[27196]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 05:27:00 nativespace-cdp sshd[27196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.96.148.81
Sep 30 05:27:01 nativespace-cdp sshd[27196]: Failed password for invalid user jenkins from 103.96.148.81 port 45410 ssh2
Sep 30 05:27:01 nativespace-cdp sshd[27196]: Received disconnect from 103.96.148.81 port 45410:11: Bye Bye [preauth]
Sep 30 05:27:01 nativespace-cdp sshd[27196]: Disconnected from 103.96.148.81 port 45410 [preauth]
Sep 30 05:31:26 nativespace-cdp sshd[28177]: Invalid user portal from 69.49.245.160 port 44492
Sep 30 05:31:26 nativespace-cdp sshd[28177]: input_userauth_request: invalid user portal [preauth]
Sep 30 05:31:26 nativespace-cdp sshd[28177]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 05:31:26 nativespace-cdp sshd[28177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.49.245.160
Sep 30 05:31:28 nativespace-cdp sshd[28177]: Failed password for invalid user portal from 69.49.245.160 port 44492 ssh2
Sep 30 05:31:29 nativespace-cdp sshd[28177]: Received disconnect from 69.49.245.160 port 44492:11: Bye Bye [preauth]
Sep 30 05:31:29 nativespace-cdp sshd[28177]: Disconnected from 69.49.245.160 port 44492 [preauth]
Sep 30 05:31:36 nativespace-cdp sshd[28203]: Connection closed by 159.100.136.21 port 51008 [preauth]
Sep 30 05:32:17 nativespace-cdp sshd[28292]: Invalid user oracle from 69.49.245.160 port 45898
Sep 30 05:32:17 nativespace-cdp sshd[28292]: input_userauth_request: invalid user oracle [preauth]
Sep 30 05:32:17 nativespace-cdp sshd[28292]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 05:32:17 nativespace-cdp sshd[28292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.49.245.160
Sep 30 05:32:17 nativespace-cdp sshd[28288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.96.148.81  user=root
Sep 30 05:32:17 nativespace-cdp sshd[28288]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 05:32:19 nativespace-cdp sshd[28292]: Failed password for invalid user oracle from 69.49.245.160 port 45898 ssh2
Sep 30 05:32:19 nativespace-cdp sshd[28288]: Failed password for root from 103.96.148.81 port 60884 ssh2
Sep 30 05:32:23 nativespace-cdp sshd[28288]: Received disconnect from 103.96.148.81 port 60884:11: Bye Bye [preauth]
Sep 30 05:32:23 nativespace-cdp sshd[28288]: Disconnected from 103.96.148.81 port 60884 [preauth]
Sep 30 05:32:30 nativespace-cdp sshd[28292]: Received disconnect from 69.49.245.160 port 45898:11: Bye Bye [preauth]
Sep 30 05:32:30 nativespace-cdp sshd[28292]: Disconnected from 69.49.245.160 port 45898 [preauth]
Sep 30 05:32:56 nativespace-cdp sshd[28382]: Invalid user server from 69.49.245.160 port 48254
Sep 30 05:32:56 nativespace-cdp sshd[28382]: input_userauth_request: invalid user server [preauth]
Sep 30 05:32:56 nativespace-cdp sshd[28382]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 05:32:56 nativespace-cdp sshd[28382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.49.245.160
Sep 30 05:32:58 nativespace-cdp sshd[28382]: Failed password for invalid user server from 69.49.245.160 port 48254 ssh2
Sep 30 05:32:58 nativespace-cdp sshd[28382]: Received disconnect from 69.49.245.160 port 48254:11: Bye Bye [preauth]
Sep 30 05:32:58 nativespace-cdp sshd[28382]: Disconnected from 69.49.245.160 port 48254 [preauth]
Sep 30 05:33:05 nativespace-cdp sshd[28438]: Invalid user sysadmin from 103.96.148.81 port 60866
Sep 30 05:33:05 nativespace-cdp sshd[28438]: input_userauth_request: invalid user sysadmin [preauth]
Sep 30 05:33:05 nativespace-cdp sshd[28438]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 05:33:05 nativespace-cdp sshd[28438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.96.148.81
Sep 30 05:33:07 nativespace-cdp sshd[28438]: Failed password for invalid user sysadmin from 103.96.148.81 port 60866 ssh2
Sep 30 05:33:07 nativespace-cdp sshd[28438]: Received disconnect from 103.96.148.81 port 60866:11: Bye Bye [preauth]
Sep 30 05:33:07 nativespace-cdp sshd[28438]: Disconnected from 103.96.148.81 port 60866 [preauth]
Sep 30 05:35:09 nativespace-cdp su: pam_unix(su:session): session opened for user firstred by (uid=0)
Sep 30 05:35:10 nativespace-cdp su[29184]: pam_unix(su:session): session closed for user firstred
Sep 30 05:36:36 nativespace-cdp sshd[29463]: Connection closed by 159.100.136.21 port 60844 [preauth]
Sep 30 05:41:33 nativespace-cdp sshd[30404]: Connection closed by 159.100.136.21 port 41518 [preauth]
Sep 30 05:46:33 nativespace-cdp sshd[31416]: Connection closed by 159.100.136.21 port 51338 [preauth]
Sep 30 05:51:35 nativespace-cdp sshd[32698]: Connection closed by 159.100.136.21 port 60960 [preauth]
Sep 30 05:56:34 nativespace-cdp sshd[1295]: Connection closed by 159.100.136.21 port 42060 [preauth]
Sep 30 06:01:33 nativespace-cdp sshd[2404]: Connection closed by 159.100.136.21 port 50670 [preauth]
Sep 30 06:06:33 nativespace-cdp sshd[3561]: Connection closed by 159.100.136.21 port 60028 [preauth]
Sep 30 06:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 06:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:33 nativespace-cdp sudo[4064]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 06:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:33 nativespace-cdp sudo[4067]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 06:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:34 nativespace-cdp sudo[4071]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 06:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:34 nativespace-cdp sudo[4077]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 06:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:36 nativespace-cdp sudo[4081]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:37 nativespace-cdp sudo[4097]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:37 nativespace-cdp sudo[4100]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:37 nativespace-cdp sudo[4103]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:37 nativespace-cdp sudo[4106]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:37 nativespace-cdp sudo[4109]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 06:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:37 nativespace-cdp sudo[4112]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 06:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:42 nativespace-cdp sudo[4127]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 06:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:42 nativespace-cdp sudo[4131]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=theblack user-3=hodgesonweb user-4=spectrum user-5=agproduc user-6=still user-7=leereyn1 user-8=stephani user-9=booff user-10=foundation user-11=markward user-12=lbscrmod user-13=maflemin user-14=vantagep user-15=connect9 user-16=athenare user-17=ulsukarm user-18=martsblo user-19=ptkxhsbt user-20=dickemery123 user-21=hhdugcor user-22=lbhyisi user-23=magichat user-24=brmrjxl user-25=lakesan1 user-26=atestord user-27=sarafoundation user-28=strathar user-29=wilsonsw user-30=megacards user-31=musorguk user-32=elecleis user-33=milloyco user-34=gilpin user-35=fetch user-36=carsinyo user-37=hubmaster user-38=ianrayne user-39=accooper user-40=thqkgnbz user-41=connectedshoppin user-42=firstres user-43=ultbcrra user-44=seftvta user-45=jonhartl user-46=coursemc user-47=opaiscyx
Sep 30 06:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=costestimatorco user-49=firstrel user-50=clarkass user-51=highlegh user-52=southlon user-53=firstred user-54=skyfirec user-55=alexadmin user-56=askhform user-57=stuartge user-58=innovat1 user-59=nativene user-60=nstriton user-61=brighto1 user-62=oneoarco user-63=battlere user-64=vivienn1 user-65=firstre2 user-66=bedfords user-67=bemadonn user-68=newstoda user-69=ggaaorgu user-70=belle user-71=fawcettd user-72=burydropin user-73=nsceres user-74=darkstar user-75=eatspam user-76=beauty user-77=dhyana user-78=sibtoncc user-79=asandcoc user-80=zebrapho user-81=bwppodcast user-82=steve user-83=reliable user-84=ninejimm user-85=cathski user-86=cambria1 user-87=cwsocial user-88=paulmca1 user-89=pugwash user-90=howardon user-91=hirefootballgame user-92=courseme user-93=eugincou user-94=leftie user-95=foods user-96=health2045 user-97=fortunaz user-98=nscdp user-99=firstre5 user-100=donnychicago
Sep 30 06:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-101=steakbridieme user-102=philmcph user-103=ctedorgu user-104=lkpier user-105=isleofwi user-106=smrszyqg user-107=barbersh user-108=tigerlet user-109=nomistakes user-110=hidden user-111=lucy user-112=attlebor user-113=onlycont user-114=branko user-115=ranxterc user-116=outdoorc user-117=hodgsonmail user-118=romaldki user-119=tomandle user-120=jennimil user-121=mcdermos user-122=chrisdal user-123=david user-124=nbhavers user-125=careers user-126=what user-127=oubpgvbx user-128=tstardom user-129=nvihkvu user-130=havantho user-131=sketchy user-132=cath user-133=kategilpin user-134=dancinggardener user-135=stagingerris user-136=ladburyp user-137=design user-138=nove user-139=boldover user-140=crrtipdl user-141=sosevalu user-142=bakery feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 30 06:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 06:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:43 nativespace-cdp sudo[4137]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 06:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:43 nativespace-cdp sudo[4147]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZD7Zyw8s6iU8Ap3n.~
Sep 30 06:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:43 nativespace-cdp sudo[4151]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZD7Zyw8s6iU8Ap3n.~'
Sep 30 06:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:43 nativespace-cdp sudo[4154]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ZD7Zyw8s6iU8Ap3n.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 06:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:43 nativespace-cdp sudo[4158]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 06:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:43 nativespace-cdp sudo[4161]: pam_unix(sudo:session): session closed for user root
Sep 30 06:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 06:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 06:09:45 nativespace-cdp sudo[4183]: pam_unix(sudo:session): session closed for user root
Sep 30 06:11:33 nativespace-cdp sshd[4711]: Connection closed by 159.100.136.21 port 40886 [preauth]
Sep 30 06:16:35 nativespace-cdp sshd[5707]: Connection closed by 159.100.136.21 port 49944 [preauth]
Sep 30 06:21:33 nativespace-cdp sshd[6866]: Connection closed by 159.100.136.21 port 59286 [preauth]
Sep 30 06:26:35 nativespace-cdp sshd[7784]: Connection closed by 159.100.136.21 port 40794 [preauth]
Sep 30 06:31:33 nativespace-cdp sshd[8802]: Connection closed by 159.100.136.21 port 50274 [preauth]
Sep 30 06:36:37 nativespace-cdp sshd[9725]: Connection closed by 159.100.136.21 port 60066 [preauth]
Sep 30 06:41:33 nativespace-cdp sshd[10880]: Connection closed by 159.100.136.21 port 40902 [preauth]
Sep 30 06:46:33 nativespace-cdp sshd[11902]: Connection closed by 159.100.136.21 port 50590 [preauth]
Sep 30 06:51:34 nativespace-cdp sshd[13161]: Connection closed by 159.100.136.21 port 60168 [preauth]
Sep 30 06:56:36 nativespace-cdp sshd[14186]: Connection closed by 159.100.136.21 port 41576 [preauth]
Sep 30 07:01:35 nativespace-cdp sshd[15189]: Connection closed by 159.100.136.21 port 50000 [preauth]
Sep 30 07:06:36 nativespace-cdp sshd[16328]: Connection closed by 159.100.136.21 port 58464 [preauth]
Sep 30 07:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 07:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:39 nativespace-cdp sudo[16760]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 07:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:39 nativespace-cdp sudo[16764]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 07:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:41 nativespace-cdp sudo[16767]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 07:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:41 nativespace-cdp sudo[16773]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 07:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:44 nativespace-cdp sudo[16776]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 07:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:44 nativespace-cdp sudo[16791]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 07:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:44 nativespace-cdp sudo[16794]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 07:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:44 nativespace-cdp sudo[16797]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 07:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:44 nativespace-cdp sudo[16800]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 07:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:44 nativespace-cdp sudo[16803]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 07:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:44 nativespace-cdp sudo[16807]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 07:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:46 nativespace-cdp sudo[16814]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 07:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:47 nativespace-cdp sudo[16820]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=musorguk user-2=megacards user-3=wilsonsw user-4=sarafoundation user-5=atestord user-6=strathar user-7=lakesan1 user-8=brmrjxl user-9=magichat user-10=lbhyisi user-11=hhdugcor user-12=ptkxhsbt user-13=dickemery123 user-14=martsblo user-15=ulsukarm user-16=maflemin user-17=lbscrmod user-18=athenare user-19=connect9 user-20=vantagep user-21=markward user-22=booff user-23=foundation user-24=leereyn1 user-25=stephani user-26=still user-27=agproduc user-28=theblack user-29=hodgesonweb user-30=spectrum user-31=jarvisin user-32=bemadonn user-33=ggaaorgu user-34=belle user-35=newstoda user-36=bedfords user-37=battlere user-38=oneoarco user-39=firstre2 user-40=vivienn1 user-41=brighto1 user-42=nstriton user-43=nativene user-44=askhform user-45=stuartge user-46=innovat1 user-47=skyfirec user-48=alexadmin
Sep 30 07:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=southlon user-50=highlegh user-51=firstred user-52=costestimatorco user-53=firstrel user-54=clarkass user-55=opaiscyx user-56=coursemc user-57=firstres user-58=seftvta user-59=jonhartl user-60=ultbcrra user-61=thqkgnbz user-62=connectedshoppin user-63=ianrayne user-64=accooper user-65=carsinyo user-66=fetch user-67=hubmaster user-68=elecleis user-69=gilpin user-70=milloyco user-71=barbersh user-72=tigerlet user-73=hidden user-74=nomistakes user-75=smrszyqg user-76=isleofwi user-77=philmcph user-78=ctedorgu user-79=steakbridieme user-80=firstre5 user-81=donnychicago user-82=lkpier user-83=health2045 user-84=fortunaz user-85=leftie user-86=foods user-87=nscdp user-88=courseme user-89=eugincou user-90=hirefootballgame user-91=paulmca1 user-92=howardon user-93=pugwash user-94=cwsocial user-95=ninejimm user-96=reliable user-97=cambria1 user-98=cathski user-99=steve user-100=zebrapho user-101=bwppodcast
Sep 30 07:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=asandcoc user-103=sibtoncc user-104=dhyana user-105=eatspam user-106=darkstar user-107=beauty user-108=nsceres user-109=burydropin user-110=fawcettd user-111=sosevalu user-112=crrtipdl user-113=bakery user-114=boldover user-115=nove user-116=design user-117=kategilpin user-118=ladburyp user-119=stagingerris user-120=dancinggardener user-121=nvihkvu user-122=cath user-123=sketchy user-124=havantho user-125=what user-126=tstardom user-127=oubpgvbx user-128=careers user-129=nbhavers user-130=david user-131=mcdermos user-132=chrisdal user-133=jennimil user-134=tomandle user-135=romaldki user-136=branko user-137=outdoorc user-138=hodgsonmail user-139=ranxterc user-140=onlycont user-141=attlebor user-142=lucy feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 07:09:47 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 07:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:48 nativespace-cdp sudo[16825]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 07:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:48 nativespace-cdp sudo[16830]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7sZpwyF0iyKqBADz.~
Sep 30 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:49 nativespace-cdp sudo[16834]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7sZpwyF0iyKqBADz.~'
Sep 30 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:49 nativespace-cdp sudo[16837]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-7sZpwyF0iyKqBADz.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:49 nativespace-cdp sudo[16841]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 07:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:49 nativespace-cdp sudo[16844]: pam_unix(sudo:session): session closed for user root
Sep 30 07:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 07:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 07:09:50 nativespace-cdp sudo[16865]: pam_unix(sudo:session): session closed for user root
Sep 30 07:11:33 nativespace-cdp sshd[17379]: Connection closed by 159.100.136.21 port 39130 [preauth]
Sep 30 07:16:33 nativespace-cdp sshd[18534]: Connection closed by 159.100.136.21 port 48318 [preauth]
Sep 30 07:21:33 nativespace-cdp sshd[19510]: Connection closed by 159.100.136.21 port 57834 [preauth]
Sep 30 07:26:33 nativespace-cdp sshd[20618]: Connection closed by 159.100.136.21 port 38784 [preauth]
Sep 30 07:31:34 nativespace-cdp sshd[21664]: Connection closed by 159.100.136.21 port 48268 [preauth]
Sep 30 07:36:33 nativespace-cdp sshd[22932]: Connection closed by 159.100.136.21 port 57994 [preauth]
Sep 30 07:41:33 nativespace-cdp sshd[23902]: Connection closed by 159.100.136.21 port 38870 [preauth]
Sep 30 07:46:33 nativespace-cdp sshd[25042]: Connection closed by 159.100.136.21 port 48682 [preauth]
Sep 30 07:51:33 nativespace-cdp sshd[26231]: Connection closed by 159.100.136.21 port 57882 [preauth]
Sep 30 07:56:33 nativespace-cdp sshd[27374]: Connection closed by 159.100.136.21 port 39440 [preauth]
Sep 30 08:01:33 nativespace-cdp sshd[28493]: Connection closed by 159.100.136.21 port 48676 [preauth]
Sep 30 08:06:35 nativespace-cdp sshd[30024]: Connection closed by 159.100.136.21 port 58198 [preauth]
Sep 30 08:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 08:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:33 nativespace-cdp sudo[30712]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 08:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:33 nativespace-cdp sudo[30715]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 08:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:34 nativespace-cdp sudo[30718]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 08:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:34 nativespace-cdp sudo[30725]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 08:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:37 nativespace-cdp sudo[30728]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:37 nativespace-cdp sudo[30741]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:37 nativespace-cdp sudo[30745]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:37 nativespace-cdp sudo[30748]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:37 nativespace-cdp sudo[30751]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:37 nativespace-cdp sudo[30754]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 08:09:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:37 nativespace-cdp sudo[30758]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:39 nativespace-cdp sudo[30768]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:39 nativespace-cdp sudo[30773]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=barbersh user-2=tigerlet user-3=nomistakes user-4=hidden user-5=smrszyqg user-6=isleofwi user-7=steakbridieme user-8=firstre5 user-9=donnychicago user-10=ctedorgu user-11=philmcph user-12=lkpier user-13=foods user-14=leftie user-15=fortunaz user-16=health2045 user-17=nscdp user-18=courseme user-19=eugincou user-20=hirefootballgame user-21=cwsocial user-22=howardon user-23=pugwash user-24=paulmca1 user-25=reliable user-26=ninejimm user-27=cambria1 user-28=cathski user-29=steve user-30=zebrapho user-31=bwppodcast user-32=asandcoc user-33=sibtoncc user-34=dhyana user-35=darkstar user-36=eatspam user-37=beauty user-38=nsceres user-39=fawcettd user-40=burydropin user-41=crrtipdl user-42=sosevalu user-43=bakery user-44=boldover user-45=nove user-46=design user-47=kategilpin user-48=stagingerris
Sep 30 08:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=dancinggardener user-50=ladburyp user-51=nvihkvu user-52=havantho user-53=sketchy user-54=cath user-55=what user-56=tstardom user-57=oubpgvbx user-58=david user-59=careers user-60=nbhavers user-61=mcdermos user-62=chrisdal user-63=jennimil user-64=tomandle user-65=romaldki user-66=branko user-67=outdoorc user-68=hodgsonmail user-69=ranxterc user-70=onlycont user-71=lucy user-72=attlebor user-73=megacards user-74=musorguk user-75=wilsonsw user-76=atestord user-77=sarafoundation user-78=strathar user-79=brmrjxl user-80=lakesan1 user-81=magichat user-82=hhdugcor user-83=lbhyisi user-84=ptkxhsbt user-85=dickemery123 user-86=martsblo user-87=ulsukarm user-88=lbscrmod user-89=maflemin user-90=vantagep user-91=athenare user-92=connect9 user-93=booff user-94=markward user-95=foundation user-96=leereyn1 user-97=stephani user-98=agproduc user-99=still user-100=hodgesonweb user-101=theblack user-102=spectrum
Sep 30 08:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=jarvisin user-104=bemadonn user-105=newstoda user-106=ggaaorgu user-107=belle user-108=bedfords user-109=oneoarco user-110=battlere user-111=vivienn1 user-112=firstre2 user-113=nstriton user-114=brighto1 user-115=nativene user-116=askhform user-117=stuartge user-118=innovat1 user-119=skyfirec user-120=alexadmin user-121=highlegh user-122=southlon user-123=firstred user-124=costestimatorco user-125=firstrel user-126=clarkass user-127=opaiscyx user-128=coursemc user-129=firstres user-130=ultbcrra user-131=jonhartl user-132=seftvta user-133=thqkgnbz user-134=connectedshoppin user-135=ianrayne user-136=accooper user-137=fetch user-138=carsinyo user-139=hubmaster user-140=elecleis user-141=milloyco user-142=gilpin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 08:09:39 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 08:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:40 nativespace-cdp sudo[30779]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 08:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:41 nativespace-cdp sudo[30787]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LEl3BBod9a1ZsJPI.~
Sep 30 08:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:41 nativespace-cdp sudo[30791]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LEl3BBod9a1ZsJPI.~'
Sep 30 08:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:41 nativespace-cdp sudo[30794]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LEl3BBod9a1ZsJPI.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 08:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:41 nativespace-cdp sudo[30798]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 08:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:41 nativespace-cdp sudo[30801]: pam_unix(sudo:session): session closed for user root
Sep 30 08:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 08:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 08:09:42 nativespace-cdp sudo[30821]: pam_unix(sudo:session): session closed for user root
Sep 30 08:11:35 nativespace-cdp sshd[31445]: Connection closed by 159.100.136.21 port 39474 [preauth]
Sep 30 08:16:33 nativespace-cdp sshd[32560]: Connection closed by 159.100.136.21 port 48530 [preauth]
Sep 30 08:21:36 nativespace-cdp sshd[1432]: Connection closed by 159.100.136.21 port 58072 [preauth]
Sep 30 08:26:33 nativespace-cdp sshd[2495]: Connection closed by 159.100.136.21 port 39786 [preauth]
Sep 30 08:31:35 nativespace-cdp sshd[3664]: Connection closed by 159.100.136.21 port 49692 [preauth]
Sep 30 08:36:33 nativespace-cdp sshd[5004]: Connection closed by 159.100.136.21 port 59782 [preauth]
Sep 30 08:41:34 nativespace-cdp sshd[6023]: Connection closed by 159.100.136.21 port 41274 [preauth]
Sep 30 08:46:33 nativespace-cdp sshd[7092]: Connection closed by 159.100.136.21 port 50690 [preauth]
Sep 30 08:51:34 nativespace-cdp sshd[8584]: Connection closed by 159.100.136.21 port 60288 [preauth]
Sep 30 08:56:34 nativespace-cdp sshd[9647]: Connection closed by 159.100.136.21 port 41962 [preauth]
Sep 30 09:01:33 nativespace-cdp sshd[10973]: Connection closed by 159.100.136.21 port 51470 [preauth]
Sep 30 09:06:37 nativespace-cdp sshd[12615]: Connection closed by 159.100.136.21 port 33264 [preauth]
Sep 30 09:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 09:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:39 nativespace-cdp sudo[13155]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 09:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:39 nativespace-cdp sudo[13159]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 09:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:41 nativespace-cdp sudo[13162]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 09:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:41 nativespace-cdp sudo[13173]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 09:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:44 nativespace-cdp sudo[13176]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:44 nativespace-cdp sudo[13191]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:44 nativespace-cdp sudo[13194]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:44 nativespace-cdp sudo[13197]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:44 nativespace-cdp sudo[13200]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:44 nativespace-cdp sudo[13203]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 09:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:45 nativespace-cdp sudo[13206]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 09:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:49 nativespace-cdp sudo[13225]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 09:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:50 nativespace-cdp sudo[13229]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=branko user-2=ranxterc user-3=outdoorc user-4=hodgsonmail user-5=romaldki user-6=lucy user-7=attlebor user-8=onlycont user-9=mcdermos user-10=chrisdal user-11=david user-12=nbhavers user-13=careers user-14=tomandle user-15=jennimil user-16=kategilpin user-17=stagingerris user-18=dancinggardener user-19=ladburyp user-20=design user-21=what user-22=tstardom user-23=oubpgvbx user-24=nvihkvu user-25=havantho user-26=sketchy user-27=cath user-28=crrtipdl user-29=sosevalu user-30=bakery user-31=nove user-32=boldover user-33=darkstar user-34=eatspam user-35=beauty user-36=dhyana user-37=fawcettd user-38=burydropin user-39=nsceres user-40=zebrapho user-41=bwppodcast user-42=steve user-43=sibtoncc user-44=asandcoc user-45=hirefootballgame user-46=courseme user-47=eugincou user-48=reliable
Sep 30 09:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ninejimm user-50=cathski user-51=cambria1 user-52=cwsocial user-53=pugwash user-54=howardon user-55=paulmca1 user-56=smrszyqg user-57=isleofwi user-58=barbersh user-59=tigerlet user-60=nomistakes user-61=hidden user-62=foods user-63=leftie user-64=health2045 user-65=fortunaz user-66=nscdp user-67=firstre5 user-68=donnychicago user-69=steakbridieme user-70=philmcph user-71=ctedorgu user-72=lkpier user-73=ianrayne user-74=accooper user-75=thqkgnbz user-76=connectedshoppin user-77=elecleis user-78=milloyco user-79=gilpin user-80=fetch user-81=carsinyo user-82=hubmaster user-83=costestimatorco user-84=firstrel user-85=clarkass user-86=highlegh user-87=southlon user-88=firstred user-89=firstres user-90=ultbcrra user-91=jonhartl user-92=seftvta user-93=coursemc user-94=opaiscyx user-95=stuartge user-96=askhform user-97=innovat1 user-98=nativene user-99=alexadmin user-100=skyfirec user-101=bedfords
Sep 30 09:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bemadonn user-103=newstoda user-104=belle user-105=ggaaorgu user-106=nstriton user-107=brighto1 user-108=oneoarco user-109=battlere user-110=vivienn1 user-111=firstre2 user-112=agproduc user-113=still user-114=leereyn1 user-115=stephani user-116=jarvisin user-117=hodgesonweb user-118=theblack user-119=spectrum user-120=ulsukarm user-121=booff user-122=markward user-123=foundation user-124=lbscrmod user-125=maflemin user-126=vantagep user-127=connect9 user-128=athenare user-129=hhdugcor user-130=lbhyisi user-131=magichat user-132=martsblo user-133=ptkxhsbt user-134=dickemery123 user-135=wilsonsw user-136=megacards user-137=musorguk user-138=brmrjxl user-139=lakesan1 user-140=atestord user-141=sarafoundation user-142=strathar feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 30 09:09:50 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 09:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:51 nativespace-cdp sudo[13235]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 09:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:52 nativespace-cdp sudo[13241]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DYVSEBSN30zh743v.~
Sep 30 09:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:52 nativespace-cdp sudo[13244]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DYVSEBSN30zh743v.~'
Sep 30 09:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:52 nativespace-cdp sudo[13247]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DYVSEBSN30zh743v.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 09:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:52 nativespace-cdp sudo[13251]: pam_unix(sudo:session): session closed for user root
Sep 30 09:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 09:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:09:52 nativespace-cdp sudo[13254]: pam_unix(sudo:session): session closed for user root
Sep 30 09:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 09:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 09:10:18 nativespace-cdp sudo[13458]: pam_unix(sudo:session): session closed for user root
Sep 30 09:11:33 nativespace-cdp sshd[13781]: Connection closed by 159.100.136.21 port 42866 [preauth]
Sep 30 09:11:47 nativespace-cdp sshd[13810]: Invalid user ubuntu from 180.253.160.115 port 20780
Sep 30 09:11:47 nativespace-cdp sshd[13810]: input_userauth_request: invalid user ubuntu [preauth]
Sep 30 09:11:47 nativespace-cdp sshd[13810]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 09:11:47 nativespace-cdp sshd[13810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.253.160.115
Sep 30 09:11:49 nativespace-cdp sshd[13810]: Failed password for invalid user ubuntu from 180.253.160.115 port 20780 ssh2
Sep 30 09:11:49 nativespace-cdp sshd[13810]: Received disconnect from 180.253.160.115 port 20780:11: Bye Bye [preauth]
Sep 30 09:11:49 nativespace-cdp sshd[13810]: Disconnected from 180.253.160.115 port 20780 [preauth]
Sep 30 09:16:33 nativespace-cdp sshd[15019]: Connection closed by 159.100.136.21 port 52124 [preauth]
Sep 30 09:21:36 nativespace-cdp sshd[16201]: Connection closed by 159.100.136.21 port 33388 [preauth]
Sep 30 09:26:24 nativespace-cdp sshd[17246]: Connection closed by 180.253.160.115 port 49953 [preauth]
Sep 30 09:26:33 nativespace-cdp sshd[17284]: Connection closed by 159.100.136.21 port 43038 [preauth]
Sep 30 09:27:50 nativespace-cdp sshd[17474]: Invalid user test from 180.253.160.115 port 64857
Sep 30 09:27:50 nativespace-cdp sshd[17474]: input_userauth_request: invalid user test [preauth]
Sep 30 09:27:51 nativespace-cdp sshd[17474]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 09:27:51 nativespace-cdp sshd[17474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.253.160.115
Sep 30 09:27:52 nativespace-cdp sshd[17474]: Failed password for invalid user test from 180.253.160.115 port 64857 ssh2
Sep 30 09:27:53 nativespace-cdp sshd[17474]: Received disconnect from 180.253.160.115 port 64857:11: Bye Bye [preauth]
Sep 30 09:27:53 nativespace-cdp sshd[17474]: Disconnected from 180.253.160.115 port 64857 [preauth]
Sep 30 09:29:12 nativespace-cdp sshd[17743]: Invalid user testuser from 180.253.160.115 port 50156
Sep 30 09:29:12 nativespace-cdp sshd[17743]: input_userauth_request: invalid user testuser [preauth]
Sep 30 09:29:12 nativespace-cdp sshd[17743]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 09:29:12 nativespace-cdp sshd[17743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.253.160.115
Sep 30 09:29:14 nativespace-cdp sshd[17743]: Failed password for invalid user testuser from 180.253.160.115 port 50156 ssh2
Sep 30 09:29:14 nativespace-cdp sshd[17743]: Received disconnect from 180.253.160.115 port 50156:11: Bye Bye [preauth]
Sep 30 09:29:14 nativespace-cdp sshd[17743]: Disconnected from 180.253.160.115 port 50156 [preauth]
Sep 30 09:31:34 nativespace-cdp sshd[18506]: Connection closed by 159.100.136.21 port 51484 [preauth]
Sep 30 09:36:35 nativespace-cdp sshd[19843]: Connection closed by 159.100.136.21 port 33154 [preauth]
Sep 30 09:41:34 nativespace-cdp sshd[20999]: Connection closed by 159.100.136.21 port 42734 [preauth]
Sep 30 09:46:36 nativespace-cdp sshd[22115]: Connection closed by 159.100.136.21 port 52506 [preauth]
Sep 30 09:51:33 nativespace-cdp sshd[23399]: Connection closed by 159.100.136.21 port 33560 [preauth]
Sep 30 09:56:33 nativespace-cdp sshd[24456]: Connection closed by 159.100.136.21 port 43168 [preauth]
Sep 30 10:01:35 nativespace-cdp sshd[25845]: Connection closed by 159.100.136.21 port 52572 [preauth]
Sep 30 10:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 10:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:09:58 nativespace-cdp sudo[27989]: pam_unix(sudo:session): session closed for user root
Sep 30 10:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 10:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:09:58 nativespace-cdp sudo[27994]: pam_unix(sudo:session): session closed for user root
Sep 30 10:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 10:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:01 nativespace-cdp sudo[27997]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 10:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:01 nativespace-cdp sudo[28010]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 10:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:09 nativespace-cdp sudo[28014]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:09 nativespace-cdp sudo[28165]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:09 nativespace-cdp sudo[28169]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:09 nativespace-cdp sudo[28172]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:09 nativespace-cdp sudo[28176]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:09 nativespace-cdp sudo[28179]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:10 nativespace-cdp sudo[28183]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 10:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:14 nativespace-cdp sudo[28197]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 10:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:16 nativespace-cdp sudo[28249]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=courseme user-2=eugincou user-3=hirefootballgame user-4=paulmca1 user-5=pugwash user-6=howardon user-7=cwsocial user-8=ninejimm user-9=reliable user-10=cambria1 user-11=cathski user-12=barbersh user-13=tigerlet user-14=hidden user-15=nomistakes user-16=smrszyqg user-17=isleofwi user-18=philmcph user-19=ctedorgu user-20=donnychicago user-21=firstre5 user-22=steakbridieme user-23=lkpier user-24=health2045 user-25=fortunaz user-26=leftie user-27=foods user-28=nscdp user-29=dhyana user-30=eatspam user-31=darkstar user-32=beauty user-33=nsceres user-34=burydropin user-35=fawcettd user-36=steve user-37=zebrapho user-38=bwppodcast user-39=sibtoncc user-40=asandcoc user-41=design user-42=kategilpin user-43=ladburyp user-44=stagingerris user-45=dancinggardener user-46=nvihkvu user-47=cath user-48=sketchy
Sep 30 10:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=havantho user-50=what user-51=oubpgvbx user-52=tstardom user-53=sosevalu user-54=crrtipdl user-55=bakery user-56=boldover user-57=nove user-58=romaldki user-59=branko user-60=outdoorc user-61=hodgsonmail user-62=ranxterc user-63=onlycont user-64=attlebor user-65=lucy user-66=nbhavers user-67=careers user-68=david user-69=mcdermos user-70=chrisdal user-71=jennimil user-72=tomandle user-73=magichat user-74=lbhyisi user-75=hhdugcor user-76=ptkxhsbt user-77=dickemery123 user-78=martsblo user-79=musorguk user-80=megacards user-81=wilsonsw user-82=sarafoundation user-83=atestord user-84=strathar user-85=brmrjxl user-86=lakesan1 user-87=leereyn1 user-88=stephani user-89=still user-90=agproduc user-91=hodgesonweb user-92=theblack user-93=spectrum user-94=jarvisin user-95=ulsukarm user-96=maflemin user-97=lbscrmod user-98=athenare user-99=connect9 user-100=vantagep user-101=booff user-102=foundation
Sep 30 10:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=markward user-104=nativene user-105=askhform user-106=stuartge user-107=innovat1 user-108=skyfirec user-109=alexadmin user-110=bemadonn user-111=ggaaorgu user-112=belle user-113=newstoda user-114=bedfords user-115=battlere user-116=oneoarco user-117=firstre2 user-118=vivienn1 user-119=brighto1 user-120=nstriton user-121=thqkgnbz user-122=connectedshoppin user-123=ianrayne user-124=accooper user-125=carsinyo user-126=fetch user-127=hubmaster user-128=elecleis user-129=gilpin user-130=milloyco user-131=southlon user-132=highlegh user-133=firstred user-134=costestimatorco user-135=clarkass user-136=firstrel user-137=coursemc user-138=opaiscyx user-139=firstres user-140=jonhartl user-141=seftvta user-142=ultbcrra feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 10:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 10:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:18 nativespace-cdp sudo[28256]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 10:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:19 nativespace-cdp sudo[28266]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Zv8TInYBDoprZvBe.~
Sep 30 10:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:19 nativespace-cdp sudo[28269]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Zv8TInYBDoprZvBe.~'
Sep 30 10:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:19 nativespace-cdp sudo[28272]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Zv8TInYBDoprZvBe.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 10:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:19 nativespace-cdp sudo[28276]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 10:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:19 nativespace-cdp sudo[28279]: pam_unix(sudo:session): session closed for user root
Sep 30 10:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 10:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 10:10:38 nativespace-cdp sudo[28339]: pam_unix(sudo:session): session closed for user root
Sep 30 10:11:34 nativespace-cdp sshd[28620]: Connection closed by 159.100.136.21 port 42850 [preauth]
Sep 30 10:16:36 nativespace-cdp sshd[29873]: Connection closed by 159.100.136.21 port 52834 [preauth]
Sep 30 10:21:34 nativespace-cdp sshd[31331]: Connection closed by 159.100.136.21 port 34232 [preauth]
Sep 30 10:26:33 nativespace-cdp sshd[32364]: Connection closed by 159.100.136.21 port 44208 [preauth]
Sep 30 10:31:33 nativespace-cdp sshd[1313]: Connection closed by 159.100.136.21 port 53878 [preauth]
Sep 30 10:36:33 nativespace-cdp sshd[2756]: Connection closed by 159.100.136.21 port 35356 [preauth]
Sep 30 10:37:49 nativespace-cdp sshd[3150]: Invalid user ubuntu from 211.21.23.97 port 58732
Sep 30 10:37:49 nativespace-cdp sshd[3150]: input_userauth_request: invalid user ubuntu [preauth]
Sep 30 10:37:49 nativespace-cdp sshd[3150]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 10:37:49 nativespace-cdp sshd[3150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.21.23.97
Sep 30 10:37:52 nativespace-cdp sshd[3150]: Failed password for invalid user ubuntu from 211.21.23.97 port 58732 ssh2
Sep 30 10:37:52 nativespace-cdp sshd[3150]: Received disconnect from 211.21.23.97 port 58732:11: Bye Bye [preauth]
Sep 30 10:37:52 nativespace-cdp sshd[3150]: Disconnected from 211.21.23.97 port 58732 [preauth]
Sep 30 10:41:36 nativespace-cdp sshd[4073]: Connection closed by 159.100.136.21 port 44986 [preauth]
Sep 30 10:42:31 nativespace-cdp sshd[4550]: Invalid user user from 187.45.100.0 port 41976
Sep 30 10:42:31 nativespace-cdp sshd[4550]: input_userauth_request: invalid user user [preauth]
Sep 30 10:42:31 nativespace-cdp sshd[4550]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 10:42:31 nativespace-cdp sshd[4550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.45.100.0
Sep 30 10:42:34 nativespace-cdp sshd[4550]: Failed password for invalid user user from 187.45.100.0 port 41976 ssh2
Sep 30 10:42:34 nativespace-cdp sshd[4550]: Received disconnect from 187.45.100.0 port 41976:11: Bye Bye [preauth]
Sep 30 10:42:34 nativespace-cdp sshd[4550]: Disconnected from 187.45.100.0 port 41976 [preauth]
Sep 30 10:46:20 nativespace-cdp sshd[5830]: Invalid user deploy from 211.21.23.97 port 38978
Sep 30 10:46:20 nativespace-cdp sshd[5830]: input_userauth_request: invalid user deploy [preauth]
Sep 30 10:46:20 nativespace-cdp sshd[5830]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 10:46:20 nativespace-cdp sshd[5830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.21.23.97
Sep 30 10:46:22 nativespace-cdp sshd[5830]: Failed password for invalid user deploy from 211.21.23.97 port 38978 ssh2
Sep 30 10:46:24 nativespace-cdp sshd[5830]: Received disconnect from 211.21.23.97 port 38978:11: Bye Bye [preauth]
Sep 30 10:46:24 nativespace-cdp sshd[5830]: Disconnected from 211.21.23.97 port 38978 [preauth]
Sep 30 10:46:37 nativespace-cdp sshd[5859]: Connection closed by 159.100.136.21 port 54692 [preauth]
Sep 30 10:47:22 nativespace-cdp sshd[6222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.45.100.0  user=root
Sep 30 10:47:22 nativespace-cdp sshd[6222]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 10:47:24 nativespace-cdp sshd[6222]: Failed password for root from 187.45.100.0 port 38785 ssh2
Sep 30 10:47:24 nativespace-cdp sshd[6222]: Received disconnect from 187.45.100.0 port 38785:11: Bye Bye [preauth]
Sep 30 10:47:24 nativespace-cdp sshd[6222]: Disconnected from 187.45.100.0 port 38785 [preauth]
Sep 30 10:47:39 nativespace-cdp sshd[6257]: Invalid user sysadmin from 211.21.23.97 port 48164
Sep 30 10:47:39 nativespace-cdp sshd[6257]: input_userauth_request: invalid user sysadmin [preauth]
Sep 30 10:47:39 nativespace-cdp sshd[6257]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 10:47:39 nativespace-cdp sshd[6257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.21.23.97
Sep 30 10:47:40 nativespace-cdp sshd[6257]: Failed password for invalid user sysadmin from 211.21.23.97 port 48164 ssh2
Sep 30 10:47:41 nativespace-cdp sshd[6257]: Received disconnect from 211.21.23.97 port 48164:11: Bye Bye [preauth]
Sep 30 10:47:41 nativespace-cdp sshd[6257]: Disconnected from 211.21.23.97 port 48164 [preauth]
Sep 30 10:49:13 nativespace-cdp sshd[6510]: Invalid user test_user from 187.45.100.0 port 60118
Sep 30 10:49:13 nativespace-cdp sshd[6510]: input_userauth_request: invalid user test_user [preauth]
Sep 30 10:49:13 nativespace-cdp sshd[6510]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 10:49:13 nativespace-cdp sshd[6510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.45.100.0
Sep 30 10:49:16 nativespace-cdp sshd[6510]: Failed password for invalid user test_user from 187.45.100.0 port 60118 ssh2
Sep 30 10:51:35 nativespace-cdp sshd[7281]: Connection closed by 159.100.136.21 port 35782 [preauth]
Sep 30 10:56:33 nativespace-cdp sshd[8470]: Connection closed by 159.100.136.21 port 45698 [preauth]
Sep 30 11:01:33 nativespace-cdp sshd[9586]: Connection closed by 159.100.136.21 port 55328 [preauth]
Sep 30 11:06:33 nativespace-cdp sshd[11093]: Connection closed by 159.100.136.21 port 37080 [preauth]
Sep 30 11:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 11:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:42 nativespace-cdp sudo[11703]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 11:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:42 nativespace-cdp sudo[11706]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 11:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:44 nativespace-cdp sudo[11709]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:44 nativespace-cdp sudo[11722]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 11:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:48 nativespace-cdp sudo[11725]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 11:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:48 nativespace-cdp sudo[11743]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 11:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:48 nativespace-cdp sudo[11746]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 11:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:48 nativespace-cdp sudo[11749]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 11:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:48 nativespace-cdp sudo[11752]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 11:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:48 nativespace-cdp sudo[11756]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 11:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:48 nativespace-cdp sudo[11760]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 11:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:56 nativespace-cdp sudo[11780]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 11:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:57 nativespace-cdp sudo[11784]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=burydropin user-2=fawcettd user-3=nsceres user-4=eatspam user-5=darkstar user-6=beauty user-7=dhyana user-8=asandcoc user-9=sibtoncc user-10=zebrapho user-11=bwppodcast user-12=steve user-13=ninejimm user-14=reliable user-15=cathski user-16=cambria1 user-17=howardon user-18=pugwash user-19=paulmca1 user-20=cwsocial user-21=hirefootballgame user-22=courseme user-23=eugincou user-24=health2045 user-25=fortunaz user-26=leftie user-27=foods user-28=nscdp user-29=philmcph user-30=ctedorgu user-31=firstre5 user-32=donnychicago user-33=steakbridieme user-34=lkpier user-35=smrszyqg user-36=isleofwi user-37=barbersh user-38=tigerlet user-39=hidden user-40=nomistakes user-41=attlebor user-42=lucy user-43=onlycont user-44=branko user-45=outdoorc user-46=ranxterc user-47=hodgsonmail user-48=romaldki
Sep 30 11:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=tomandle user-50=jennimil user-51=mcdermos user-52=chrisdal user-53=nbhavers user-54=careers user-55=david user-56=what user-57=oubpgvbx user-58=tstardom user-59=nvihkvu user-60=cath user-61=sketchy user-62=havantho user-63=kategilpin user-64=ladburyp user-65=dancinggardener user-66=stagingerris user-67=design user-68=nove user-69=boldover user-70=sosevalu user-71=crrtipdl user-72=bakery user-73=jarvisin user-74=theblack user-75=hodgesonweb user-76=spectrum user-77=still user-78=agproduc user-79=leereyn1 user-80=stephani user-81=foundation user-82=booff user-83=markward user-84=maflemin user-85=lbscrmod user-86=connect9 user-87=athenare user-88=vantagep user-89=ulsukarm user-90=martsblo user-91=ptkxhsbt user-92=dickemery123 user-93=lbhyisi user-94=hhdugcor user-95=magichat user-96=brmrjxl user-97=lakesan1 user-98=sarafoundation user-99=atestord user-100=strathar user-101=wilsonsw user-102=musorguk
Sep 30 11:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=megacards user-104=elecleis user-105=gilpin user-106=milloyco user-107=carsinyo user-108=fetch user-109=hubmaster user-110=ianrayne user-111=accooper user-112=thqkgnbz user-113=connectedshoppin user-114=firstres user-115=seftvta user-116=jonhartl user-117=ultbcrra user-118=opaiscyx user-119=coursemc user-120=costestimatorco user-121=firstrel user-122=clarkass user-123=southlon user-124=highlegh user-125=firstred user-126=skyfirec user-127=alexadmin user-128=askhform user-129=stuartge user-130=innovat1 user-131=nativene user-132=brighto1 user-133=nstriton user-134=battlere user-135=oneoarco user-136=firstre2 user-137=vivienn1 user-138=bedfords user-139=bemadonn user-140=ggaaorgu user-141=belle user-142=newstoda feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 11:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 11:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:09:58 nativespace-cdp sudo[11791]: pam_unix(sudo:session): session closed for user root
Sep 30 11:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Sep 30 11:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:00 nativespace-cdp sudo[11807]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Sep 30 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Sep 30 11:10:00 nativespace-cdp sudo[11813]: pam_unix(sudo:session): session closed for user onlycont
Sep 30 11:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Sep 30 11:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:02 nativespace-cdp sudo[11824]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 30 11:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 11:10:02 nativespace-cdp sudo[11927]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 11:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Sep 30 11:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:07 nativespace-cdp sudo[11983]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Sep 30 11:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Sep 30 11:10:07 nativespace-cdp sudo[11989]: pam_unix(sudo:session): session closed for user lkpier
Sep 30 11:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Sep 30 11:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:08 nativespace-cdp sudo[12001]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Sep 30 11:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Sep 30 11:10:09 nativespace-cdp sudo[12006]: pam_unix(sudo:session): session closed for user bwppodcast
Sep 30 11:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Sep 30 11:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Sep 30 11:10:09 nativespace-cdp sudo[12017]: pam_unix(sudo:session): session closed for user oneoarco
Sep 30 11:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Sep 30 11:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:10 nativespace-cdp sudo[12028]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Sep 30 11:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Sep 30 11:10:10 nativespace-cdp sudo[12033]: pam_unix(sudo:session): session closed for user fortunaz
Sep 30 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Sep 30 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:11 nativespace-cdp sudo[12047]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:11 nativespace-cdp sudo[12051]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Sep 30 11:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:29 nativespace-cdp sudo[12957]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Sep 30 11:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:29 nativespace-cdp sudo[12962]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 11:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:31 nativespace-cdp sudo[12969]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GTDuqEo5dmptoGmY.~
Sep 30 11:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:31 nativespace-cdp sudo[12972]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GTDuqEo5dmptoGmY.~'
Sep 30 11:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:31 nativespace-cdp sudo[12975]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-GTDuqEo5dmptoGmY.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 11:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:31 nativespace-cdp sudo[12980]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 11:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:31 nativespace-cdp sudo[12984]: pam_unix(sudo:session): session closed for user root
Sep 30 11:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 11:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 11:10:45 nativespace-cdp sudo[13071]: pam_unix(sudo:session): session closed for user root
Sep 30 11:11:33 nativespace-cdp sshd[13230]: Connection closed by 159.100.136.21 port 46650 [preauth]
Sep 30 11:16:35 nativespace-cdp sshd[14252]: Connection closed by 159.100.136.21 port 56612 [preauth]
Sep 30 11:21:33 nativespace-cdp sshd[15843]: Connection closed by 159.100.136.21 port 37894 [preauth]
Sep 30 11:26:34 nativespace-cdp sshd[16879]: Connection closed by 159.100.136.21 port 47638 [preauth]
Sep 30 11:31:33 nativespace-cdp sshd[17983]: Connection closed by 159.100.136.21 port 57196 [preauth]
Sep 30 11:36:33 nativespace-cdp sshd[19202]: Connection closed by 159.100.136.21 port 38890 [preauth]
Sep 30 11:41:33 nativespace-cdp sshd[20447]: Connection closed by 159.100.136.21 port 48476 [preauth]
Sep 30 11:46:34 nativespace-cdp sshd[21604]: Connection closed by 159.100.136.21 port 58262 [preauth]
Sep 30 11:51:33 nativespace-cdp sshd[22958]: Connection closed by 159.100.136.21 port 39634 [preauth]
Sep 30 11:56:34 nativespace-cdp sshd[23963]: Connection closed by 159.100.136.21 port 49652 [preauth]
Sep 30 12:01:35 nativespace-cdp sshd[25161]: Connection closed by 159.100.136.21 port 59280 [preauth]
Sep 30 12:06:33 nativespace-cdp sshd[26744]: Connection closed by 159.100.136.21 port 41186 [preauth]
Sep 30 12:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 12:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:40 nativespace-cdp sudo[27450]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 12:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:40 nativespace-cdp sudo[27455]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 12:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:42 nativespace-cdp sudo[27458]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 12:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:42 nativespace-cdp sudo[27464]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 12:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:47 nativespace-cdp sudo[27468]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:47 nativespace-cdp sudo[27489]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:47 nativespace-cdp sudo[27494]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:47 nativespace-cdp sudo[27497]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:47 nativespace-cdp sudo[27500]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:47 nativespace-cdp sudo[27503]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 12:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:47 nativespace-cdp sudo[27506]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 12:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:50 nativespace-cdp sudo[27532]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 12:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:51 nativespace-cdp sudo[27537]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=stephani user-2=leereyn1 user-3=still user-4=agproduc user-5=spectrum user-6=hodgesonweb user-7=theblack user-8=jarvisin user-9=ulsukarm user-10=connect9 user-11=athenare user-12=vantagep user-13=maflemin user-14=lbscrmod user-15=booff user-16=foundation user-17=markward user-18=magichat user-19=lbhyisi user-20=hhdugcor user-21=dickemery123 user-22=ptkxhsbt user-23=martsblo user-24=musorguk user-25=megacards user-26=wilsonsw user-27=strathar user-28=sarafoundation user-29=atestord user-30=brmrjxl user-31=lakesan1 user-32=connectedshoppin user-33=thqkgnbz user-34=accooper user-35=ianrayne user-36=hubmaster user-37=carsinyo user-38=fetch user-39=gilpin user-40=milloyco user-41=elecleis user-42=firstred user-43=southlon user-44=highlegh user-45=clarkass user-46=firstrel user-47=costestimatorco
Sep 30 12:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=opaiscyx user-49=coursemc user-50=jonhartl user-51=seftvta user-52=ultbcrra user-53=firstres user-54=nativene user-55=innovat1 user-56=stuartge user-57=askhform user-58=alexadmin user-59=skyfirec user-60=belle user-61=ggaaorgu user-62=newstoda user-63=bemadonn user-64=bedfords user-65=firstre2 user-66=vivienn1 user-67=battlere user-68=oneoarco user-69=brighto1 user-70=nstriton user-71=dhyana user-72=beauty user-73=eatspam user-74=darkstar user-75=nsceres user-76=burydropin user-77=fawcettd user-78=steve user-79=bwppodcast user-80=zebrapho user-81=sibtoncc user-82=asandcoc user-83=eugincou user-84=courseme user-85=hirefootballgame user-86=howardon user-87=pugwash user-88=paulmca1 user-89=cwsocial user-90=cambria1 user-91=cathski user-92=ninejimm user-93=reliable user-94=hidden user-95=nomistakes user-96=tigerlet user-97=barbersh user-98=isleofwi user-99=smrszyqg user-100=lkpier user-101=ctedorgu
Sep 30 12:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=philmcph user-103=steakbridieme user-104=firstre5 user-105=donnychicago user-106=nscdp user-107=fortunaz user-108=health2045 user-109=leftie user-110=foods user-111=romaldki user-112=hodgsonmail user-113=ranxterc user-114=outdoorc user-115=branko user-116=onlycont user-117=attlebor user-118=lucy user-119=careers user-120=nbhavers user-121=david user-122=chrisdal user-123=mcdermos user-124=jennimil user-125=tomandle user-126=design user-127=ladburyp user-128=dancinggardener user-129=stagingerris user-130=kategilpin user-131=sketchy user-132=cath user-133=havantho user-134=nvihkvu user-135=oubpgvbx user-136=tstardom user-137=what user-138=bakery user-139=sosevalu user-140=crrtipdl user-141=boldover user-142=nove feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 12:09:51 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 12:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:52 nativespace-cdp sudo[27544]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 12:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:53 nativespace-cdp sudo[27555]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DyAbYeR3f1DmRkss.~
Sep 30 12:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:53 nativespace-cdp sudo[27559]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DyAbYeR3f1DmRkss.~'
Sep 30 12:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:53 nativespace-cdp sudo[27562]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DyAbYeR3f1DmRkss.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 12:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:53 nativespace-cdp sudo[27566]: pam_unix(sudo:session): session closed for user root
Sep 30 12:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 12:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:09:53 nativespace-cdp sudo[27569]: pam_unix(sudo:session): session closed for user root
Sep 30 12:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 12:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 12:10:15 nativespace-cdp sudo[27763]: pam_unix(sudo:session): session closed for user root
Sep 30 12:11:33 nativespace-cdp sshd[28030]: Connection closed by 159.100.136.21 port 50726 [preauth]
Sep 30 12:16:35 nativespace-cdp sshd[29239]: Connection closed by 159.100.136.21 port 60684 [preauth]
Sep 30 12:21:33 nativespace-cdp sshd[30505]: Connection closed by 159.100.136.21 port 42052 [preauth]
Sep 30 12:26:34 nativespace-cdp sshd[31620]: Connection closed by 159.100.136.21 port 51904 [preauth]
Sep 30 12:31:34 nativespace-cdp sshd[361]: Connection closed by 159.100.136.21 port 33440 [preauth]
Sep 30 12:36:33 nativespace-cdp sshd[2034]: Connection closed by 159.100.136.21 port 43548 [preauth]
Sep 30 12:37:36 nativespace-cdp sshd[2308]: Invalid user ubuntu from 142.44.162.161 port 59492
Sep 30 12:37:36 nativespace-cdp sshd[2308]: input_userauth_request: invalid user ubuntu [preauth]
Sep 30 12:37:36 nativespace-cdp sshd[2308]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:37:36 nativespace-cdp sshd[2308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.162.161
Sep 30 12:37:39 nativespace-cdp sshd[2308]: Failed password for invalid user ubuntu from 142.44.162.161 port 59492 ssh2
Sep 30 12:37:39 nativespace-cdp sshd[2308]: Received disconnect from 142.44.162.161 port 59492:11: Bye Bye [preauth]
Sep 30 12:37:39 nativespace-cdp sshd[2308]: Disconnected from 142.44.162.161 port 59492 [preauth]
Sep 30 12:39:32 nativespace-cdp sshd[2810]: Invalid user ubuntu from 47.251.110.254 port 40888
Sep 30 12:39:32 nativespace-cdp sshd[2810]: input_userauth_request: invalid user ubuntu [preauth]
Sep 30 12:39:32 nativespace-cdp sshd[2810]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:39:32 nativespace-cdp sshd[2810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.251.110.254
Sep 30 12:39:34 nativespace-cdp sshd[2810]: Failed password for invalid user ubuntu from 47.251.110.254 port 40888 ssh2
Sep 30 12:39:34 nativespace-cdp sshd[2810]: Received disconnect from 47.251.110.254 port 40888:11: Bye Bye [preauth]
Sep 30 12:39:34 nativespace-cdp sshd[2810]: Disconnected from 47.251.110.254 port 40888 [preauth]
Sep 30 12:40:05 nativespace-cdp sshd[3075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.196.8.248  user=root
Sep 30 12:40:05 nativespace-cdp sshd[3075]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 12:40:07 nativespace-cdp sshd[3075]: Failed password for root from 185.196.8.248 port 60020 ssh2
Sep 30 12:40:07 nativespace-cdp sshd[3075]: Received disconnect from 185.196.8.248 port 60020:11: Bye Bye [preauth]
Sep 30 12:40:07 nativespace-cdp sshd[3075]: Disconnected from 185.196.8.248 port 60020 [preauth]
Sep 30 12:40:33 nativespace-cdp sshd[3221]: Invalid user test_user from 156.236.74.13 port 51490
Sep 30 12:40:33 nativespace-cdp sshd[3221]: input_userauth_request: invalid user test_user [preauth]
Sep 30 12:40:33 nativespace-cdp sshd[3221]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:40:33 nativespace-cdp sshd[3221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.236.74.13
Sep 30 12:40:35 nativespace-cdp sshd[3221]: Failed password for invalid user test_user from 156.236.74.13 port 51490 ssh2
Sep 30 12:40:44 nativespace-cdp sshd[3221]: Received disconnect from 156.236.74.13 port 51490:11: Bye Bye [preauth]
Sep 30 12:40:44 nativespace-cdp sshd[3221]: Disconnected from 156.236.74.13 port 51490 [preauth]
Sep 30 12:41:33 nativespace-cdp sshd[3537]: Connection closed by 159.100.136.21 port 53344 [preauth]
Sep 30 12:41:43 nativespace-cdp sshd[3585]: Invalid user sysadmin from 142.44.162.161 port 44938
Sep 30 12:41:43 nativespace-cdp sshd[3585]: input_userauth_request: invalid user sysadmin [preauth]
Sep 30 12:41:44 nativespace-cdp sshd[3585]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:41:44 nativespace-cdp sshd[3585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.162.161
Sep 30 12:41:46 nativespace-cdp sshd[3585]: Failed password for invalid user sysadmin from 142.44.162.161 port 44938 ssh2
Sep 30 12:41:46 nativespace-cdp sshd[3585]: Received disconnect from 142.44.162.161 port 44938:11: Bye Bye [preauth]
Sep 30 12:41:46 nativespace-cdp sshd[3585]: Disconnected from 142.44.162.161 port 44938 [preauth]
Sep 30 12:42:11 nativespace-cdp sshd[3707]: Connection closed by 156.236.74.13 port 51916 [preauth]
Sep 30 12:42:24 nativespace-cdp sshd[3766]: Invalid user user from 142.44.162.161 port 57654
Sep 30 12:42:24 nativespace-cdp sshd[3766]: input_userauth_request: invalid user user [preauth]
Sep 30 12:42:24 nativespace-cdp sshd[3766]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:42:24 nativespace-cdp sshd[3766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.162.161
Sep 30 12:42:25 nativespace-cdp sshd[3766]: Failed password for invalid user user from 142.44.162.161 port 57654 ssh2
Sep 30 12:42:26 nativespace-cdp sshd[3766]: Received disconnect from 142.44.162.161 port 57654:11: Bye Bye [preauth]
Sep 30 12:42:26 nativespace-cdp sshd[3766]: Disconnected from 142.44.162.161 port 57654 [preauth]
Sep 30 12:42:35 nativespace-cdp sshd[3907]: Invalid user user from 185.196.8.248 port 48798
Sep 30 12:42:35 nativespace-cdp sshd[3907]: input_userauth_request: invalid user user [preauth]
Sep 30 12:42:35 nativespace-cdp sshd[3907]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:42:35 nativespace-cdp sshd[3907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.196.8.248
Sep 30 12:42:37 nativespace-cdp sshd[3907]: Failed password for invalid user user from 185.196.8.248 port 48798 ssh2
Sep 30 12:42:38 nativespace-cdp sshd[3907]: Received disconnect from 185.196.8.248 port 48798:11: Bye Bye [preauth]
Sep 30 12:42:38 nativespace-cdp sshd[3907]: Disconnected from 185.196.8.248 port 48798 [preauth]
Sep 30 12:42:52 nativespace-cdp sshd[3962]: Invalid user ubuntu from 156.236.74.13 port 59918
Sep 30 12:42:52 nativespace-cdp sshd[3962]: input_userauth_request: invalid user ubuntu [preauth]
Sep 30 12:42:52 nativespace-cdp sshd[3962]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:42:52 nativespace-cdp sshd[3962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.236.74.13
Sep 30 12:42:54 nativespace-cdp sshd[3962]: Failed password for invalid user ubuntu from 156.236.74.13 port 59918 ssh2
Sep 30 12:42:54 nativespace-cdp sshd[3962]: Received disconnect from 156.236.74.13 port 59918:11: Bye Bye [preauth]
Sep 30 12:42:54 nativespace-cdp sshd[3962]: Disconnected from 156.236.74.13 port 59918 [preauth]
Sep 30 12:43:15 nativespace-cdp sshd[4068]: Invalid user test from 185.196.8.248 port 40348
Sep 30 12:43:15 nativespace-cdp sshd[4068]: input_userauth_request: invalid user test [preauth]
Sep 30 12:43:15 nativespace-cdp sshd[4068]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:43:15 nativespace-cdp sshd[4068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.196.8.248
Sep 30 12:43:17 nativespace-cdp sshd[4068]: Failed password for invalid user test from 185.196.8.248 port 40348 ssh2
Sep 30 12:43:17 nativespace-cdp sshd[4068]: Received disconnect from 185.196.8.248 port 40348:11: Bye Bye [preauth]
Sep 30 12:43:17 nativespace-cdp sshd[4068]: Disconnected from 185.196.8.248 port 40348 [preauth]
Sep 30 12:43:37 nativespace-cdp sshd[4183]: Invalid user deploy from 156.236.74.13 port 47766
Sep 30 12:43:37 nativespace-cdp sshd[4183]: input_userauth_request: invalid user deploy [preauth]
Sep 30 12:43:37 nativespace-cdp sshd[4183]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:43:37 nativespace-cdp sshd[4183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.236.74.13
Sep 30 12:43:39 nativespace-cdp sshd[4183]: Failed password for invalid user deploy from 156.236.74.13 port 47766 ssh2
Sep 30 12:43:40 nativespace-cdp sshd[4183]: Received disconnect from 156.236.74.13 port 47766:11: Bye Bye [preauth]
Sep 30 12:43:40 nativespace-cdp sshd[4183]: Disconnected from 156.236.74.13 port 47766 [preauth]
Sep 30 12:46:01 nativespace-cdp sshd[4889]: Invalid user ubuntu from 47.251.110.254 port 55900
Sep 30 12:46:01 nativespace-cdp sshd[4889]: input_userauth_request: invalid user ubuntu [preauth]
Sep 30 12:46:01 nativespace-cdp sshd[4889]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:46:01 nativespace-cdp sshd[4889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.251.110.254
Sep 30 12:46:03 nativespace-cdp sshd[4889]: Failed password for invalid user ubuntu from 47.251.110.254 port 55900 ssh2
Sep 30 12:46:03 nativespace-cdp sshd[4889]: Received disconnect from 47.251.110.254 port 55900:11: Bye Bye [preauth]
Sep 30 12:46:03 nativespace-cdp sshd[4889]: Disconnected from 47.251.110.254 port 55900 [preauth]
Sep 30 12:46:32 nativespace-cdp sshd[4974]: Invalid user ubuntu from 47.251.110.254 port 53668
Sep 30 12:46:32 nativespace-cdp sshd[4974]: input_userauth_request: invalid user ubuntu [preauth]
Sep 30 12:46:32 nativespace-cdp sshd[4974]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 12:46:32 nativespace-cdp sshd[4974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.251.110.254
Sep 30 12:46:33 nativespace-cdp sshd[5000]: Connection closed by 159.100.136.21 port 35020 [preauth]
Sep 30 12:46:34 nativespace-cdp sshd[4974]: Failed password for invalid user ubuntu from 47.251.110.254 port 53668 ssh2
Sep 30 12:51:36 nativespace-cdp sshd[6491]: Connection closed by 159.100.136.21 port 44818 [preauth]
Sep 30 12:56:33 nativespace-cdp sshd[7701]: Connection closed by 159.100.136.21 port 54644 [preauth]
Sep 30 13:01:36 nativespace-cdp sshd[8934]: Connection closed by 159.100.136.21 port 35874 [preauth]
Sep 30 13:06:33 nativespace-cdp sshd[10308]: Connection closed by 159.100.136.21 port 45872 [preauth]
Sep 30 13:11:36 nativespace-cdp sshd[11285]: Connection closed by 159.100.136.21 port 55062 [preauth]
Sep 30 13:12:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 13:12:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:14 nativespace-cdp sudo[11647]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 13:12:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:15 nativespace-cdp sudo[11651]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 13:12:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:17 nativespace-cdp sudo[11656]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 13:12:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:17 nativespace-cdp sudo[11668]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 13:12:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:37 nativespace-cdp sudo[11671]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 13:12:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:38 nativespace-cdp sudo[11716]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 13:12:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:38 nativespace-cdp sudo[11724]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 13:12:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:38 nativespace-cdp sudo[11734]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 13:12:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:38 nativespace-cdp sudo[11738]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 13:12:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:38 nativespace-cdp sudo[11742]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 13:12:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:38 nativespace-cdp sudo[11749]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 13:12:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:45 nativespace-cdp sudo[11800]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 13:12:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:50 nativespace-cdp sudo[11807]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=thqkgnbz user-2=connectedshoppin user-3=ianrayne user-4=accooper user-5=fetch user-6=carsinyo user-7=hubmaster user-8=elecleis user-9=milloyco user-10=gilpin user-11=highlegh user-12=southlon user-13=firstred user-14=costestimatorco user-15=clarkass user-16=firstrel user-17=opaiscyx user-18=coursemc user-19=firstres user-20=ultbcrra user-21=jonhartl user-22=seftvta user-23=nativene user-24=stuartge user-25=askhform user-26=innovat1 user-27=skyfirec user-28=alexadmin user-29=bemadonn user-30=newstoda user-31=belle user-32=ggaaorgu user-33=bedfords user-34=oneoarco user-35=battlere user-36=vivienn1 user-37=firstre2 user-38=nstriton user-39=brighto1 user-40=leereyn1 user-41=stephani user-42=agproduc user-43=still user-44=theblack user-45=hodgesonweb user-46=spectrum user-47=jarvisin
Sep 30 13:12:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=lbscrmod user-50=maflemin user-51=vantagep user-52=athenare user-53=connect9 user-54=booff user-55=foundation user-56=markward user-57=magichat user-58=hhdugcor user-59=lbhyisi user-60=ptkxhsbt user-61=dickemery123 user-62=martsblo user-63=megacards user-64=musorguk user-65=wilsonsw user-66=atestord user-67=sarafoundation user-68=strathar user-69=brmrjxl user-70=lakesan1 user-71=romaldki user-72=branko user-73=outdoorc user-74=ranxterc user-75=hodgsonmail user-76=onlycont user-77=lucy user-78=attlebor user-79=david user-80=nbhavers user-81=careers user-82=mcdermos user-83=chrisdal user-84=jennimil user-85=tomandle user-86=design user-87=kategilpin user-88=stagingerris user-89=dancinggardener user-90=ladburyp user-91=nvihkvu user-92=havantho user-93=cath user-94=sketchy user-95=what user-96=tstardom user-97=oubpgvbx user-98=crrtipdl user-99=sosevalu user-100=bakery user-101=boldover
Sep 30 13:12:51 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=nove user-103=dhyana user-104=darkstar user-105=eatspam user-106=beauty user-107=nsceres user-108=fawcettd user-109=burydropin user-110=steve user-111=zebrapho user-112=bwppodcast user-113=sibtoncc user-114=asandcoc user-115=courseme user-116=eugincou user-117=hirefootballgame user-118=cwsocial user-119=pugwash user-120=howardon user-121=paulmca1 user-122=ninejimm user-123=reliable user-124=cathski user-125=cambria1 user-126=barbersh user-127=tigerlet user-128=nomistakes user-129=hidden user-130=smrszyqg user-131=isleofwi user-132=steakbridieme user-133=donnychicago user-134=firstre5 user-135=philmcph user-136=ctedorgu user-137=lkpier user-138=leftie user-139=foods user-140=fortunaz user-141=health2045 user-142=nscdp feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 30 13:12:51 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 13:12:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:54 nativespace-cdp sudo[11856]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 13:12:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:55 nativespace-cdp sudo[11928]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eex5DnUMK5f3mwn2.~
Sep 30 13:12:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:55 nativespace-cdp sudo[11931]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eex5DnUMK5f3mwn2.~'
Sep 30 13:12:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:55 nativespace-cdp sudo[11935]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eex5DnUMK5f3mwn2.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 13:12:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:55 nativespace-cdp sudo[11939]: pam_unix(sudo:session): session closed for user root
Sep 30 13:12:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 13:12:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:12:55 nativespace-cdp sudo[11942]: pam_unix(sudo:session): session closed for user root
Sep 30 13:13:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 13:13:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 13:13:11 nativespace-cdp sudo[12068]: pam_unix(sudo:session): session closed for user root
Sep 30 13:16:33 nativespace-cdp sshd[13254]: Connection closed by 159.100.136.21 port 36534 [preauth]
Sep 30 13:21:33 nativespace-cdp sshd[16188]: Connection closed by 159.100.136.21 port 45828 [preauth]
Sep 30 13:26:33 nativespace-cdp sshd[18765]: Connection closed by 159.100.136.21 port 55710 [preauth]
Sep 30 13:31:33 nativespace-cdp sshd[21887]: Connection closed by 159.100.136.21 port 37054 [preauth]
Sep 30 13:36:34 nativespace-cdp sshd[24373]: Connection closed by 159.100.136.21 port 47034 [preauth]
Sep 30 13:41:33 nativespace-cdp sshd[25846]: Connection closed by 159.100.136.21 port 56764 [preauth]
Sep 30 13:46:33 nativespace-cdp sshd[27016]: Connection closed by 159.100.136.21 port 38456 [preauth]
Sep 30 13:51:33 nativespace-cdp sshd[28438]: Connection closed by 159.100.136.21 port 48208 [preauth]
Sep 30 13:56:36 nativespace-cdp sshd[29655]: Connection closed by 159.100.136.21 port 58130 [preauth]
Sep 30 14:01:33 nativespace-cdp sshd[30997]: Connection closed by 159.100.136.21 port 39432 [preauth]
Sep 30 14:06:33 nativespace-cdp sshd[32420]: Connection closed by 159.100.136.21 port 49352 [preauth]
Sep 30 14:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 14:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:43 nativespace-cdp sudo[561]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 14:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:43 nativespace-cdp sudo[565]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 14:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:47 nativespace-cdp sudo[568]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 14:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:47 nativespace-cdp sudo[595]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 14:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:52 nativespace-cdp sudo[598]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:53 nativespace-cdp sudo[626]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:53 nativespace-cdp sudo[629]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:53 nativespace-cdp sudo[632]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:53 nativespace-cdp sudo[636]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:53 nativespace-cdp sudo[639]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 14:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:53 nativespace-cdp sudo[643]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:55 nativespace-cdp sudo[655]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 14:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:57 nativespace-cdp sudo[659]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=lbhyisi user-2=hhdugcor user-3=magichat user-4=martsblo user-5=ptkxhsbt user-6=dickemery123 user-7=wilsonsw user-8=musorguk user-9=megacards user-10=brmrjxl user-11=lakesan1 user-12=sarafoundation user-13=atestord user-14=strathar user-15=still user-16=agproduc user-17=leereyn1 user-18=stephani user-19=jarvisin user-20=theblack user-21=hodgesonweb user-22=spectrum user-23=ulsukarm user-24=booff user-25=foundation user-26=markward user-27=maflemin user-28=lbscrmod user-29=athenare user-30=connect9 user-31=vantagep user-32=askhform user-33=stuartge user-34=innovat1 user-35=nativene user-36=skyfirec user-37=alexadmin user-38=bedfords user-39=bemadonn user-40=ggaaorgu user-41=belle user-42=newstoda user-43=brighto1 user-44=nstriton user-45=battlere user-46=oneoarco user-47=firstre2 user-48=vivienn1
Sep 30 14:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ianrayne user-50=accooper user-51=thqkgnbz user-52=connectedshoppin user-53=elecleis user-54=gilpin user-55=milloyco user-56=carsinyo user-57=fetch user-58=hubmaster user-59=costestimatorco user-60=firstrel user-61=clarkass user-62=southlon user-63=highlegh user-64=firstred user-65=firstres user-66=seftvta user-67=jonhartl user-68=ultbcrra user-69=opaiscyx user-70=coursemc user-71=hirefootballgame user-72=courseme user-73=eugincou user-74=ninejimm user-75=reliable user-76=cambria1 user-77=cathski user-78=pugwash user-79=howardon user-80=paulmca1 user-81=cwsocial user-82=smrszyqg user-83=isleofwi user-84=tigerlet user-85=barbersh user-86=hidden user-87=nomistakes user-88=fortunaz user-89=health2045 user-90=foods user-91=leftie user-92=nscdp user-93=philmcph user-94=ctedorgu user-95=donnychicago user-96=steakbridieme user-97=firstre5 user-98=lkpier user-99=eatspam user-100=darkstar user-101=beauty
Sep 30 14:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=dhyana user-103=burydropin user-104=fawcettd user-105=nsceres user-106=zebrapho user-107=bwppodcast user-108=steve user-109=sibtoncc user-110=asandcoc user-111=kategilpin user-112=ladburyp user-113=stagingerris user-114=dancinggardener user-115=design user-116=what user-117=tstardom user-118=oubpgvbx user-119=nvihkvu user-120=cath user-121=sketchy user-122=havantho user-123=sosevalu user-124=crrtipdl user-125=bakery user-126=nove user-127=boldover user-128=branko user-129=hodgsonmail user-130=ranxterc user-131=outdoorc user-132=romaldki user-133=attlebor user-134=lucy user-135=onlycont user-136=mcdermos user-137=chrisdal user-138=careers user-139=nbhavers user-140=david user-141=tomandle user-142=jennimil feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 14:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 14:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:58 nativespace-cdp sudo[669]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 14:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:59 nativespace-cdp sudo[680]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hHaySaOYsoJF9neL.~
Sep 30 14:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:59 nativespace-cdp sudo[685]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hHaySaOYsoJF9neL.~'
Sep 30 14:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:59 nativespace-cdp sudo[688]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-hHaySaOYsoJF9neL.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 14:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:59 nativespace-cdp sudo[692]: pam_unix(sudo:session): session closed for user root
Sep 30 14:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 14:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:09:59 nativespace-cdp sudo[695]: pam_unix(sudo:session): session closed for user root
Sep 30 14:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 14:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 14:10:18 nativespace-cdp sudo[907]: pam_unix(sudo:session): session closed for user root
Sep 30 14:11:33 nativespace-cdp sshd[1231]: Connection closed by 159.100.136.21 port 58844 [preauth]
Sep 30 14:16:33 nativespace-cdp sshd[2380]: Connection closed by 159.100.136.21 port 40544 [preauth]
Sep 30 14:21:34 nativespace-cdp sshd[3777]: Connection closed by 159.100.136.21 port 49868 [preauth]
Sep 30 14:26:33 nativespace-cdp sshd[4878]: Connection closed by 159.100.136.21 port 59646 [preauth]
Sep 30 14:31:36 nativespace-cdp sshd[5984]: Connection closed by 159.100.136.21 port 41150 [preauth]
Sep 30 14:36:34 nativespace-cdp sshd[7441]: Connection closed by 159.100.136.21 port 51242 [preauth]
Sep 30 14:41:33 nativespace-cdp sshd[8590]: Connection closed by 159.100.136.21 port 60852 [preauth]
Sep 30 14:46:33 nativespace-cdp sshd[9774]: Connection closed by 159.100.136.21 port 42606 [preauth]
Sep 30 14:49:54 nativespace-cdp sshd[10417]: Invalid user git from 37.182.170.223 port 52643
Sep 30 14:49:54 nativespace-cdp sshd[10417]: input_userauth_request: invalid user git [preauth]
Sep 30 14:49:54 nativespace-cdp sshd[10417]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 14:49:54 nativespace-cdp sshd[10417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.182.170.223
Sep 30 14:49:57 nativespace-cdp sshd[10417]: Failed password for invalid user git from 37.182.170.223 port 52643 ssh2
Sep 30 14:49:57 nativespace-cdp sshd[10417]: Received disconnect from 37.182.170.223 port 52643:11: Bye Bye [preauth]
Sep 30 14:49:57 nativespace-cdp sshd[10417]: Disconnected from 37.182.170.223 port 52643 [preauth]
Sep 30 14:51:33 nativespace-cdp sshd[10989]: Connection closed by 159.100.136.21 port 52094 [preauth]
Sep 30 14:55:49 nativespace-cdp sshd[11992]: Invalid user iptv from 37.182.170.223 port 52756
Sep 30 14:55:49 nativespace-cdp sshd[11992]: input_userauth_request: invalid user iptv [preauth]
Sep 30 14:55:49 nativespace-cdp sshd[11992]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 14:55:49 nativespace-cdp sshd[11992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.182.170.223
Sep 30 14:55:51 nativespace-cdp sshd[11992]: Failed password for invalid user iptv from 37.182.170.223 port 52756 ssh2
Sep 30 14:55:51 nativespace-cdp sshd[11992]: Received disconnect from 37.182.170.223 port 52756:11: Bye Bye [preauth]
Sep 30 14:55:51 nativespace-cdp sshd[11992]: Disconnected from 37.182.170.223 port 52756 [preauth]
Sep 30 14:56:35 nativespace-cdp sshd[12170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.182.170.223  user=root
Sep 30 14:56:35 nativespace-cdp sshd[12170]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 14:56:36 nativespace-cdp sshd[12176]: Connection closed by 159.100.136.21 port 33704 [preauth]
Sep 30 14:56:37 nativespace-cdp sshd[12170]: Failed password for root from 37.182.170.223 port 59106 ssh2
Sep 30 14:56:37 nativespace-cdp sshd[12170]: Received disconnect from 37.182.170.223 port 59106:11: Bye Bye [preauth]
Sep 30 14:56:37 nativespace-cdp sshd[12170]: Disconnected from 37.182.170.223 port 59106 [preauth]
Sep 30 15:01:33 nativespace-cdp sshd[13556]: Connection closed by 159.100.136.21 port 43432 [preauth]
Sep 30 15:06:33 nativespace-cdp sshd[14868]: Connection closed by 159.100.136.21 port 53480 [preauth]
Sep 30 15:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 15:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:42 nativespace-cdp sudo[15511]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 15:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:42 nativespace-cdp sudo[15514]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 15:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:44 nativespace-cdp sudo[15517]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 15:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:44 nativespace-cdp sudo[15531]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 15:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:47 nativespace-cdp sudo[15534]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:48 nativespace-cdp sudo[15544]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:48 nativespace-cdp sudo[15547]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:48 nativespace-cdp sudo[15550]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:48 nativespace-cdp sudo[15553]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:48 nativespace-cdp sudo[15559]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 15:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:48 nativespace-cdp sudo[15562]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 15:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:50 nativespace-cdp sudo[15581]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 15:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:52 nativespace-cdp sudo[15585]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=atestord user-2=sarafoundation user-3=strathar user-4=brmrjxl user-5=lakesan1 user-6=megacards user-7=musorguk user-8=wilsonsw user-9=ptkxhsbt user-10=dickemery123 user-11=martsblo user-12=magichat user-13=hhdugcor user-14=lbhyisi user-15=lbscrmod user-16=maflemin user-17=vantagep user-18=connect9 user-19=athenare user-20=booff user-21=markward user-22=foundation user-23=ulsukarm user-24=theblack user-25=hodgesonweb user-26=spectrum user-27=jarvisin user-28=leereyn1 user-29=stephani user-30=agproduc user-31=still user-32=oneoarco user-33=battlere user-34=vivienn1 user-35=firstre2 user-36=nstriton user-37=brighto1 user-38=bemadonn user-39=newstoda user-40=ggaaorgu user-41=belle user-42=bedfords user-43=skyfirec user-44=alexadmin user-45=nativene user-46=askhform user-47=stuartge user-48=innovat1
Sep 30 15:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=opaiscyx user-50=coursemc user-51=firstres user-52=ultbcrra user-53=jonhartl user-54=seftvta user-55=highlegh user-56=southlon user-57=firstred user-58=costestimatorco user-59=clarkass user-60=firstrel user-61=fetch user-62=carsinyo user-63=hubmaster user-64=elecleis user-65=milloyco user-66=gilpin user-67=thqkgnbz user-68=connectedshoppin user-69=ianrayne user-70=accooper user-71=steakbridieme user-72=firstre5 user-73=donnychicago user-74=philmcph user-75=ctedorgu user-76=lkpier user-77=foods user-78=leftie user-79=fortunaz user-80=health2045 user-81=nscdp user-82=barbersh user-83=tigerlet user-84=nomistakes user-85=hidden user-86=smrszyqg user-87=isleofwi user-88=cwsocial user-89=pugwash user-90=howardon user-91=paulmca1 user-92=ninejimm user-93=reliable user-94=cambria1 user-95=cathski user-96=courseme user-97=eugincou user-98=hirefootballgame user-99=asandcoc user-100=sibtoncc user-101=steve
Sep 30 15:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=bwppodcast user-104=nsceres user-105=fawcettd user-106=burydropin user-107=dhyana user-108=darkstar user-109=eatspam user-110=beauty user-111=boldover user-112=nove user-113=crrtipdl user-114=sosevalu user-115=bakery user-116=nvihkvu user-117=havantho user-118=sketchy user-119=cath user-120=what user-121=oubpgvbx user-122=tstardom user-123=design user-124=kategilpin user-125=dancinggardener user-126=stagingerris user-127=ladburyp user-128=jennimil user-129=tomandle user-130=david user-131=careers user-132=nbhavers user-133=mcdermos user-134=chrisdal user-135=onlycont user-136=lucy user-137=attlebor user-138=romaldki user-139=branko user-140=outdoorc user-141=ranxterc user-142=hodgsonmail feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 15:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 15:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:53 nativespace-cdp sudo[15591]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:53 nativespace-cdp sudo[15597]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9W0PCpEzodLvwZ8j.~
Sep 30 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:53 nativespace-cdp sudo[15601]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9W0PCpEzodLvwZ8j.~'
Sep 30 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:53 nativespace-cdp sudo[15604]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9W0PCpEzodLvwZ8j.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:53 nativespace-cdp sudo[15608]: pam_unix(sudo:session): session closed for user root
Sep 30 15:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 15:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:09:53 nativespace-cdp sudo[15611]: pam_unix(sudo:session): session closed for user root
Sep 30 15:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 15:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 15:10:26 nativespace-cdp sudo[15878]: pam_unix(sudo:session): session closed for user root
Sep 30 15:11:34 nativespace-cdp sshd[16076]: Connection closed by 159.100.136.21 port 34768 [preauth]
Sep 30 15:14:46 nativespace-cdp sshd[16801]: Invalid user support from 185.244.248.55 port 59734
Sep 30 15:14:46 nativespace-cdp sshd[16801]: input_userauth_request: invalid user support [preauth]
Sep 30 15:14:46 nativespace-cdp sshd[16801]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 15:14:46 nativespace-cdp sshd[16801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.244.248.55
Sep 30 15:14:49 nativespace-cdp sshd[16801]: Failed password for invalid user support from 185.244.248.55 port 59734 ssh2
Sep 30 15:14:50 nativespace-cdp sshd[16801]: Received disconnect from 185.244.248.55 port 59734:11: Bye Bye [preauth]
Sep 30 15:14:50 nativespace-cdp sshd[16801]: Disconnected from 185.244.248.55 port 59734 [preauth]
Sep 30 15:16:33 nativespace-cdp sshd[17265]: Connection closed by 159.100.136.21 port 43390 [preauth]
Sep 30 15:18:04 nativespace-cdp sshd[17566]: Invalid user sopuser from 156.253.5.48 port 37494
Sep 30 15:18:04 nativespace-cdp sshd[17566]: input_userauth_request: invalid user sopuser [preauth]
Sep 30 15:18:04 nativespace-cdp sshd[17566]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 15:18:04 nativespace-cdp sshd[17566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.253.5.48
Sep 30 15:18:06 nativespace-cdp sshd[17566]: Failed password for invalid user sopuser from 156.253.5.48 port 37494 ssh2
Sep 30 15:18:06 nativespace-cdp sshd[17566]: Received disconnect from 156.253.5.48 port 37494:11: Bye Bye [preauth]
Sep 30 15:18:06 nativespace-cdp sshd[17566]: Disconnected from 156.253.5.48 port 37494 [preauth]
Sep 30 15:18:53 nativespace-cdp sshd[17800]: Invalid user superman from 156.253.5.48 port 37584
Sep 30 15:18:53 nativespace-cdp sshd[17800]: input_userauth_request: invalid user superman [preauth]
Sep 30 15:18:53 nativespace-cdp sshd[17800]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 15:18:53 nativespace-cdp sshd[17800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.253.5.48
Sep 30 15:18:55 nativespace-cdp sshd[17800]: Failed password for invalid user superman from 156.253.5.48 port 37584 ssh2
Sep 30 15:18:55 nativespace-cdp sshd[17800]: Received disconnect from 156.253.5.48 port 37584:11: Bye Bye [preauth]
Sep 30 15:18:55 nativespace-cdp sshd[17800]: Disconnected from 156.253.5.48 port 37584 [preauth]
Sep 30 15:19:31 nativespace-cdp sshd[17914]: Invalid user test_user from 156.253.5.48 port 37666
Sep 30 15:19:31 nativespace-cdp sshd[17914]: input_userauth_request: invalid user test_user [preauth]
Sep 30 15:19:31 nativespace-cdp sshd[17914]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 15:19:31 nativespace-cdp sshd[17914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.253.5.48
Sep 30 15:19:33 nativespace-cdp sshd[17914]: Failed password for invalid user test_user from 156.253.5.48 port 37666 ssh2
Sep 30 15:19:33 nativespace-cdp sshd[17914]: Received disconnect from 156.253.5.48 port 37666:11: Bye Bye [preauth]
Sep 30 15:19:33 nativespace-cdp sshd[17914]: Disconnected from 156.253.5.48 port 37666 [preauth]
Sep 30 15:21:36 nativespace-cdp sshd[18756]: Connection closed by 159.100.136.21 port 52940 [preauth]
Sep 30 15:21:43 nativespace-cdp sshd[18787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.244.248.55  user=mysql
Sep 30 15:21:43 nativespace-cdp sshd[18787]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "mysql"
Sep 30 15:21:45 nativespace-cdp sshd[18787]: Failed password for mysql from 185.244.248.55 port 47022 ssh2
Sep 30 15:21:45 nativespace-cdp sshd[18787]: Received disconnect from 185.244.248.55 port 47022:11: Bye Bye [preauth]
Sep 30 15:21:45 nativespace-cdp sshd[18787]: Disconnected from 185.244.248.55 port 47022 [preauth]
Sep 30 15:22:23 nativespace-cdp sshd[18957]: Invalid user deploy from 185.244.248.55 port 58058
Sep 30 15:22:23 nativespace-cdp sshd[18957]: input_userauth_request: invalid user deploy [preauth]
Sep 30 15:22:23 nativespace-cdp sshd[18957]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 15:22:23 nativespace-cdp sshd[18957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.244.248.55
Sep 30 15:22:26 nativespace-cdp sshd[18957]: Failed password for invalid user deploy from 185.244.248.55 port 58058 ssh2
Sep 30 15:22:26 nativespace-cdp sshd[18957]: Received disconnect from 185.244.248.55 port 58058:11: Bye Bye [preauth]
Sep 30 15:22:26 nativespace-cdp sshd[18957]: Disconnected from 185.244.248.55 port 58058 [preauth]
Sep 30 15:26:36 nativespace-cdp sshd[20010]: Connection closed by 159.100.136.21 port 34652 [preauth]
Sep 30 15:31:37 nativespace-cdp sshd[21205]: Connection closed by 159.100.136.21 port 44360 [preauth]
Sep 30 15:36:33 nativespace-cdp sshd[22476]: Connection closed by 159.100.136.21 port 54380 [preauth]
Sep 30 15:41:36 nativespace-cdp sshd[23678]: Connection closed by 159.100.136.21 port 35726 [preauth]
Sep 30 15:46:36 nativespace-cdp sshd[24947]: Connection closed by 159.100.136.21 port 45358 [preauth]
Sep 30 15:51:33 nativespace-cdp sshd[26305]: Connection closed by 159.100.136.21 port 54936 [preauth]
Sep 30 15:56:35 nativespace-cdp sshd[27470]: Connection closed by 159.100.136.21 port 36600 [preauth]
Sep 30 16:01:33 nativespace-cdp sshd[28649]: Connection closed by 159.100.136.21 port 46022 [preauth]
Sep 30 16:03:56 nativespace-cdp sshd[29311]: Invalid user mosquitto from 167.114.96.239 port 8288
Sep 30 16:03:56 nativespace-cdp sshd[29311]: input_userauth_request: invalid user mosquitto [preauth]
Sep 30 16:03:56 nativespace-cdp sshd[29311]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 16:03:56 nativespace-cdp sshd[29311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.96.239
Sep 30 16:03:57 nativespace-cdp sshd[29311]: Failed password for invalid user mosquitto from 167.114.96.239 port 8288 ssh2
Sep 30 16:03:57 nativespace-cdp sshd[29311]: Received disconnect from 167.114.96.239 port 8288:11: Bye Bye [preauth]
Sep 30 16:03:57 nativespace-cdp sshd[29311]: Disconnected from 167.114.96.239 port 8288 [preauth]
Sep 30 16:06:33 nativespace-cdp sshd[30186]: Connection closed by 159.100.136.21 port 55968 [preauth]
Sep 30 16:07:00 nativespace-cdp sshd[30272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.30.51  user=root
Sep 30 16:07:00 nativespace-cdp sshd[30272]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 16:07:02 nativespace-cdp sshd[30272]: Failed password for root from 51.222.30.51 port 50908 ssh2
Sep 30 16:07:07 nativespace-cdp sshd[30272]: Received disconnect from 51.222.30.51 port 50908:11: Bye Bye [preauth]
Sep 30 16:07:07 nativespace-cdp sshd[30272]: Disconnected from 51.222.30.51 port 50908 [preauth]
Sep 30 16:07:08 nativespace-cdp sshd[30301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.96.239  user=root
Sep 30 16:07:08 nativespace-cdp sshd[30301]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 16:07:10 nativespace-cdp sshd[30301]: Failed password for root from 167.114.96.239 port 55784 ssh2
Sep 30 16:07:10 nativespace-cdp sshd[30301]: Received disconnect from 167.114.96.239 port 55784:11: Bye Bye [preauth]
Sep 30 16:07:10 nativespace-cdp sshd[30301]: Disconnected from 167.114.96.239 port 55784 [preauth]
Sep 30 16:08:28 nativespace-cdp sshd[30508]: Invalid user minecraft from 167.114.96.239 port 63614
Sep 30 16:08:28 nativespace-cdp sshd[30508]: input_userauth_request: invalid user minecraft [preauth]
Sep 30 16:08:28 nativespace-cdp sshd[30508]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 16:08:28 nativespace-cdp sshd[30508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.96.239
Sep 30 16:08:30 nativespace-cdp sshd[30508]: Failed password for invalid user minecraft from 167.114.96.239 port 63614 ssh2
Sep 30 16:08:30 nativespace-cdp sshd[30508]: Received disconnect from 167.114.96.239 port 63614:11: Bye Bye [preauth]
Sep 30 16:08:30 nativespace-cdp sshd[30508]: Disconnected from 167.114.96.239 port 63614 [preauth]
Sep 30 16:09:20 nativespace-cdp sshd[30765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.30.51  user=root
Sep 30 16:09:20 nativespace-cdp sshd[30765]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 16:09:22 nativespace-cdp sshd[30765]: Failed password for root from 51.222.30.51 port 48844 ssh2
Sep 30 16:09:22 nativespace-cdp sshd[30765]: Received disconnect from 51.222.30.51 port 48844:11: Bye Bye [preauth]
Sep 30 16:09:22 nativespace-cdp sshd[30765]: Disconnected from 51.222.30.51 port 48844 [preauth]
Sep 30 16:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 16:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:42 nativespace-cdp sudo[30841]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 16:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:42 nativespace-cdp sudo[30845]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 16:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:43 nativespace-cdp sudo[30849]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 16:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:43 nativespace-cdp sudo[30857]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 16:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:47 nativespace-cdp sudo[30860]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:47 nativespace-cdp sudo[30876]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:47 nativespace-cdp sudo[30880]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:47 nativespace-cdp sudo[30884]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:47 nativespace-cdp sudo[30887]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:47 nativespace-cdp sudo[30890]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 16:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:47 nativespace-cdp sudo[30893]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 16:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:53 nativespace-cdp sudo[30905]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 16:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:54 nativespace-cdp sudo[30910]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=costestimatorco user-2=firstrel user-3=clarkass user-4=southlon user-5=highlegh user-6=firstred user-7=firstres user-8=jonhartl user-9=seftvta user-10=ultbcrra user-11=opaiscyx user-12=coursemc user-13=ianrayne user-14=accooper user-15=thqkgnbz user-16=connectedshoppin user-17=elecleis user-18=gilpin user-19=milloyco user-20=carsinyo user-21=fetch user-22=hubmaster user-23=bedfords user-24=bemadonn user-25=belle user-26=ggaaorgu user-27=newstoda user-28=brighto1 user-29=nstriton user-30=battlere user-31=oneoarco user-32=firstre2 user-33=vivienn1 user-34=askhform user-35=stuartge user-36=innovat1 user-37=nativene user-38=skyfirec user-39=alexadmin user-40=ulsukarm user-41=booff user-42=foundation user-43=markward user-44=maflemin user-45=lbscrmod user-46=connect9 user-47=athenare user-48=vantagep
Sep 30 16:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=still user-50=agproduc user-51=leereyn1 user-52=stephani user-53=jarvisin user-54=theblack user-55=hodgesonweb user-56=spectrum user-57=wilsonsw user-58=musorguk user-59=megacards user-60=brmrjxl user-61=lakesan1 user-62=sarafoundation user-63=atestord user-64=strathar user-65=lbhyisi user-66=hhdugcor user-67=magichat user-68=martsblo user-69=ptkxhsbt user-70=dickemery123 user-71=mcdermos user-72=chrisdal user-73=nbhavers user-74=careers user-75=david user-76=tomandle user-77=jennimil user-78=branko user-79=outdoorc user-80=ranxterc user-81=hodgsonmail user-82=romaldki user-83=attlebor user-84=lucy user-85=onlycont user-86=sosevalu user-87=crrtipdl user-88=bakery user-89=nove user-90=boldover user-91=kategilpin user-92=ladburyp user-93=dancinggardener user-94=stagingerris user-95=design user-96=what user-97=tstardom user-98=oubpgvbx user-99=nvihkvu user-100=cath user-101=sketchy user-102=havantho
Sep 30 16:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=zebrapho user-104=bwppodcast user-105=steve user-106=sibtoncc user-107=asandcoc user-108=eatspam user-109=darkstar user-110=beauty user-111=dhyana user-112=burydropin user-113=fawcettd user-114=nsceres user-115=isleofwi user-116=smrszyqg user-117=tigerlet user-118=barbersh user-119=hidden user-120=nomistakes user-121=fortunaz user-122=health2045 user-123=leftie user-124=foods user-125=nscdp user-126=philmcph user-127=ctedorgu user-128=donnychicago user-129=steakbridieme user-130=firstre5 user-131=lkpier user-132=hirefootballgame user-133=courseme user-134=eugincou user-135=reliable user-136=ninejimm user-137=cathski user-138=cambria1 user-139=howardon user-140=pugwash user-141=paulmca1 user-142=cwsocial feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 16:09:54 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 16:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:55 nativespace-cdp sudo[30914]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:56 nativespace-cdp sudo[30924]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NPsjx1PCayGmmoq2.~
Sep 30 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:56 nativespace-cdp sudo[30927]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NPsjx1PCayGmmoq2.~'
Sep 30 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:56 nativespace-cdp sudo[30930]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-NPsjx1PCayGmmoq2.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:56 nativespace-cdp sudo[30934]: pam_unix(sudo:session): session closed for user root
Sep 30 16:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 16:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:09:56 nativespace-cdp sudo[30937]: pam_unix(sudo:session): session closed for user root
Sep 30 16:10:03 nativespace-cdp sshd[31048]: Invalid user portal from 51.222.30.51 port 34158
Sep 30 16:10:03 nativespace-cdp sshd[31048]: input_userauth_request: invalid user portal [preauth]
Sep 30 16:10:03 nativespace-cdp sshd[31048]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 16:10:03 nativespace-cdp sshd[31048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.30.51
Sep 30 16:10:04 nativespace-cdp sshd[31048]: Failed password for invalid user portal from 51.222.30.51 port 34158 ssh2
Sep 30 16:10:04 nativespace-cdp sshd[31048]: Received disconnect from 51.222.30.51 port 34158:11: Bye Bye [preauth]
Sep 30 16:10:04 nativespace-cdp sshd[31048]: Disconnected from 51.222.30.51 port 34158 [preauth]
Sep 30 16:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 16:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 16:10:15 nativespace-cdp sudo[31193]: pam_unix(sudo:session): session closed for user root
Sep 30 16:11:13 nativespace-cdp sshd[31444]: Invalid user ionguest from 210.164.66.50 port 59234
Sep 30 16:11:13 nativespace-cdp sshd[31444]: input_userauth_request: invalid user ionguest [preauth]
Sep 30 16:11:13 nativespace-cdp sshd[31444]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 16:11:13 nativespace-cdp sshd[31444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.164.66.50
Sep 30 16:11:14 nativespace-cdp sshd[31472]: Bad protocol version identification 'GET / HTTP/1.1' from 185.242.226.50 port 34690
Sep 30 16:11:15 nativespace-cdp sshd[31444]: Failed password for invalid user ionguest from 210.164.66.50 port 59234 ssh2
Sep 30 16:11:15 nativespace-cdp sshd[31444]: Received disconnect from 210.164.66.50 port 59234:11: Bye Bye [preauth]
Sep 30 16:11:15 nativespace-cdp sshd[31444]: Disconnected from 210.164.66.50 port 59234 [preauth]
Sep 30 16:11:33 nativespace-cdp sshd[31537]: Connection closed by 159.100.136.21 port 36644 [preauth]
Sep 30 16:16:02 nativespace-cdp sshd[32549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.164.66.50  user=root
Sep 30 16:16:02 nativespace-cdp sshd[32549]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 16:16:04 nativespace-cdp sshd[32549]: Failed password for root from 210.164.66.50 port 38446 ssh2
Sep 30 16:16:05 nativespace-cdp sshd[32549]: Received disconnect from 210.164.66.50 port 38446:11: Bye Bye [preauth]
Sep 30 16:16:05 nativespace-cdp sshd[32549]: Disconnected from 210.164.66.50 port 38446 [preauth]
Sep 30 16:16:33 nativespace-cdp sshd[32671]: Connection closed by 159.100.136.21 port 46440 [preauth]
Sep 30 16:17:26 nativespace-cdp sshd[319]: Invalid user elemental from 210.164.66.50 port 35180
Sep 30 16:17:26 nativespace-cdp sshd[319]: input_userauth_request: invalid user elemental [preauth]
Sep 30 16:17:26 nativespace-cdp sshd[319]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 16:17:26 nativespace-cdp sshd[319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.164.66.50
Sep 30 16:17:29 nativespace-cdp sshd[319]: Failed password for invalid user elemental from 210.164.66.50 port 35180 ssh2
Sep 30 16:21:34 nativespace-cdp sshd[1599]: Connection closed by 159.100.136.21 port 56158 [preauth]
Sep 30 16:26:33 nativespace-cdp sshd[2620]: Connection closed by 159.100.136.21 port 37580 [preauth]
Sep 30 16:31:33 nativespace-cdp sshd[3941]: Connection closed by 159.100.136.21 port 47142 [preauth]
Sep 30 16:36:33 nativespace-cdp sshd[5334]: Connection closed by 159.100.136.21 port 56430 [preauth]
Sep 30 16:41:33 nativespace-cdp sshd[6544]: Connection closed by 159.100.136.21 port 37592 [preauth]
Sep 30 16:46:33 nativespace-cdp sshd[8266]: Connection closed by 159.100.136.21 port 47418 [preauth]
Sep 30 16:51:36 nativespace-cdp sshd[9623]: Connection closed by 159.100.136.21 port 56310 [preauth]
Sep 30 16:56:33 nativespace-cdp sshd[10795]: Connection closed by 159.100.136.21 port 37694 [preauth]
Sep 30 17:01:33 nativespace-cdp sshd[12082]: Connection closed by 159.100.136.21 port 47170 [preauth]
Sep 30 17:06:33 nativespace-cdp sshd[13580]: Connection closed by 159.100.136.21 port 56584 [preauth]
Sep 30 17:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 17:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:42 nativespace-cdp sudo[14247]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 17:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:42 nativespace-cdp sudo[14251]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 17:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:44 nativespace-cdp sudo[14254]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 17:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:44 nativespace-cdp sudo[14267]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 17:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:48 nativespace-cdp sudo[14270]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 17:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:48 nativespace-cdp sudo[14289]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 17:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:48 nativespace-cdp sudo[14292]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 17:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:48 nativespace-cdp sudo[14295]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 17:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:48 nativespace-cdp sudo[14299]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 17:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:49 nativespace-cdp sudo[14304]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 17:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:49 nativespace-cdp sudo[14307]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 17:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:56 nativespace-cdp sudo[14345]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 17:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:57 nativespace-cdp sudo[14349]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=markward user-3=booff user-4=foundation user-5=lbscrmod user-6=maflemin user-7=vantagep user-8=connect9 user-9=athenare user-10=agproduc user-11=still user-12=leereyn1 user-13=stephani user-14=jarvisin user-15=theblack user-16=hodgesonweb user-17=spectrum user-18=wilsonsw user-19=megacards user-20=musorguk user-21=lakesan1 user-22=brmrjxl user-23=atestord user-24=sarafoundation user-25=strathar user-26=hhdugcor user-27=lbhyisi user-28=magichat user-29=martsblo user-30=ptkxhsbt user-31=dickemery123 user-32=costestimatorco user-33=clarkass user-34=firstrel user-35=highlegh user-36=southlon user-37=firstred user-38=firstres user-39=ultbcrra user-40=jonhartl user-41=seftvta user-42=coursemc user-43=opaiscyx user-44=ianrayne user-45=accooper user-46=thqkgnbz user-47=connectedshoppin
Sep 30 17:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=elecleis user-49=gilpin user-50=milloyco user-51=fetch user-52=carsinyo user-53=hubmaster user-54=bedfords user-55=bemadonn user-56=newstoda user-57=ggaaorgu user-58=belle user-59=nstriton user-60=brighto1 user-61=oneoarco user-62=battlere user-63=vivienn1 user-64=firstre2 user-65=askhform user-66=stuartge user-67=innovat1 user-68=nativene user-69=alexadmin user-70=skyfirec user-71=zebrapho user-72=bwppodcast user-73=steve user-74=sibtoncc user-75=asandcoc user-76=darkstar user-77=eatspam user-78=beauty user-79=dhyana user-80=fawcettd user-81=burydropin user-82=nsceres user-83=isleofwi user-84=smrszyqg user-85=barbersh user-86=tigerlet user-87=nomistakes user-88=hidden user-89=leftie user-90=foods user-91=health2045 user-92=fortunaz user-93=nscdp user-94=firstre5 user-95=donnychicago user-96=steakbridieme user-97=philmcph user-98=ctedorgu user-99=lkpier user-100=hirefootballgame user-101=courseme
Sep 30 17:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eugincou user-103=ninejimm user-104=reliable user-105=cambria1 user-106=cathski user-107=cwsocial user-108=howardon user-109=pugwash user-110=paulmca1 user-111=mcdermos user-112=chrisdal user-113=david user-114=nbhavers user-115=careers user-116=tomandle user-117=jennimil user-118=branko user-119=ranxterc user-120=hodgsonmail user-121=outdoorc user-122=romaldki user-123=lucy user-124=attlebor user-125=onlycont user-126=crrtipdl user-127=sosevalu user-128=bakery user-129=nove user-130=boldover user-131=kategilpin user-132=dancinggardener user-133=stagingerris user-134=ladburyp user-135=design user-136=what user-137=oubpgvbx user-138=tstardom user-139=nvihkvu user-140=havantho user-141=sketchy user-142=cath feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 17:09:57 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 17:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:59 nativespace-cdp sudo[14355]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:59 nativespace-cdp sudo[14360]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QVbFklpb3jMvtPjD.~
Sep 30 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:09:59 nativespace-cdp sudo[14364]: pam_unix(sudo:session): session closed for user root
Sep 30 17:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QVbFklpb3jMvtPjD.~'
Sep 30 17:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:10:00 nativespace-cdp sudo[14367]: pam_unix(sudo:session): session closed for user root
Sep 30 17:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-QVbFklpb3jMvtPjD.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:10:00 nativespace-cdp sudo[14371]: pam_unix(sudo:session): session closed for user root
Sep 30 17:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:10:00 nativespace-cdp sudo[14374]: pam_unix(sudo:session): session closed for user root
Sep 30 17:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 17:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 17:10:08 nativespace-cdp sudo[14588]: pam_unix(sudo:session): session closed for user root
Sep 30 17:11:33 nativespace-cdp sshd[14890]: Connection closed by 159.100.136.21 port 37388 [preauth]
Sep 30 17:16:33 nativespace-cdp sshd[16054]: Connection closed by 159.100.136.21 port 47336 [preauth]
Sep 30 17:21:33 nativespace-cdp sshd[17427]: Connection closed by 159.100.136.21 port 56844 [preauth]
Sep 30 17:26:33 nativespace-cdp sshd[18515]: Connection closed by 159.100.136.21 port 38456 [preauth]
Sep 30 17:31:33 nativespace-cdp sshd[19765]: Connection closed by 159.100.136.21 port 47454 [preauth]
Sep 30 17:36:35 nativespace-cdp sshd[20975]: Connection closed by 159.100.136.21 port 57032 [preauth]
Sep 30 17:41:33 nativespace-cdp sshd[22360]: Connection closed by 159.100.136.21 port 38256 [preauth]
Sep 30 17:44:27 nativespace-cdp sshd[23373]: Did not receive identification string from 167.94.146.62 port 52696
Sep 30 17:44:45 nativespace-cdp sshd[23473]: Connection closed by 167.94.146.62 port 42958 [preauth]
Sep 30 17:46:33 nativespace-cdp sshd[24046]: Connection closed by 159.100.136.21 port 48150 [preauth]
Sep 30 17:50:13 nativespace-cdp sshd[25137]: Received disconnect from 66.155.22.27 port 51408:11: Normal Shutdown [preauth]
Sep 30 17:50:13 nativespace-cdp sshd[25137]: Disconnected from 66.155.22.27 port 51408 [preauth]
Sep 30 17:50:16 nativespace-cdp sshd[25212]: Accepted publickey for root from 66.155.22.27 port 51416 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 30 17:50:16 nativespace-cdp sshd[25212]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 30 17:51:33 nativespace-cdp sshd[25472]: Connection closed by 159.100.136.21 port 57826 [preauth]
Sep 30 17:55:38 nativespace-cdp sshd[28454]: Accepted publickey for root from 66.155.22.27 port 54688 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 30 17:55:38 nativespace-cdp sshd[28454]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 30 17:56:33 nativespace-cdp sshd[32263]: Connection closed by 159.100.136.21 port 39522 [preauth]
Sep 30 18:01:33 nativespace-cdp sshd[11998]: Connection closed by 159.100.136.21 port 48668 [preauth]
Sep 30 18:06:37 nativespace-cdp sshd[20253]: Connection closed by 159.100.136.21 port 58426 [preauth]
Sep 30 18:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 18:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:43 nativespace-cdp sudo[21054]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 18:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:43 nativespace-cdp sudo[21058]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 18:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:45 nativespace-cdp sudo[21061]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 18:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:45 nativespace-cdp sudo[21095]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 18:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:48 nativespace-cdp sudo[21098]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:49 nativespace-cdp sudo[21114]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:49 nativespace-cdp sudo[21118]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:49 nativespace-cdp sudo[21121]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:49 nativespace-cdp sudo[21124]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:49 nativespace-cdp sudo[21127]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 18:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:49 nativespace-cdp sudo[21130]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 18:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:51 nativespace-cdp sudo[21138]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 18:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:52 nativespace-cdp sudo[21142]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=thqkgnbz user-2=connectedshoppin user-3=ianrayne user-4=accooper user-5=fetch user-6=carsinyo user-7=hubmaster user-8=elecleis user-9=milloyco user-10=gilpin user-11=highlegh user-12=southlon user-13=firstred user-14=costestimatorco user-15=clarkass user-16=firstrel user-17=coursemc user-18=opaiscyx user-19=firstres user-20=ultbcrra user-21=seftvta user-22=jonhartl user-23=nativene user-24=askhform user-25=stuartge user-26=innovat1 user-27=skyfirec user-28=alexadmin user-29=bemadonn user-30=newstoda user-31=belle user-32=ggaaorgu user-33=bedfords user-34=oneoarco user-35=battlere user-36=vivienn1 user-37=firstre2 user-38=nstriton user-39=brighto1 user-40=leereyn1 user-41=stephani user-42=agproduc user-43=still user-44=hodgesonweb user-45=theblack user-46=spectrum user-47=jarvisin
Sep 30 18:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=lbscrmod user-50=maflemin user-51=vantagep user-52=athenare user-53=connect9 user-54=markward user-55=booff user-56=foundation user-57=magichat user-58=hhdugcor user-59=lbhyisi user-60=ptkxhsbt user-61=dickemery123 user-62=martsblo user-63=megacards user-64=musorguk user-65=wilsonsw user-66=atestord user-67=sarafoundation user-68=strathar user-69=lakesan1 user-70=brmrjxl user-71=romaldki user-72=branko user-73=ranxterc user-74=outdoorc user-75=hodgsonmail user-76=onlycont user-77=lucy user-78=attlebor user-79=david user-80=careers user-81=nbhavers user-82=mcdermos user-83=chrisdal user-84=jennimil user-85=tomandle user-86=design user-87=kategilpin user-88=dancinggardener user-89=stagingerris user-90=ladburyp user-91=nvihkvu user-92=havantho user-93=cath user-94=sketchy user-95=what user-96=oubpgvbx user-97=tstardom user-98=crrtipdl user-99=sosevalu user-100=bakery user-101=boldover
Sep 30 18:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=nove user-103=dhyana user-104=darkstar user-105=eatspam user-106=beauty user-107=nsceres user-108=fawcettd user-109=burydropin user-110=steve user-111=zebrapho user-112=bwppodcast user-113=sibtoncc user-114=asandcoc user-115=courseme user-116=eugincou user-117=hirefootballgame user-118=cwsocial user-119=pugwash user-120=paulmca1 user-121=howardon user-122=ninejimm user-123=reliable user-124=cambria1 user-125=cathski user-126=barbersh user-127=tigerlet user-128=nomistakes user-129=hidden user-130=isleofwi user-131=smrszyqg user-132=steakbridieme user-133=donnychicago user-134=firstre5 user-135=ctedorgu user-136=philmcph user-137=lkpier user-138=foods user-139=leftie user-140=health2045 user-141=fortunaz user-142=nscdp feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 30 18:09:52 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 18:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:53 nativespace-cdp sudo[21147]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:54 nativespace-cdp sudo[21153]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vzeV5SNlXTlWcavh.~
Sep 30 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:54 nativespace-cdp sudo[21156]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vzeV5SNlXTlWcavh.~'
Sep 30 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:54 nativespace-cdp sudo[21159]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vzeV5SNlXTlWcavh.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:54 nativespace-cdp sudo[21163]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 18:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:54 nativespace-cdp sudo[21166]: pam_unix(sudo:session): session closed for user root
Sep 30 18:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 18:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 18:09:55 nativespace-cdp sudo[21183]: pam_unix(sudo:session): session closed for user root
Sep 30 18:11:33 nativespace-cdp sshd[21570]: Connection closed by 159.100.136.21 port 39484 [preauth]
Sep 30 18:14:13 nativespace-cdp sshd[25212]: pam_unix(sshd:session): session closed for user root
Sep 30 18:15:04 nativespace-cdp sshd[22466]: Accepted publickey for root from 185.67.178.249 port 54080 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 30 18:15:04 nativespace-cdp sshd[22466]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 30 18:15:26 nativespace-cdp sshd[22602]: Accepted publickey for root from 185.67.178.249 port 33614 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Sep 30 18:15:26 nativespace-cdp sshd[22602]: pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 30 18:16:33 nativespace-cdp sshd[22882]: Connection closed by 159.100.136.21 port 49148 [preauth]
Sep 30 18:21:33 nativespace-cdp sshd[24112]: Connection closed by 159.100.136.21 port 58620 [preauth]
Sep 30 18:22:42 nativespace-cdp sshd[24297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:22:42 nativespace-cdp sshd[24297]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:22:44 nativespace-cdp sshd[24297]: Failed password for root from 8.209.74.10 port 54316 ssh2
Sep 30 18:22:44 nativespace-cdp sshd[24297]: Received disconnect from 8.209.74.10 port 54316:11: Bye Bye [preauth]
Sep 30 18:22:44 nativespace-cdp sshd[24297]: Disconnected from 8.209.74.10 port 54316 [preauth]
Sep 30 18:25:41 nativespace-cdp sshd[25007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=david
Sep 30 18:25:43 nativespace-cdp sshd[25007]: Failed password for david from 107.175.245.71 port 48116 ssh2
Sep 30 18:26:02 nativespace-cdp sshd[25007]: Received disconnect from 107.175.245.71 port 48116:11: Bye Bye [preauth]
Sep 30 18:26:02 nativespace-cdp sshd[25007]: Disconnected from 107.175.245.71 port 48116 [preauth]
Sep 30 18:26:33 nativespace-cdp sshd[25196]: Connection closed by 159.100.136.21 port 40246 [preauth]
Sep 30 18:27:11 nativespace-cdp sshd[25310]: Invalid user admin from 23.94.194.145 port 41770
Sep 30 18:27:11 nativespace-cdp sshd[25310]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:27:11 nativespace-cdp sshd[25310]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:27:11 nativespace-cdp sshd[25310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:27:13 nativespace-cdp sshd[25310]: Failed password for invalid user admin from 23.94.194.145 port 41770 ssh2
Sep 30 18:27:13 nativespace-cdp sshd[25310]: Received disconnect from 23.94.194.145 port 41770:11: Bye Bye [preauth]
Sep 30 18:27:13 nativespace-cdp sshd[25310]: Disconnected from 23.94.194.145 port 41770 [preauth]
Sep 30 18:27:23 nativespace-cdp sshd[25345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:27:23 nativespace-cdp sshd[25345]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:27:24 nativespace-cdp sshd[25345]: Failed password for root from 8.209.74.10 port 58596 ssh2
Sep 30 18:27:24 nativespace-cdp sshd[25345]: Received disconnect from 8.209.74.10 port 58596:11: Bye Bye [preauth]
Sep 30 18:27:24 nativespace-cdp sshd[25345]: Disconnected from 8.209.74.10 port 58596 [preauth]
Sep 30 18:27:56 nativespace-cdp sshd[25445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=david
Sep 30 18:27:57 nativespace-cdp sshd[25447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=bin
Sep 30 18:27:57 nativespace-cdp sshd[25447]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "bin"
Sep 30 18:27:58 nativespace-cdp sshd[25445]: Failed password for david from 23.94.194.145 port 55086 ssh2
Sep 30 18:27:58 nativespace-cdp sshd[25445]: Received disconnect from 23.94.194.145 port 55086:11: Bye Bye [preauth]
Sep 30 18:27:58 nativespace-cdp sshd[25445]: Disconnected from 23.94.194.145 port 55086 [preauth]
Sep 30 18:27:59 nativespace-cdp sshd[25447]: Failed password for bin from 107.175.245.71 port 48232 ssh2
Sep 30 18:27:59 nativespace-cdp sshd[25447]: Received disconnect from 107.175.245.71 port 48232:11: Bye Bye [preauth]
Sep 30 18:27:59 nativespace-cdp sshd[25447]: Disconnected from 107.175.245.71 port 48232 [preauth]
Sep 30 18:28:08 nativespace-cdp sshd[25495]: Invalid user basesystem from 8.209.74.10 port 34530
Sep 30 18:28:08 nativespace-cdp sshd[25495]: input_userauth_request: invalid user basesystem [preauth]
Sep 30 18:28:08 nativespace-cdp sshd[25495]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:28:08 nativespace-cdp sshd[25495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:28:10 nativespace-cdp sshd[25495]: Failed password for invalid user basesystem from 8.209.74.10 port 34530 ssh2
Sep 30 18:28:10 nativespace-cdp sshd[25495]: Received disconnect from 8.209.74.10 port 34530:11: Bye Bye [preauth]
Sep 30 18:28:10 nativespace-cdp sshd[25495]: Disconnected from 8.209.74.10 port 34530 [preauth]
Sep 30 18:28:39 nativespace-cdp sshd[25555]: Received disconnect from 107.175.245.71 port 48292:11: Bye Bye [preauth]
Sep 30 18:28:39 nativespace-cdp sshd[25555]: Disconnected from 107.175.245.71 port 48292 [preauth]
Sep 30 18:28:40 nativespace-cdp sshd[25567]: Invalid user oracle from 23.94.194.145 port 39554
Sep 30 18:28:40 nativespace-cdp sshd[25567]: input_userauth_request: invalid user oracle [preauth]
Sep 30 18:28:40 nativespace-cdp sshd[25567]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:28:40 nativespace-cdp sshd[25567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:28:42 nativespace-cdp sshd[25567]: Failed password for invalid user oracle from 23.94.194.145 port 39554 ssh2
Sep 30 18:28:42 nativespace-cdp sshd[25567]: Received disconnect from 23.94.194.145 port 39554:11: Bye Bye [preauth]
Sep 30 18:28:42 nativespace-cdp sshd[25567]: Disconnected from 23.94.194.145 port 39554 [preauth]
Sep 30 18:28:54 nativespace-cdp sshd[25597]: Invalid user cacti from 8.209.74.10 port 44678
Sep 30 18:28:54 nativespace-cdp sshd[25597]: input_userauth_request: invalid user cacti [preauth]
Sep 30 18:28:54 nativespace-cdp sshd[25597]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:28:54 nativespace-cdp sshd[25597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:28:55 nativespace-cdp sshd[25597]: Failed password for invalid user cacti from 8.209.74.10 port 44678 ssh2
Sep 30 18:28:59 nativespace-cdp sshd[25597]: Received disconnect from 8.209.74.10 port 44678:11: Bye Bye [preauth]
Sep 30 18:28:59 nativespace-cdp sshd[25597]: Disconnected from 8.209.74.10 port 44678 [preauth]
Sep 30 18:29:11 nativespace-cdp sshd[25656]: Invalid user adminftp from 107.175.245.71 port 48354
Sep 30 18:29:11 nativespace-cdp sshd[25656]: input_userauth_request: invalid user adminftp [preauth]
Sep 30 18:29:11 nativespace-cdp sshd[25656]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:29:11 nativespace-cdp sshd[25656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:29:13 nativespace-cdp sshd[25656]: Failed password for invalid user adminftp from 107.175.245.71 port 48354 ssh2
Sep 30 18:29:13 nativespace-cdp sshd[25656]: Received disconnect from 107.175.245.71 port 48354:11: Bye Bye [preauth]
Sep 30 18:29:13 nativespace-cdp sshd[25656]: Disconnected from 107.175.245.71 port 48354 [preauth]
Sep 30 18:29:13 nativespace-cdp sshd[25668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:29:13 nativespace-cdp sshd[25668]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:29:15 nativespace-cdp sshd[25668]: Failed password for root from 23.94.194.145 port 52254 ssh2
Sep 30 18:29:20 nativespace-cdp sshd[25668]: Received disconnect from 23.94.194.145 port 52254:11: Bye Bye [preauth]
Sep 30 18:29:20 nativespace-cdp sshd[25668]: Disconnected from 23.94.194.145 port 52254 [preauth]
Sep 30 18:29:36 nativespace-cdp sshd[25717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:29:36 nativespace-cdp sshd[25717]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:29:38 nativespace-cdp sshd[25717]: Failed password for root from 8.209.74.10 port 36972 ssh2
Sep 30 18:29:38 nativespace-cdp sshd[25717]: Received disconnect from 8.209.74.10 port 36972:11: Bye Bye [preauth]
Sep 30 18:29:38 nativespace-cdp sshd[25717]: Disconnected from 8.209.74.10 port 36972 [preauth]
Sep 30 18:29:47 nativespace-cdp sshd[25742]: Invalid user admin from 107.175.245.71 port 48412
Sep 30 18:29:47 nativespace-cdp sshd[25742]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:29:47 nativespace-cdp sshd[25742]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:29:47 nativespace-cdp sshd[25742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:29:49 nativespace-cdp sshd[25742]: Failed password for invalid user admin from 107.175.245.71 port 48412 ssh2
Sep 30 18:29:51 nativespace-cdp sshd[25742]: Received disconnect from 107.175.245.71 port 48412:11: Bye Bye [preauth]
Sep 30 18:29:51 nativespace-cdp sshd[25742]: Disconnected from 107.175.245.71 port 48412 [preauth]
Sep 30 18:29:52 nativespace-cdp sshd[25748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:29:52 nativespace-cdp sshd[25748]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:29:54 nativespace-cdp sshd[25748]: Failed password for root from 23.94.194.145 port 36724 ssh2
Sep 30 18:29:55 nativespace-cdp sshd[25748]: Received disconnect from 23.94.194.145 port 36724:11: Bye Bye [preauth]
Sep 30 18:29:55 nativespace-cdp sshd[25748]: Disconnected from 23.94.194.145 port 36724 [preauth]
Sep 30 18:30:17 nativespace-cdp sshd[26063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:30:17 nativespace-cdp sshd[26063]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:30:19 nativespace-cdp sshd[26063]: Failed password for root from 8.209.74.10 port 38972 ssh2
Sep 30 18:30:19 nativespace-cdp sshd[26063]: Received disconnect from 8.209.74.10 port 38972:11: Bye Bye [preauth]
Sep 30 18:30:19 nativespace-cdp sshd[26063]: Disconnected from 8.209.74.10 port 38972 [preauth]
Sep 30 18:30:27 nativespace-cdp sshd[26084]: Invalid user cacti from 23.94.194.145 port 49418
Sep 30 18:30:27 nativespace-cdp sshd[26084]: input_userauth_request: invalid user cacti [preauth]
Sep 30 18:30:27 nativespace-cdp sshd[26084]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:30:27 nativespace-cdp sshd[26084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:30:29 nativespace-cdp sshd[26084]: Failed password for invalid user cacti from 23.94.194.145 port 49418 ssh2
Sep 30 18:30:30 nativespace-cdp sshd[26084]: Received disconnect from 23.94.194.145 port 49418:11: Bye Bye [preauth]
Sep 30 18:30:30 nativespace-cdp sshd[26084]: Disconnected from 23.94.194.145 port 49418 [preauth]
Sep 30 18:30:33 nativespace-cdp sshd[26078]: Received disconnect from 107.175.245.71 port 48474:11: Bye Bye [preauth]
Sep 30 18:30:33 nativespace-cdp sshd[26078]: Disconnected from 107.175.245.71 port 48474 [preauth]
Sep 30 18:30:57 nativespace-cdp sshd[26199]: Invalid user daniel from 107.175.245.71 port 48538
Sep 30 18:30:57 nativespace-cdp sshd[26199]: input_userauth_request: invalid user daniel [preauth]
Sep 30 18:30:57 nativespace-cdp sshd[26199]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:30:57 nativespace-cdp sshd[26199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:30:59 nativespace-cdp sshd[26199]: Failed password for invalid user daniel from 107.175.245.71 port 48538 ssh2
Sep 30 18:30:59 nativespace-cdp sshd[26199]: Received disconnect from 107.175.245.71 port 48538:11: Bye Bye [preauth]
Sep 30 18:30:59 nativespace-cdp sshd[26199]: Disconnected from 107.175.245.71 port 48538 [preauth]
Sep 30 18:31:01 nativespace-cdp sshd[26220]: Invalid user oracle from 8.209.74.10 port 36598
Sep 30 18:31:01 nativespace-cdp sshd[26220]: input_userauth_request: invalid user oracle [preauth]
Sep 30 18:31:01 nativespace-cdp sshd[26220]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:31:01 nativespace-cdp sshd[26220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:31:02 nativespace-cdp sshd[26235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:31:02 nativespace-cdp sshd[26235]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:31:03 nativespace-cdp sshd[26220]: Failed password for invalid user oracle from 8.209.74.10 port 36598 ssh2
Sep 30 18:31:04 nativespace-cdp sshd[26235]: Failed password for root from 23.94.194.145 port 33886 ssh2
Sep 30 18:31:05 nativespace-cdp sshd[26235]: Received disconnect from 23.94.194.145 port 33886:11: Bye Bye [preauth]
Sep 30 18:31:05 nativespace-cdp sshd[26235]: Disconnected from 23.94.194.145 port 33886 [preauth]
Sep 30 18:31:05 nativespace-cdp sshd[26220]: Received disconnect from 8.209.74.10 port 36598:11: Bye Bye [preauth]
Sep 30 18:31:05 nativespace-cdp sshd[26220]: Disconnected from 8.209.74.10 port 36598 [preauth]
Sep 30 18:31:32 nativespace-cdp sshd[26314]: Invalid user debian from 107.175.245.71 port 48600
Sep 30 18:31:32 nativespace-cdp sshd[26314]: input_userauth_request: invalid user debian [preauth]
Sep 30 18:31:32 nativespace-cdp sshd[26314]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:31:32 nativespace-cdp sshd[26314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:31:33 nativespace-cdp sshd[26327]: Connection closed by 159.100.136.21 port 49846 [preauth]
Sep 30 18:31:34 nativespace-cdp sshd[26314]: Failed password for invalid user debian from 107.175.245.71 port 48600 ssh2
Sep 30 18:31:34 nativespace-cdp sshd[26314]: Received disconnect from 107.175.245.71 port 48600:11: Bye Bye [preauth]
Sep 30 18:31:34 nativespace-cdp sshd[26314]: Disconnected from 107.175.245.71 port 48600 [preauth]
Sep 30 18:31:41 nativespace-cdp sshd[26346]: Invalid user bkp from 23.94.194.145 port 46582
Sep 30 18:31:41 nativespace-cdp sshd[26346]: input_userauth_request: invalid user bkp [preauth]
Sep 30 18:31:41 nativespace-cdp sshd[26346]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:31:41 nativespace-cdp sshd[26346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:31:42 nativespace-cdp sshd[26353]: Invalid user administrator from 8.209.74.10 port 56768
Sep 30 18:31:42 nativespace-cdp sshd[26353]: input_userauth_request: invalid user administrator [preauth]
Sep 30 18:31:42 nativespace-cdp sshd[26353]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:31:42 nativespace-cdp sshd[26353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:31:43 nativespace-cdp sshd[26346]: Failed password for invalid user bkp from 23.94.194.145 port 46582 ssh2
Sep 30 18:31:43 nativespace-cdp sshd[26346]: Received disconnect from 23.94.194.145 port 46582:11: Bye Bye [preauth]
Sep 30 18:31:43 nativespace-cdp sshd[26346]: Disconnected from 23.94.194.145 port 46582 [preauth]
Sep 30 18:31:44 nativespace-cdp sshd[26353]: Failed password for invalid user administrator from 8.209.74.10 port 56768 ssh2
Sep 30 18:31:44 nativespace-cdp sshd[26353]: Received disconnect from 8.209.74.10 port 56768:11: Bye Bye [preauth]
Sep 30 18:31:44 nativespace-cdp sshd[26353]: Disconnected from 8.209.74.10 port 56768 [preauth]
Sep 30 18:32:06 nativespace-cdp sshd[26426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:32:06 nativespace-cdp sshd[26426]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:32:08 nativespace-cdp sshd[26426]: Failed password for root from 107.175.245.71 port 48660 ssh2
Sep 30 18:32:08 nativespace-cdp sshd[26426]: Received disconnect from 107.175.245.71 port 48660:11: Bye Bye [preauth]
Sep 30 18:32:08 nativespace-cdp sshd[26426]: Disconnected from 107.175.245.71 port 48660 [preauth]
Sep 30 18:32:14 nativespace-cdp sshd[26446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:32:14 nativespace-cdp sshd[26446]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:32:16 nativespace-cdp sshd[26446]: Failed password for root from 23.94.194.145 port 59282 ssh2
Sep 30 18:32:16 nativespace-cdp sshd[26446]: Received disconnect from 23.94.194.145 port 59282:11: Bye Bye [preauth]
Sep 30 18:32:16 nativespace-cdp sshd[26446]: Disconnected from 23.94.194.145 port 59282 [preauth]
Sep 30 18:32:24 nativespace-cdp sshd[26481]: Invalid user nisec from 8.209.74.10 port 36616
Sep 30 18:32:24 nativespace-cdp sshd[26481]: input_userauth_request: invalid user nisec [preauth]
Sep 30 18:32:24 nativespace-cdp sshd[26481]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:32:24 nativespace-cdp sshd[26481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:32:26 nativespace-cdp sshd[26481]: Failed password for invalid user nisec from 8.209.74.10 port 36616 ssh2
Sep 30 18:32:26 nativespace-cdp sshd[26481]: Received disconnect from 8.209.74.10 port 36616:11: Bye Bye [preauth]
Sep 30 18:32:26 nativespace-cdp sshd[26481]: Disconnected from 8.209.74.10 port 36616 [preauth]
Sep 30 18:32:42 nativespace-cdp sshd[26511]: Invalid user bkp from 107.175.245.71 port 48722
Sep 30 18:32:42 nativespace-cdp sshd[26511]: input_userauth_request: invalid user bkp [preauth]
Sep 30 18:32:42 nativespace-cdp sshd[26511]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:32:42 nativespace-cdp sshd[26511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:32:44 nativespace-cdp sshd[26511]: Failed password for invalid user bkp from 107.175.245.71 port 48722 ssh2
Sep 30 18:32:44 nativespace-cdp sshd[26511]: Received disconnect from 107.175.245.71 port 48722:11: Bye Bye [preauth]
Sep 30 18:32:44 nativespace-cdp sshd[26511]: Disconnected from 107.175.245.71 port 48722 [preauth]
Sep 30 18:32:53 nativespace-cdp sshd[26536]: Invalid user admin from 23.94.194.145 port 43750
Sep 30 18:32:53 nativespace-cdp sshd[26536]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:32:53 nativespace-cdp sshd[26536]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:32:53 nativespace-cdp sshd[26536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:32:55 nativespace-cdp sshd[26536]: Failed password for invalid user admin from 23.94.194.145 port 43750 ssh2
Sep 30 18:32:55 nativespace-cdp sshd[26536]: Received disconnect from 23.94.194.145 port 43750:11: Bye Bye [preauth]
Sep 30 18:32:55 nativespace-cdp sshd[26536]: Disconnected from 23.94.194.145 port 43750 [preauth]
Sep 30 18:33:10 nativespace-cdp sshd[26589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:33:10 nativespace-cdp sshd[26589]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:33:12 nativespace-cdp sshd[26589]: Failed password for root from 8.209.74.10 port 60820 ssh2
Sep 30 18:33:12 nativespace-cdp sshd[26589]: Received disconnect from 8.209.74.10 port 60820:11: Bye Bye [preauth]
Sep 30 18:33:12 nativespace-cdp sshd[26589]: Disconnected from 8.209.74.10 port 60820 [preauth]
Sep 30 18:33:31 nativespace-cdp sshd[26629]: Invalid user admin from 23.94.194.145 port 56446
Sep 30 18:33:31 nativespace-cdp sshd[26629]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:33:31 nativespace-cdp sshd[26629]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:33:31 nativespace-cdp sshd[26629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:33:33 nativespace-cdp sshd[26629]: Failed password for invalid user admin from 23.94.194.145 port 56446 ssh2
Sep 30 18:33:38 nativespace-cdp sshd[26629]: Received disconnect from 23.94.194.145 port 56446:11: Bye Bye [preauth]
Sep 30 18:33:38 nativespace-cdp sshd[26629]: Disconnected from 23.94.194.145 port 56446 [preauth]
Sep 30 18:33:55 nativespace-cdp sshd[26688]: Invalid user cacti from 107.175.245.71 port 48846
Sep 30 18:33:55 nativespace-cdp sshd[26688]: input_userauth_request: invalid user cacti [preauth]
Sep 30 18:33:55 nativespace-cdp sshd[26688]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:33:55 nativespace-cdp sshd[26688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:33:56 nativespace-cdp sshd[26691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:33:56 nativespace-cdp sshd[26691]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:33:57 nativespace-cdp sshd[26688]: Failed password for invalid user cacti from 107.175.245.71 port 48846 ssh2
Sep 30 18:33:57 nativespace-cdp sshd[26688]: Received disconnect from 107.175.245.71 port 48846:11: Bye Bye [preauth]
Sep 30 18:33:57 nativespace-cdp sshd[26688]: Disconnected from 107.175.245.71 port 48846 [preauth]
Sep 30 18:33:58 nativespace-cdp sshd[26691]: Failed password for root from 8.209.74.10 port 43596 ssh2
Sep 30 18:33:58 nativespace-cdp sshd[26691]: Received disconnect from 8.209.74.10 port 43596:11: Bye Bye [preauth]
Sep 30 18:33:58 nativespace-cdp sshd[26691]: Disconnected from 8.209.74.10 port 43596 [preauth]
Sep 30 18:34:08 nativespace-cdp sshd[26730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:34:08 nativespace-cdp sshd[26730]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:34:10 nativespace-cdp sshd[26730]: Failed password for root from 23.94.194.145 port 40916 ssh2
Sep 30 18:34:10 nativespace-cdp sshd[26730]: Received disconnect from 23.94.194.145 port 40916:11: Bye Bye [preauth]
Sep 30 18:34:10 nativespace-cdp sshd[26730]: Disconnected from 23.94.194.145 port 40916 [preauth]
Sep 30 18:34:32 nativespace-cdp sshd[26785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:34:32 nativespace-cdp sshd[26785]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:34:34 nativespace-cdp sshd[26785]: Failed password for root from 107.175.245.71 port 48912 ssh2
Sep 30 18:34:34 nativespace-cdp sshd[26785]: Received disconnect from 107.175.245.71 port 48912:11: Bye Bye [preauth]
Sep 30 18:34:34 nativespace-cdp sshd[26785]: Disconnected from 107.175.245.71 port 48912 [preauth]
Sep 30 18:34:42 nativespace-cdp sshd[26808]: Invalid user anand from 8.209.74.10 port 60334
Sep 30 18:34:42 nativespace-cdp sshd[26808]: input_userauth_request: invalid user anand [preauth]
Sep 30 18:34:42 nativespace-cdp sshd[26808]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:34:42 nativespace-cdp sshd[26808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:34:43 nativespace-cdp sshd[26808]: Failed password for invalid user anand from 8.209.74.10 port 60334 ssh2
Sep 30 18:34:43 nativespace-cdp sshd[26808]: Received disconnect from 8.209.74.10 port 60334:11: Bye Bye [preauth]
Sep 30 18:34:43 nativespace-cdp sshd[26808]: Disconnected from 8.209.74.10 port 60334 [preauth]
Sep 30 18:34:47 nativespace-cdp sshd[26818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:34:47 nativespace-cdp sshd[26818]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:34:50 nativespace-cdp sshd[26818]: Failed password for root from 23.94.194.145 port 53618 ssh2
Sep 30 18:34:50 nativespace-cdp sshd[26818]: Received disconnect from 23.94.194.145 port 53618:11: Bye Bye [preauth]
Sep 30 18:34:50 nativespace-cdp sshd[26818]: Disconnected from 23.94.194.145 port 53618 [preauth]
Sep 30 18:35:08 nativespace-cdp sshd[27332]: Invalid user admin from 107.175.245.71 port 48970
Sep 30 18:35:08 nativespace-cdp sshd[27332]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:35:08 nativespace-cdp sshd[27332]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:35:08 nativespace-cdp sshd[27332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:35:09 nativespace-cdp sshd[27332]: Failed password for invalid user admin from 107.175.245.71 port 48970 ssh2
Sep 30 18:35:09 nativespace-cdp sshd[27332]: Received disconnect from 107.175.245.71 port 48970:11: Bye Bye [preauth]
Sep 30 18:35:09 nativespace-cdp sshd[27332]: Disconnected from 107.175.245.71 port 48970 [preauth]
Sep 30 18:35:26 nativespace-cdp sshd[27363]: Invalid user anand from 23.94.194.145 port 38086
Sep 30 18:35:26 nativespace-cdp sshd[27363]: input_userauth_request: invalid user anand [preauth]
Sep 30 18:35:26 nativespace-cdp sshd[27363]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:35:26 nativespace-cdp sshd[27363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:35:27 nativespace-cdp sshd[27363]: Failed password for invalid user anand from 23.94.194.145 port 38086 ssh2
Sep 30 18:35:29 nativespace-cdp sshd[27363]: Received disconnect from 23.94.194.145 port 38086:11: Bye Bye [preauth]
Sep 30 18:35:29 nativespace-cdp sshd[27363]: Disconnected from 23.94.194.145 port 38086 [preauth]
Sep 30 18:35:43 nativespace-cdp sshd[27449]: Invalid user administrator from 107.175.245.71 port 49042
Sep 30 18:35:43 nativespace-cdp sshd[27449]: input_userauth_request: invalid user administrator [preauth]
Sep 30 18:35:43 nativespace-cdp sshd[27449]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:35:43 nativespace-cdp sshd[27449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:35:44 nativespace-cdp sshd[27449]: Failed password for invalid user administrator from 107.175.245.71 port 49042 ssh2
Sep 30 18:35:45 nativespace-cdp sshd[27449]: Received disconnect from 107.175.245.71 port 49042:11: Bye Bye [preauth]
Sep 30 18:35:45 nativespace-cdp sshd[27449]: Disconnected from 107.175.245.71 port 49042 [preauth]
Sep 30 18:36:04 nativespace-cdp sshd[27520]: Invalid user admin from 23.94.194.145 port 50782
Sep 30 18:36:04 nativespace-cdp sshd[27520]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:36:04 nativespace-cdp sshd[27520]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:36:04 nativespace-cdp sshd[27520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:36:05 nativespace-cdp sshd[27520]: Failed password for invalid user admin from 23.94.194.145 port 50782 ssh2
Sep 30 18:36:06 nativespace-cdp sshd[27520]: Received disconnect from 23.94.194.145 port 50782:11: Bye Bye [preauth]
Sep 30 18:36:06 nativespace-cdp sshd[27520]: Disconnected from 23.94.194.145 port 50782 [preauth]
Sep 30 18:36:12 nativespace-cdp sshd[27539]: Invalid user admin from 8.209.74.10 port 50540
Sep 30 18:36:12 nativespace-cdp sshd[27539]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:36:12 nativespace-cdp sshd[27539]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:36:12 nativespace-cdp sshd[27539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:36:14 nativespace-cdp sshd[27539]: Failed password for invalid user admin from 8.209.74.10 port 50540 ssh2
Sep 30 18:36:14 nativespace-cdp sshd[27539]: Received disconnect from 8.209.74.10 port 50540:11: Bye Bye [preauth]
Sep 30 18:36:14 nativespace-cdp sshd[27539]: Disconnected from 8.209.74.10 port 50540 [preauth]
Sep 30 18:36:18 nativespace-cdp sshd[27552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:36:18 nativespace-cdp sshd[27552]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:36:19 nativespace-cdp sshd[27552]: Failed password for root from 107.175.245.71 port 49106 ssh2
Sep 30 18:36:20 nativespace-cdp sshd[27552]: Received disconnect from 107.175.245.71 port 49106:11: Bye Bye [preauth]
Sep 30 18:36:20 nativespace-cdp sshd[27552]: Disconnected from 107.175.245.71 port 49106 [preauth]
Sep 30 18:36:33 nativespace-cdp sshd[27591]: Connection closed by 159.100.136.21 port 59570 [preauth]
Sep 30 18:36:41 nativespace-cdp sshd[27612]: Invalid user basesystem from 23.94.194.145 port 35246
Sep 30 18:36:41 nativespace-cdp sshd[27612]: input_userauth_request: invalid user basesystem [preauth]
Sep 30 18:36:41 nativespace-cdp sshd[27612]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:36:41 nativespace-cdp sshd[27612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:36:43 nativespace-cdp sshd[27612]: Failed password for invalid user basesystem from 23.94.194.145 port 35246 ssh2
Sep 30 18:36:44 nativespace-cdp sshd[27612]: Received disconnect from 23.94.194.145 port 35246:11: Bye Bye [preauth]
Sep 30 18:36:44 nativespace-cdp sshd[27612]: Disconnected from 23.94.194.145 port 35246 [preauth]
Sep 30 18:36:56 nativespace-cdp sshd[27654]: Invalid user admin from 8.209.74.10 port 47634
Sep 30 18:36:56 nativespace-cdp sshd[27654]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:36:56 nativespace-cdp sshd[27654]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:36:56 nativespace-cdp sshd[27654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:36:57 nativespace-cdp sshd[27654]: Failed password for invalid user admin from 8.209.74.10 port 47634 ssh2
Sep 30 18:36:59 nativespace-cdp sshd[27664]: Did not receive identification string from 107.175.245.71 port 49164
Sep 30 18:37:01 nativespace-cdp sshd[27654]: Received disconnect from 8.209.74.10 port 47634:11: Bye Bye [preauth]
Sep 30 18:37:01 nativespace-cdp sshd[27654]: Disconnected from 8.209.74.10 port 47634 [preauth]
Sep 30 18:37:16 nativespace-cdp sshd[27721]: Invalid user admin from 23.94.194.145 port 47942
Sep 30 18:37:16 nativespace-cdp sshd[27721]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:37:16 nativespace-cdp sshd[27721]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:37:16 nativespace-cdp sshd[27721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:37:18 nativespace-cdp sshd[27721]: Failed password for invalid user admin from 23.94.194.145 port 47942 ssh2
Sep 30 18:37:19 nativespace-cdp sshd[27721]: Received disconnect from 23.94.194.145 port 47942:11: Bye Bye [preauth]
Sep 30 18:37:19 nativespace-cdp sshd[27721]: Disconnected from 23.94.194.145 port 47942 [preauth]
Sep 30 18:37:31 nativespace-cdp sshd[27755]: Invalid user admin from 107.175.245.71 port 49226
Sep 30 18:37:31 nativespace-cdp sshd[27755]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:37:31 nativespace-cdp sshd[27755]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:37:31 nativespace-cdp sshd[27755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:37:33 nativespace-cdp sshd[27755]: Failed password for invalid user admin from 107.175.245.71 port 49226 ssh2
Sep 30 18:37:33 nativespace-cdp sshd[27755]: Received disconnect from 107.175.245.71 port 49226:11: Bye Bye [preauth]
Sep 30 18:37:33 nativespace-cdp sshd[27755]: Disconnected from 107.175.245.71 port 49226 [preauth]
Sep 30 18:37:35 nativespace-cdp sshd[27769]: Invalid user adminftp from 8.209.74.10 port 49510
Sep 30 18:37:35 nativespace-cdp sshd[27769]: input_userauth_request: invalid user adminftp [preauth]
Sep 30 18:37:35 nativespace-cdp sshd[27769]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:37:35 nativespace-cdp sshd[27769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:37:37 nativespace-cdp sshd[27769]: Failed password for invalid user adminftp from 8.209.74.10 port 49510 ssh2
Sep 30 18:37:37 nativespace-cdp sshd[27769]: Received disconnect from 8.209.74.10 port 49510:11: Bye Bye [preauth]
Sep 30 18:37:37 nativespace-cdp sshd[27769]: Disconnected from 8.209.74.10 port 49510 [preauth]
Sep 30 18:37:54 nativespace-cdp sshd[27808]: Invalid user adminftp from 23.94.194.145 port 60638
Sep 30 18:37:54 nativespace-cdp sshd[27808]: input_userauth_request: invalid user adminftp [preauth]
Sep 30 18:37:54 nativespace-cdp sshd[27808]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:37:54 nativespace-cdp sshd[27808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:37:56 nativespace-cdp sshd[27808]: Failed password for invalid user adminftp from 23.94.194.145 port 60638 ssh2
Sep 30 18:37:56 nativespace-cdp sshd[27808]: Received disconnect from 23.94.194.145 port 60638:11: Bye Bye [preauth]
Sep 30 18:37:56 nativespace-cdp sshd[27808]: Disconnected from 23.94.194.145 port 60638 [preauth]
Sep 30 18:38:06 nativespace-cdp sshd[27849]: Invalid user admin from 107.175.245.71 port 49288
Sep 30 18:38:06 nativespace-cdp sshd[27849]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:38:06 nativespace-cdp sshd[27849]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:38:06 nativespace-cdp sshd[27849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:38:08 nativespace-cdp sshd[27849]: Failed password for invalid user admin from 107.175.245.71 port 49288 ssh2
Sep 30 18:38:08 nativespace-cdp sshd[27849]: Received disconnect from 107.175.245.71 port 49288:11: Bye Bye [preauth]
Sep 30 18:38:08 nativespace-cdp sshd[27849]: Disconnected from 107.175.245.71 port 49288 [preauth]
Sep 30 18:38:18 nativespace-cdp sshd[28011]: Invalid user bkp from 8.209.74.10 port 59260
Sep 30 18:38:18 nativespace-cdp sshd[28011]: input_userauth_request: invalid user bkp [preauth]
Sep 30 18:38:18 nativespace-cdp sshd[28011]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:38:18 nativespace-cdp sshd[28011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:38:20 nativespace-cdp sshd[28011]: Failed password for invalid user bkp from 8.209.74.10 port 59260 ssh2
Sep 30 18:38:24 nativespace-cdp sshd[28011]: Received disconnect from 8.209.74.10 port 59260:11: Bye Bye [preauth]
Sep 30 18:38:24 nativespace-cdp sshd[28011]: Disconnected from 8.209.74.10 port 59260 [preauth]
Sep 30 18:38:30 nativespace-cdp sshd[28037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:38:30 nativespace-cdp sshd[28037]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:38:31 nativespace-cdp sshd[28037]: Failed password for root from 23.94.194.145 port 45108 ssh2
Sep 30 18:38:31 nativespace-cdp sshd[28037]: Received disconnect from 23.94.194.145 port 45108:11: Bye Bye [preauth]
Sep 30 18:38:31 nativespace-cdp sshd[28037]: Disconnected from 23.94.194.145 port 45108 [preauth]
Sep 30 18:38:45 nativespace-cdp sshd[28067]: Invalid user admin from 107.175.245.71 port 49350
Sep 30 18:38:45 nativespace-cdp sshd[28067]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:38:45 nativespace-cdp sshd[28067]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:38:45 nativespace-cdp sshd[28067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:38:47 nativespace-cdp sshd[28067]: Failed password for invalid user admin from 107.175.245.71 port 49350 ssh2
Sep 30 18:38:47 nativespace-cdp sshd[28067]: Received disconnect from 107.175.245.71 port 49350:11: Bye Bye [preauth]
Sep 30 18:38:47 nativespace-cdp sshd[28067]: Disconnected from 107.175.245.71 port 49350 [preauth]
Sep 30 18:39:05 nativespace-cdp sshd[28138]: Invalid user administrator from 8.209.74.10 port 34456
Sep 30 18:39:05 nativespace-cdp sshd[28138]: input_userauth_request: invalid user administrator [preauth]
Sep 30 18:39:05 nativespace-cdp sshd[28138]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:39:05 nativespace-cdp sshd[28138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:39:08 nativespace-cdp sshd[28138]: Failed password for invalid user administrator from 8.209.74.10 port 34456 ssh2
Sep 30 18:39:08 nativespace-cdp sshd[28138]: Received disconnect from 8.209.74.10 port 34456:11: Bye Bye [preauth]
Sep 30 18:39:08 nativespace-cdp sshd[28138]: Disconnected from 8.209.74.10 port 34456 [preauth]
Sep 30 18:39:10 nativespace-cdp sshd[28148]: Invalid user nisec from 23.94.194.145 port 57806
Sep 30 18:39:10 nativespace-cdp sshd[28148]: input_userauth_request: invalid user nisec [preauth]
Sep 30 18:39:10 nativespace-cdp sshd[28148]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:39:10 nativespace-cdp sshd[28148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:39:12 nativespace-cdp sshd[28148]: Failed password for invalid user nisec from 23.94.194.145 port 57806 ssh2
Sep 30 18:39:12 nativespace-cdp sshd[28148]: Received disconnect from 23.94.194.145 port 57806:11: Bye Bye [preauth]
Sep 30 18:39:12 nativespace-cdp sshd[28148]: Disconnected from 23.94.194.145 port 57806 [preauth]
Sep 30 18:39:24 nativespace-cdp sshd[28187]: Invalid user admin from 107.175.245.71 port 49412
Sep 30 18:39:24 nativespace-cdp sshd[28187]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:39:24 nativespace-cdp sshd[28187]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:39:24 nativespace-cdp sshd[28187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:39:26 nativespace-cdp sshd[28187]: Failed password for invalid user admin from 107.175.245.71 port 49412 ssh2
Sep 30 18:39:26 nativespace-cdp sshd[28187]: Received disconnect from 107.175.245.71 port 49412:11: Bye Bye [preauth]
Sep 30 18:39:26 nativespace-cdp sshd[28187]: Disconnected from 107.175.245.71 port 49412 [preauth]
Sep 30 18:39:48 nativespace-cdp sshd[28249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:39:48 nativespace-cdp sshd[28249]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:39:50 nativespace-cdp sshd[28249]: Failed password for root from 8.209.74.10 port 37566 ssh2
Sep 30 18:39:50 nativespace-cdp sshd[28249]: Received disconnect from 8.209.74.10 port 37566:11: Bye Bye [preauth]
Sep 30 18:39:50 nativespace-cdp sshd[28249]: Disconnected from 8.209.74.10 port 37566 [preauth]
Sep 30 18:39:51 nativespace-cdp sshd[28253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:39:51 nativespace-cdp sshd[28253]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:39:53 nativespace-cdp sshd[28253]: Failed password for root from 23.94.194.145 port 42280 ssh2
Sep 30 18:39:53 nativespace-cdp sshd[28253]: Received disconnect from 23.94.194.145 port 42280:11: Bye Bye [preauth]
Sep 30 18:39:53 nativespace-cdp sshd[28253]: Disconnected from 23.94.194.145 port 42280 [preauth]
Sep 30 18:40:03 nativespace-cdp sshd[28485]: Invalid user anand from 107.175.245.71 port 49472
Sep 30 18:40:03 nativespace-cdp sshd[28485]: input_userauth_request: invalid user anand [preauth]
Sep 30 18:40:03 nativespace-cdp sshd[28485]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:40:03 nativespace-cdp sshd[28485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:40:05 nativespace-cdp sshd[28485]: Failed password for invalid user anand from 107.175.245.71 port 49472 ssh2
Sep 30 18:40:08 nativespace-cdp sshd[28485]: Received disconnect from 107.175.245.71 port 49472:11: Bye Bye [preauth]
Sep 30 18:40:08 nativespace-cdp sshd[28485]: Disconnected from 107.175.245.71 port 49472 [preauth]
Sep 30 18:40:31 nativespace-cdp sshd[28592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:40:31 nativespace-cdp sshd[28592]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:40:32 nativespace-cdp sshd[28604]: Invalid user admin from 8.209.74.10 port 38126
Sep 30 18:40:32 nativespace-cdp sshd[28604]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:40:32 nativespace-cdp sshd[28604]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:40:32 nativespace-cdp sshd[28604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:40:33 nativespace-cdp sshd[28592]: Failed password for root from 23.94.194.145 port 54984 ssh2
Sep 30 18:40:33 nativespace-cdp sshd[28592]: Received disconnect from 23.94.194.145 port 54984:11: Bye Bye [preauth]
Sep 30 18:40:33 nativespace-cdp sshd[28592]: Disconnected from 23.94.194.145 port 54984 [preauth]
Sep 30 18:40:35 nativespace-cdp sshd[28604]: Failed password for invalid user admin from 8.209.74.10 port 38126 ssh2
Sep 30 18:40:35 nativespace-cdp sshd[28604]: Received disconnect from 8.209.74.10 port 38126:11: Bye Bye [preauth]
Sep 30 18:40:35 nativespace-cdp sshd[28604]: Disconnected from 8.209.74.10 port 38126 [preauth]
Sep 30 18:40:42 nativespace-cdp sshd[28624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:40:42 nativespace-cdp sshd[28624]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:40:44 nativespace-cdp sshd[28624]: Failed password for root from 107.175.245.71 port 49532 ssh2
Sep 30 18:40:44 nativespace-cdp sshd[28624]: Received disconnect from 107.175.245.71 port 49532:11: Bye Bye [preauth]
Sep 30 18:40:44 nativespace-cdp sshd[28624]: Disconnected from 107.175.245.71 port 49532 [preauth]
Sep 30 18:41:11 nativespace-cdp sshd[28692]: Invalid user debianuser from 23.94.194.145 port 39450
Sep 30 18:41:11 nativespace-cdp sshd[28692]: input_userauth_request: invalid user debianuser [preauth]
Sep 30 18:41:11 nativespace-cdp sshd[28692]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:41:11 nativespace-cdp sshd[28692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:41:13 nativespace-cdp sshd[28692]: Failed password for invalid user debianuser from 23.94.194.145 port 39450 ssh2
Sep 30 18:41:13 nativespace-cdp sshd[28692]: Received disconnect from 23.94.194.145 port 39450:11: Bye Bye [preauth]
Sep 30 18:41:13 nativespace-cdp sshd[28692]: Disconnected from 23.94.194.145 port 39450 [preauth]
Sep 30 18:41:17 nativespace-cdp sshd[28714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:41:17 nativespace-cdp sshd[28714]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:41:18 nativespace-cdp sshd[28712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:41:18 nativespace-cdp sshd[28712]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:41:19 nativespace-cdp sshd[28714]: Failed password for root from 8.209.74.10 port 54598 ssh2
Sep 30 18:41:19 nativespace-cdp sshd[28714]: Received disconnect from 8.209.74.10 port 54598:11: Bye Bye [preauth]
Sep 30 18:41:19 nativespace-cdp sshd[28714]: Disconnected from 8.209.74.10 port 54598 [preauth]
Sep 30 18:41:19 nativespace-cdp sshd[28712]: Failed password for root from 107.175.245.71 port 49594 ssh2
Sep 30 18:41:19 nativespace-cdp sshd[28712]: Received disconnect from 107.175.245.71 port 49594:11: Bye Bye [preauth]
Sep 30 18:41:19 nativespace-cdp sshd[28712]: Disconnected from 107.175.245.71 port 49594 [preauth]
Sep 30 18:41:33 nativespace-cdp sshd[28742]: Connection closed by 159.100.136.21 port 41024 [preauth]
Sep 30 18:41:48 nativespace-cdp sshd[28778]: Invalid user admin from 23.94.194.145 port 52148
Sep 30 18:41:48 nativespace-cdp sshd[28778]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:41:48 nativespace-cdp sshd[28778]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:41:48 nativespace-cdp sshd[28778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:41:50 nativespace-cdp sshd[28778]: Failed password for invalid user admin from 23.94.194.145 port 52148 ssh2
Sep 30 18:41:50 nativespace-cdp sshd[28778]: Received disconnect from 23.94.194.145 port 52148:11: Bye Bye [preauth]
Sep 30 18:41:50 nativespace-cdp sshd[28778]: Disconnected from 23.94.194.145 port 52148 [preauth]
Sep 30 18:41:52 nativespace-cdp sshd[28790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:41:52 nativespace-cdp sshd[28790]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:41:54 nativespace-cdp sshd[28790]: Failed password for root from 107.175.245.71 port 49656 ssh2
Sep 30 18:41:54 nativespace-cdp sshd[28790]: Received disconnect from 107.175.245.71 port 49656:11: Bye Bye [preauth]
Sep 30 18:41:54 nativespace-cdp sshd[28790]: Disconnected from 107.175.245.71 port 49656 [preauth]
Sep 30 18:42:26 nativespace-cdp sshd[28881]: Invalid user admin from 23.94.194.145 port 36614
Sep 30 18:42:26 nativespace-cdp sshd[28881]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:42:26 nativespace-cdp sshd[28881]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:42:26 nativespace-cdp sshd[28881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:42:26 nativespace-cdp sshd[28883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=mysql
Sep 30 18:42:26 nativespace-cdp sshd[28883]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "mysql"
Sep 30 18:42:28 nativespace-cdp sshd[28881]: Failed password for invalid user admin from 23.94.194.145 port 36614 ssh2
Sep 30 18:42:28 nativespace-cdp sshd[28881]: Received disconnect from 23.94.194.145 port 36614:11: Bye Bye [preauth]
Sep 30 18:42:28 nativespace-cdp sshd[28881]: Disconnected from 23.94.194.145 port 36614 [preauth]
Sep 30 18:42:28 nativespace-cdp sshd[28883]: Failed password for mysql from 107.175.245.71 port 49720 ssh2
Sep 30 18:42:28 nativespace-cdp sshd[28883]: Received disconnect from 107.175.245.71 port 49720:11: Bye Bye [preauth]
Sep 30 18:42:28 nativespace-cdp sshd[28883]: Disconnected from 107.175.245.71 port 49720 [preauth]
Sep 30 18:42:43 nativespace-cdp sshd[28930]: Invalid user admin from 8.209.74.10 port 48650
Sep 30 18:42:43 nativespace-cdp sshd[28930]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:42:43 nativespace-cdp sshd[28930]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:42:43 nativespace-cdp sshd[28930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:42:44 nativespace-cdp sshd[28930]: Failed password for invalid user admin from 8.209.74.10 port 48650 ssh2
Sep 30 18:42:52 nativespace-cdp sshd[28930]: Received disconnect from 8.209.74.10 port 48650:11: Bye Bye [preauth]
Sep 30 18:42:52 nativespace-cdp sshd[28930]: Disconnected from 8.209.74.10 port 48650 [preauth]
Sep 30 18:43:00 nativespace-cdp sshd[28958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:43:00 nativespace-cdp sshd[28958]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:43:02 nativespace-cdp sshd[28958]: Failed password for root from 107.175.245.71 port 49778 ssh2
Sep 30 18:43:02 nativespace-cdp sshd[28964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:43:02 nativespace-cdp sshd[28964]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:43:02 nativespace-cdp sshd[28958]: Received disconnect from 107.175.245.71 port 49778:11: Bye Bye [preauth]
Sep 30 18:43:02 nativespace-cdp sshd[28958]: Disconnected from 107.175.245.71 port 49778 [preauth]
Sep 30 18:43:04 nativespace-cdp sshd[28964]: Failed password for root from 23.94.194.145 port 49314 ssh2
Sep 30 18:43:04 nativespace-cdp sshd[28964]: Received disconnect from 23.94.194.145 port 49314:11: Bye Bye [preauth]
Sep 30 18:43:04 nativespace-cdp sshd[28964]: Disconnected from 23.94.194.145 port 49314 [preauth]
Sep 30 18:43:25 nativespace-cdp sshd[29086]: Invalid user admin from 8.209.74.10 port 34498
Sep 30 18:43:25 nativespace-cdp sshd[29086]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:43:25 nativespace-cdp sshd[29086]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:43:25 nativespace-cdp sshd[29086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:43:27 nativespace-cdp sshd[29086]: Failed password for invalid user admin from 8.209.74.10 port 34498 ssh2
Sep 30 18:43:31 nativespace-cdp sshd[29086]: Received disconnect from 8.209.74.10 port 34498:11: Bye Bye [preauth]
Sep 30 18:43:31 nativespace-cdp sshd[29086]: Disconnected from 8.209.74.10 port 34498 [preauth]
Sep 30 18:43:34 nativespace-cdp sshd[29103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:43:34 nativespace-cdp sshd[29103]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:43:36 nativespace-cdp sshd[29103]: Failed password for root from 107.175.245.71 port 49842 ssh2
Sep 30 18:43:37 nativespace-cdp sshd[29103]: Received disconnect from 107.175.245.71 port 49842:11: Bye Bye [preauth]
Sep 30 18:43:37 nativespace-cdp sshd[29103]: Disconnected from 107.175.245.71 port 49842 [preauth]
Sep 30 18:43:37 nativespace-cdp sshd[29111]: Invalid user debian from 23.94.194.145 port 33778
Sep 30 18:43:37 nativespace-cdp sshd[29111]: input_userauth_request: invalid user debian [preauth]
Sep 30 18:43:37 nativespace-cdp sshd[29111]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:43:37 nativespace-cdp sshd[29111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:43:39 nativespace-cdp sshd[29111]: Failed password for invalid user debian from 23.94.194.145 port 33778 ssh2
Sep 30 18:43:39 nativespace-cdp sshd[29111]: Received disconnect from 23.94.194.145 port 33778:11: Bye Bye [preauth]
Sep 30 18:43:39 nativespace-cdp sshd[29111]: Disconnected from 23.94.194.145 port 33778 [preauth]
Sep 30 18:44:07 nativespace-cdp sshd[29204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:44:07 nativespace-cdp sshd[29204]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:44:08 nativespace-cdp sshd[29206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:44:08 nativespace-cdp sshd[29206]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:44:09 nativespace-cdp sshd[29204]: Failed password for root from 8.209.74.10 port 54358 ssh2
Sep 30 18:44:10 nativespace-cdp sshd[29206]: Failed password for root from 107.175.245.71 port 49908 ssh2
Sep 30 18:44:12 nativespace-cdp sshd[29204]: Received disconnect from 8.209.74.10 port 54358:11: Bye Bye [preauth]
Sep 30 18:44:12 nativespace-cdp sshd[29204]: Disconnected from 8.209.74.10 port 54358 [preauth]
Sep 30 18:44:13 nativespace-cdp sshd[29206]: Received disconnect from 107.175.245.71 port 49908:11: Bye Bye [preauth]
Sep 30 18:44:13 nativespace-cdp sshd[29206]: Disconnected from 107.175.245.71 port 49908 [preauth]
Sep 30 18:44:14 nativespace-cdp sshd[29222]: Invalid user testuser from 23.94.194.145 port 46474
Sep 30 18:44:14 nativespace-cdp sshd[29222]: input_userauth_request: invalid user testuser [preauth]
Sep 30 18:44:14 nativespace-cdp sshd[29222]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:44:14 nativespace-cdp sshd[29222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:44:16 nativespace-cdp sshd[29222]: Failed password for invalid user testuser from 23.94.194.145 port 46474 ssh2
Sep 30 18:44:16 nativespace-cdp sshd[29222]: Received disconnect from 23.94.194.145 port 46474:11: Bye Bye [preauth]
Sep 30 18:44:16 nativespace-cdp sshd[29222]: Disconnected from 23.94.194.145 port 46474 [preauth]
Sep 30 18:44:43 nativespace-cdp sshd[29285]: Invalid user admin from 107.175.245.71 port 49970
Sep 30 18:44:43 nativespace-cdp sshd[29285]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:44:43 nativespace-cdp sshd[29285]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:44:43 nativespace-cdp sshd[29285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:44:45 nativespace-cdp sshd[29285]: Failed password for invalid user admin from 107.175.245.71 port 49970 ssh2
Sep 30 18:44:45 nativespace-cdp sshd[29285]: Received disconnect from 107.175.245.71 port 49970:11: Bye Bye [preauth]
Sep 30 18:44:45 nativespace-cdp sshd[29285]: Disconnected from 107.175.245.71 port 49970 [preauth]
Sep 30 18:44:54 nativespace-cdp sshd[29304]: Invalid user testuser from 8.209.74.10 port 40582
Sep 30 18:44:54 nativespace-cdp sshd[29304]: input_userauth_request: invalid user testuser [preauth]
Sep 30 18:44:54 nativespace-cdp sshd[29304]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:44:54 nativespace-cdp sshd[29304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:44:56 nativespace-cdp sshd[29304]: Failed password for invalid user testuser from 8.209.74.10 port 40582 ssh2
Sep 30 18:44:56 nativespace-cdp sshd[29304]: Received disconnect from 8.209.74.10 port 40582:11: Bye Bye [preauth]
Sep 30 18:44:56 nativespace-cdp sshd[29304]: Disconnected from 8.209.74.10 port 40582 [preauth]
Sep 30 18:45:24 nativespace-cdp sshd[29580]: Invalid user admin from 107.175.245.71 port 50028
Sep 30 18:45:24 nativespace-cdp sshd[29580]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:45:24 nativespace-cdp sshd[29580]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:45:24 nativespace-cdp sshd[29580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:45:26 nativespace-cdp sshd[29580]: Failed password for invalid user admin from 107.175.245.71 port 50028 ssh2
Sep 30 18:45:26 nativespace-cdp sshd[29580]: Received disconnect from 107.175.245.71 port 50028:11: Bye Bye [preauth]
Sep 30 18:45:26 nativespace-cdp sshd[29580]: Disconnected from 107.175.245.71 port 50028 [preauth]
Sep 30 18:45:26 nativespace-cdp sshd[29586]: Invalid user jenkins from 23.94.194.145 port 43636
Sep 30 18:45:26 nativespace-cdp sshd[29586]: input_userauth_request: invalid user jenkins [preauth]
Sep 30 18:45:26 nativespace-cdp sshd[29586]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:45:26 nativespace-cdp sshd[29586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:45:28 nativespace-cdp sshd[29586]: Failed password for invalid user jenkins from 23.94.194.145 port 43636 ssh2
Sep 30 18:45:31 nativespace-cdp sshd[29586]: Received disconnect from 23.94.194.145 port 43636:11: Bye Bye [preauth]
Sep 30 18:45:31 nativespace-cdp sshd[29586]: Disconnected from 23.94.194.145 port 43636 [preauth]
Sep 30 18:45:34 nativespace-cdp sshd[29602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:45:34 nativespace-cdp sshd[29602]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:45:36 nativespace-cdp sshd[29602]: Failed password for root from 8.209.74.10 port 36614 ssh2
Sep 30 18:45:36 nativespace-cdp sshd[29602]: Received disconnect from 8.209.74.10 port 36614:11: Bye Bye [preauth]
Sep 30 18:45:36 nativespace-cdp sshd[29602]: Disconnected from 8.209.74.10 port 36614 [preauth]
Sep 30 18:45:57 nativespace-cdp sshd[29695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:45:57 nativespace-cdp sshd[29695]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:45:59 nativespace-cdp sshd[29695]: Failed password for root from 107.175.245.71 port 50088 ssh2
Sep 30 18:45:59 nativespace-cdp sshd[29695]: Received disconnect from 107.175.245.71 port 50088:11: Bye Bye [preauth]
Sep 30 18:45:59 nativespace-cdp sshd[29695]: Disconnected from 107.175.245.71 port 50088 [preauth]
Sep 30 18:46:04 nativespace-cdp sshd[29732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=david
Sep 30 18:46:06 nativespace-cdp sshd[29732]: Failed password for david from 23.94.194.145 port 56330 ssh2
Sep 30 18:46:11 nativespace-cdp sshd[29732]: Received disconnect from 23.94.194.145 port 56330:11: Bye Bye [preauth]
Sep 30 18:46:11 nativespace-cdp sshd[29732]: Disconnected from 23.94.194.145 port 56330 [preauth]
Sep 30 18:46:19 nativespace-cdp sshd[29764]: Invalid user jenkins from 8.209.74.10 port 54816
Sep 30 18:46:19 nativespace-cdp sshd[29764]: input_userauth_request: invalid user jenkins [preauth]
Sep 30 18:46:19 nativespace-cdp sshd[29764]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:46:19 nativespace-cdp sshd[29764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:46:21 nativespace-cdp sshd[29764]: Failed password for invalid user jenkins from 8.209.74.10 port 54816 ssh2
Sep 30 18:46:22 nativespace-cdp sshd[29764]: Received disconnect from 8.209.74.10 port 54816:11: Bye Bye [preauth]
Sep 30 18:46:22 nativespace-cdp sshd[29764]: Disconnected from 8.209.74.10 port 54816 [preauth]
Sep 30 18:46:33 nativespace-cdp sshd[29805]: Connection closed by 159.100.136.21 port 50998 [preauth]
Sep 30 18:46:36 nativespace-cdp sshd[29818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:46:36 nativespace-cdp sshd[29818]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:46:38 nativespace-cdp sshd[29818]: Failed password for root from 107.175.245.71 port 50146 ssh2
Sep 30 18:46:38 nativespace-cdp sshd[29818]: Received disconnect from 107.175.245.71 port 50146:11: Bye Bye [preauth]
Sep 30 18:46:38 nativespace-cdp sshd[29818]: Disconnected from 107.175.245.71 port 50146 [preauth]
Sep 30 18:46:46 nativespace-cdp sshd[29847]: Invalid user administrator from 23.94.194.145 port 40802
Sep 30 18:46:46 nativespace-cdp sshd[29847]: input_userauth_request: invalid user administrator [preauth]
Sep 30 18:46:46 nativespace-cdp sshd[29847]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:46:46 nativespace-cdp sshd[29847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:46:48 nativespace-cdp sshd[29847]: Failed password for invalid user administrator from 23.94.194.145 port 40802 ssh2
Sep 30 18:46:48 nativespace-cdp sshd[29847]: Received disconnect from 23.94.194.145 port 40802:11: Bye Bye [preauth]
Sep 30 18:46:48 nativespace-cdp sshd[29847]: Disconnected from 23.94.194.145 port 40802 [preauth]
Sep 30 18:47:02 nativespace-cdp sshd[29969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:47:02 nativespace-cdp sshd[29969]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:47:04 nativespace-cdp sshd[29969]: Failed password for root from 8.209.74.10 port 36800 ssh2
Sep 30 18:47:04 nativespace-cdp sshd[29969]: Received disconnect from 8.209.74.10 port 36800:11: Bye Bye [preauth]
Sep 30 18:47:04 nativespace-cdp sshd[29969]: Disconnected from 8.209.74.10 port 36800 [preauth]
Sep 30 18:47:12 nativespace-cdp sshd[30041]: Invalid user chris from 107.175.245.71 port 50212
Sep 30 18:47:12 nativespace-cdp sshd[30041]: input_userauth_request: invalid user chris [preauth]
Sep 30 18:47:12 nativespace-cdp sshd[30041]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:47:12 nativespace-cdp sshd[30041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:47:15 nativespace-cdp sshd[30041]: Failed password for invalid user chris from 107.175.245.71 port 50212 ssh2
Sep 30 18:47:15 nativespace-cdp sshd[30041]: Received disconnect from 107.175.245.71 port 50212:11: Bye Bye [preauth]
Sep 30 18:47:15 nativespace-cdp sshd[30041]: Disconnected from 107.175.245.71 port 50212 [preauth]
Sep 30 18:47:25 nativespace-cdp sshd[30072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:47:25 nativespace-cdp sshd[30072]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:47:26 nativespace-cdp sshd[30072]: Failed password for root from 23.94.194.145 port 53504 ssh2
Sep 30 18:47:26 nativespace-cdp sshd[30072]: Received disconnect from 23.94.194.145 port 53504:11: Bye Bye [preauth]
Sep 30 18:47:26 nativespace-cdp sshd[30072]: Disconnected from 23.94.194.145 port 53504 [preauth]
Sep 30 18:47:45 nativespace-cdp sshd[30132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=david
Sep 30 18:47:46 nativespace-cdp sshd[30132]: Failed password for david from 8.209.74.10 port 40768 ssh2
Sep 30 18:47:46 nativespace-cdp sshd[30132]: Received disconnect from 8.209.74.10 port 40768:11: Bye Bye [preauth]
Sep 30 18:47:46 nativespace-cdp sshd[30132]: Disconnected from 8.209.74.10 port 40768 [preauth]
Sep 30 18:47:48 nativespace-cdp sshd[30138]: Invalid user debianuser from 107.175.245.71 port 50270
Sep 30 18:47:48 nativespace-cdp sshd[30138]: input_userauth_request: invalid user debianuser [preauth]
Sep 30 18:47:48 nativespace-cdp sshd[30138]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:47:48 nativespace-cdp sshd[30138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:47:49 nativespace-cdp sshd[30138]: Failed password for invalid user debianuser from 107.175.245.71 port 50270 ssh2
Sep 30 18:47:50 nativespace-cdp sshd[30138]: Received disconnect from 107.175.245.71 port 50270:11: Bye Bye [preauth]
Sep 30 18:47:50 nativespace-cdp sshd[30138]: Disconnected from 107.175.245.71 port 50270 [preauth]
Sep 30 18:48:02 nativespace-cdp sshd[30177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:48:02 nativespace-cdp sshd[30177]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:48:04 nativespace-cdp sshd[30177]: Failed password for root from 23.94.194.145 port 37972 ssh2
Sep 30 18:48:04 nativespace-cdp sshd[30177]: Received disconnect from 23.94.194.145 port 37972:11: Bye Bye [preauth]
Sep 30 18:48:04 nativespace-cdp sshd[30177]: Disconnected from 23.94.194.145 port 37972 [preauth]
Sep 30 18:48:23 nativespace-cdp sshd[30238]: Invalid user administrator from 107.175.245.71 port 50328
Sep 30 18:48:23 nativespace-cdp sshd[30238]: input_userauth_request: invalid user administrator [preauth]
Sep 30 18:48:23 nativespace-cdp sshd[30238]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:48:23 nativespace-cdp sshd[30238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:48:25 nativespace-cdp sshd[30238]: Failed password for invalid user administrator from 107.175.245.71 port 50328 ssh2
Sep 30 18:48:25 nativespace-cdp sshd[30238]: Received disconnect from 107.175.245.71 port 50328:11: Bye Bye [preauth]
Sep 30 18:48:25 nativespace-cdp sshd[30238]: Disconnected from 107.175.245.71 port 50328 [preauth]
Sep 30 18:48:28 nativespace-cdp sshd[30247]: Invalid user admin from 8.209.74.10 port 59708
Sep 30 18:48:28 nativespace-cdp sshd[30247]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:48:28 nativespace-cdp sshd[30247]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:48:28 nativespace-cdp sshd[30247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:48:30 nativespace-cdp sshd[30247]: Failed password for invalid user admin from 8.209.74.10 port 59708 ssh2
Sep 30 18:48:30 nativespace-cdp sshd[30247]: Received disconnect from 8.209.74.10 port 59708:11: Bye Bye [preauth]
Sep 30 18:48:30 nativespace-cdp sshd[30247]: Disconnected from 8.209.74.10 port 59708 [preauth]
Sep 30 18:48:49 nativespace-cdp sshd[30280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:48:49 nativespace-cdp sshd[30280]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:48:51 nativespace-cdp sshd[30280]: Failed password for root from 23.94.194.145 port 50672 ssh2
Sep 30 18:48:51 nativespace-cdp sshd[30280]: Received disconnect from 23.94.194.145 port 50672:11: Bye Bye [preauth]
Sep 30 18:48:51 nativespace-cdp sshd[30280]: Disconnected from 23.94.194.145 port 50672 [preauth]
Sep 30 18:48:59 nativespace-cdp sshd[30332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:48:59 nativespace-cdp sshd[30332]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:49:00 nativespace-cdp sshd[30332]: Failed password for root from 107.175.245.71 port 50390 ssh2
Sep 30 18:49:00 nativespace-cdp sshd[30332]: Received disconnect from 107.175.245.71 port 50390:11: Bye Bye [preauth]
Sep 30 18:49:00 nativespace-cdp sshd[30332]: Disconnected from 107.175.245.71 port 50390 [preauth]
Sep 30 18:49:09 nativespace-cdp sshd[30370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=david
Sep 30 18:49:10 nativespace-cdp sshd[30370]: Failed password for david from 8.209.74.10 port 51332 ssh2
Sep 30 18:49:10 nativespace-cdp sshd[30370]: Received disconnect from 8.209.74.10 port 51332:11: Bye Bye [preauth]
Sep 30 18:49:10 nativespace-cdp sshd[30370]: Disconnected from 8.209.74.10 port 51332 [preauth]
Sep 30 18:49:18 nativespace-cdp sshd[30389]: Invalid user administrator from 23.94.194.145 port 35138
Sep 30 18:49:18 nativespace-cdp sshd[30389]: input_userauth_request: invalid user administrator [preauth]
Sep 30 18:49:18 nativespace-cdp sshd[30389]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:49:18 nativespace-cdp sshd[30389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:49:20 nativespace-cdp sshd[30389]: Failed password for invalid user administrator from 23.94.194.145 port 35138 ssh2
Sep 30 18:49:20 nativespace-cdp sshd[30389]: Received disconnect from 23.94.194.145 port 35138:11: Bye Bye [preauth]
Sep 30 18:49:20 nativespace-cdp sshd[30389]: Disconnected from 23.94.194.145 port 35138 [preauth]
Sep 30 18:49:34 nativespace-cdp sshd[30430]: Invalid user nisec from 107.175.245.71 port 50452
Sep 30 18:49:34 nativespace-cdp sshd[30430]: input_userauth_request: invalid user nisec [preauth]
Sep 30 18:49:34 nativespace-cdp sshd[30430]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:49:34 nativespace-cdp sshd[30430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71
Sep 30 18:49:36 nativespace-cdp sshd[30430]: Failed password for invalid user nisec from 107.175.245.71 port 50452 ssh2
Sep 30 18:49:36 nativespace-cdp sshd[30430]: Received disconnect from 107.175.245.71 port 50452:11: Bye Bye [preauth]
Sep 30 18:49:36 nativespace-cdp sshd[30430]: Disconnected from 107.175.245.71 port 50452 [preauth]
Sep 30 18:49:51 nativespace-cdp sshd[30618]: Invalid user daniel from 8.209.74.10 port 51042
Sep 30 18:49:51 nativespace-cdp sshd[30618]: input_userauth_request: invalid user daniel [preauth]
Sep 30 18:49:51 nativespace-cdp sshd[30618]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:49:51 nativespace-cdp sshd[30618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:49:52 nativespace-cdp sshd[30618]: Failed password for invalid user daniel from 8.209.74.10 port 51042 ssh2
Sep 30 18:49:52 nativespace-cdp sshd[30618]: Received disconnect from 8.209.74.10 port 51042:11: Bye Bye [preauth]
Sep 30 18:49:52 nativespace-cdp sshd[30618]: Disconnected from 8.209.74.10 port 51042 [preauth]
Sep 30 18:49:54 nativespace-cdp sshd[30683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145  user=root
Sep 30 18:49:54 nativespace-cdp sshd[30683]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:49:56 nativespace-cdp sshd[30683]: Failed password for root from 23.94.194.145 port 47842 ssh2
Sep 30 18:49:56 nativespace-cdp sshd[30683]: Received disconnect from 23.94.194.145 port 47842:11: Bye Bye [preauth]
Sep 30 18:49:56 nativespace-cdp sshd[30683]: Disconnected from 23.94.194.145 port 47842 [preauth]
Sep 30 18:50:09 nativespace-cdp sshd[30985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.245.71  user=root
Sep 30 18:50:09 nativespace-cdp sshd[30985]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:50:11 nativespace-cdp sshd[30985]: Failed password for root from 107.175.245.71 port 50510 ssh2
Sep 30 18:50:13 nativespace-cdp sshd[30985]: Received disconnect from 107.175.245.71 port 50510:11: Bye Bye [preauth]
Sep 30 18:50:13 nativespace-cdp sshd[30985]: Disconnected from 107.175.245.71 port 50510 [preauth]
Sep 30 18:50:32 nativespace-cdp sshd[31121]: Invalid user daniel from 23.94.194.145 port 60538
Sep 30 18:50:32 nativespace-cdp sshd[31121]: input_userauth_request: invalid user daniel [preauth]
Sep 30 18:50:32 nativespace-cdp sshd[31121]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:50:32 nativespace-cdp sshd[31121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:50:32 nativespace-cdp sshd[31124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:50:32 nativespace-cdp sshd[31124]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:50:34 nativespace-cdp sshd[31121]: Failed password for invalid user daniel from 23.94.194.145 port 60538 ssh2
Sep 30 18:50:34 nativespace-cdp sshd[31121]: Received disconnect from 23.94.194.145 port 60538:11: Bye Bye [preauth]
Sep 30 18:50:34 nativespace-cdp sshd[31121]: Disconnected from 23.94.194.145 port 60538 [preauth]
Sep 30 18:50:34 nativespace-cdp sshd[31124]: Failed password for root from 8.209.74.10 port 40662 ssh2
Sep 30 18:50:34 nativespace-cdp sshd[31124]: Received disconnect from 8.209.74.10 port 40662:11: Bye Bye [preauth]
Sep 30 18:50:34 nativespace-cdp sshd[31124]: Disconnected from 8.209.74.10 port 40662 [preauth]
Sep 30 18:51:09 nativespace-cdp sshd[31219]: Invalid user admin from 23.94.194.145 port 45002
Sep 30 18:51:09 nativespace-cdp sshd[31219]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:51:09 nativespace-cdp sshd[31219]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:51:09 nativespace-cdp sshd[31219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.194.145
Sep 30 18:51:11 nativespace-cdp sshd[31219]: Failed password for invalid user admin from 23.94.194.145 port 45002 ssh2
Sep 30 18:51:11 nativespace-cdp sshd[31219]: Received disconnect from 23.94.194.145 port 45002:11: Bye Bye [preauth]
Sep 30 18:51:11 nativespace-cdp sshd[31219]: Disconnected from 23.94.194.145 port 45002 [preauth]
Sep 30 18:51:14 nativespace-cdp sshd[31231]: Invalid user admin from 8.209.74.10 port 44576
Sep 30 18:51:14 nativespace-cdp sshd[31231]: input_userauth_request: invalid user admin [preauth]
Sep 30 18:51:14 nativespace-cdp sshd[31231]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:51:14 nativespace-cdp sshd[31231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:51:17 nativespace-cdp sshd[31231]: Failed password for invalid user admin from 8.209.74.10 port 44576 ssh2
Sep 30 18:51:17 nativespace-cdp sshd[31231]: Received disconnect from 8.209.74.10 port 44576:11: Bye Bye [preauth]
Sep 30 18:51:17 nativespace-cdp sshd[31231]: Disconnected from 8.209.74.10 port 44576 [preauth]
Sep 30 18:51:33 nativespace-cdp sshd[31269]: Connection closed by 159.100.136.21 port 60698 [preauth]
Sep 30 18:52:01 nativespace-cdp sshd[31333]: Invalid user debian from 8.209.74.10 port 40148
Sep 30 18:52:01 nativespace-cdp sshd[31333]: input_userauth_request: invalid user debian [preauth]
Sep 30 18:52:01 nativespace-cdp sshd[31333]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:52:01 nativespace-cdp sshd[31333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:52:03 nativespace-cdp sshd[31333]: Failed password for invalid user debian from 8.209.74.10 port 40148 ssh2
Sep 30 18:52:04 nativespace-cdp sshd[31333]: Received disconnect from 8.209.74.10 port 40148:11: Bye Bye [preauth]
Sep 30 18:52:04 nativespace-cdp sshd[31333]: Disconnected from 8.209.74.10 port 40148 [preauth]
Sep 30 18:52:44 nativespace-cdp sshd[31438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10  user=root
Sep 30 18:52:44 nativespace-cdp sshd[31438]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 18:52:47 nativespace-cdp sshd[31438]: Failed password for root from 8.209.74.10 port 48352 ssh2
Sep 30 18:52:47 nativespace-cdp sshd[31438]: Received disconnect from 8.209.74.10 port 48352:11: Bye Bye [preauth]
Sep 30 18:52:47 nativespace-cdp sshd[31438]: Disconnected from 8.209.74.10 port 48352 [preauth]
Sep 30 18:53:30 nativespace-cdp sshd[31538]: Invalid user chris from 8.209.74.10 port 57462
Sep 30 18:53:30 nativespace-cdp sshd[31538]: input_userauth_request: invalid user chris [preauth]
Sep 30 18:53:30 nativespace-cdp sshd[31538]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:53:30 nativespace-cdp sshd[31538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:53:32 nativespace-cdp sshd[31538]: Failed password for invalid user chris from 8.209.74.10 port 57462 ssh2
Sep 30 18:53:32 nativespace-cdp sshd[31538]: Received disconnect from 8.209.74.10 port 57462:11: Bye Bye [preauth]
Sep 30 18:53:32 nativespace-cdp sshd[31538]: Disconnected from 8.209.74.10 port 57462 [preauth]
Sep 30 18:54:10 nativespace-cdp sshd[31635]: Invalid user debianuser from 8.209.74.10 port 48478
Sep 30 18:54:10 nativespace-cdp sshd[31635]: input_userauth_request: invalid user debianuser [preauth]
Sep 30 18:54:10 nativespace-cdp sshd[31635]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 18:54:10 nativespace-cdp sshd[31635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.74.10
Sep 30 18:54:12 nativespace-cdp sshd[31635]: Failed password for invalid user debianuser from 8.209.74.10 port 48478 ssh2
Sep 30 18:54:12 nativespace-cdp sshd[31635]: Received disconnect from 8.209.74.10 port 48478:11: Bye Bye [preauth]
Sep 30 18:54:12 nativespace-cdp sshd[31635]: Disconnected from 8.209.74.10 port 48478 [preauth]
Sep 30 18:56:33 nativespace-cdp sshd[32249]: Connection closed by 159.100.136.21 port 42602 [preauth]
Sep 30 19:01:33 nativespace-cdp sshd[1039]: Connection closed by 159.100.136.21 port 52280 [preauth]
Sep 30 19:06:34 nativespace-cdp sshd[2090]: Connection closed by 159.100.136.21 port 34078 [preauth]
Sep 30 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:43 nativespace-cdp sudo[2849]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:43 nativespace-cdp sudo[2852]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:45 nativespace-cdp sudo[2856]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 19:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:45 nativespace-cdp sudo[2863]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 19:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:49 nativespace-cdp sudo[2866]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:49 nativespace-cdp sudo[2877]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:49 nativespace-cdp sudo[2880]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:49 nativespace-cdp sudo[2883]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:49 nativespace-cdp sudo[2886]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:49 nativespace-cdp sudo[2889]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 19:09:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:49 nativespace-cdp sudo[2892]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 19:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:51 nativespace-cdp sudo[2900]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 19:09:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:53 nativespace-cdp sudo[2907]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hubmaster user-2=carsinyo user-3=fetch user-4=gilpin user-5=milloyco user-6=elecleis user-7=connectedshoppin user-8=thqkgnbz user-9=accooper user-10=ianrayne user-11=coursemc user-12=opaiscyx user-13=jonhartl user-14=seftvta user-15=ultbcrra user-16=firstres user-17=firstred user-18=southlon user-19=highlegh user-20=clarkass user-21=firstrel user-22=costestimatorco user-23=alexadmin user-24=skyfirec user-25=nativene user-26=innovat1 user-27=askhform user-28=stuartge user-29=firstre2 user-30=vivienn1 user-31=battlere user-32=oneoarco user-33=brighto1 user-34=nstriton user-35=ggaaorgu user-36=belle user-37=newstoda user-38=bemadonn user-39=bedfords user-40=spectrum user-41=hodgesonweb user-42=theblack user-43=jarvisin user-44=stephani user-45=leereyn1 user-46=still user-47=agproduc
Sep 30 19:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=athenare user-49=connect9 user-50=vantagep user-51=maflemin user-52=lbscrmod user-53=booff user-54=markward user-55=foundation user-56=ulsukarm user-57=dickemery123 user-58=ptkxhsbt user-59=martsblo user-60=magichat user-61=lbhyisi user-62=hhdugcor user-63=strathar user-64=sarafoundation user-65=atestord user-66=brmrjxl user-67=lakesan1 user-68=musorguk user-69=megacards user-70=wilsonsw user-71=onlycont user-72=attlebor user-73=lucy user-74=romaldki user-75=hodgsonmail user-76=ranxterc user-77=outdoorc user-78=branko user-79=jennimil user-80=tomandle user-81=careers user-82=nbhavers user-83=david user-84=chrisdal user-85=mcdermos user-86=sketchy user-87=cath user-88=havantho user-89=nvihkvu user-90=tstardom user-91=oubpgvbx user-92=what user-93=design user-94=ladburyp user-95=dancinggardener user-96=stagingerris user-97=kategilpin user-98=boldover user-99=nove user-100=bakery user-101=sosevalu
Sep 30 19:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=nsceres user-104=burydropin user-105=fawcettd user-106=dhyana user-107=beauty user-108=eatspam user-109=darkstar user-110=asandcoc user-111=sibtoncc user-112=steve user-113=bwppodcast user-114=zebrapho user-115=pugwash user-116=howardon user-117=paulmca1 user-118=cwsocial user-119=cambria1 user-120=cathski user-121=ninejimm user-122=reliable user-123=eugincou user-124=courseme user-125=hirefootballgame user-126=lkpier user-127=philmcph user-128=ctedorgu user-129=firstre5 user-130=steakbridieme user-131=donnychicago user-132=nscdp user-133=health2045 user-134=fortunaz user-135=leftie user-136=foods user-137=hidden user-138=nomistakes user-139=tigerlet user-140=barbersh user-141=isleofwi user-142=smrszyqg feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Sep 30 19:09:53 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 19:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:54 nativespace-cdp sudo[2916]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 19:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:55 nativespace-cdp sudo[2924]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-erWiEuDrCOcGxoTT.~
Sep 30 19:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:55 nativespace-cdp sudo[2927]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-erWiEuDrCOcGxoTT.~'
Sep 30 19:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:55 nativespace-cdp sudo[2930]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-erWiEuDrCOcGxoTT.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 19:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:55 nativespace-cdp sudo[2934]: pam_unix(sudo:session): session closed for user root
Sep 30 19:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 19:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:09:55 nativespace-cdp sudo[2937]: pam_unix(sudo:session): session closed for user root
Sep 30 19:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 19:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 19:10:12 nativespace-cdp sudo[3201]: pam_unix(sudo:session): session closed for user root
Sep 30 19:11:33 nativespace-cdp sshd[3481]: Connection closed by 159.100.136.21 port 43612 [preauth]
Sep 30 19:16:33 nativespace-cdp sshd[4428]: Connection closed by 159.100.136.21 port 53618 [preauth]
Sep 30 19:21:33 nativespace-cdp sshd[5726]: Connection closed by 159.100.136.21 port 35148 [preauth]
Sep 30 19:26:34 nativespace-cdp sshd[6778]: Connection closed by 159.100.136.21 port 45014 [preauth]
Sep 30 19:30:19 nativespace-cdp sshd[7656]: Invalid user chris from 27.254.207.91 port 29648
Sep 30 19:30:19 nativespace-cdp sshd[7656]: input_userauth_request: invalid user chris [preauth]
Sep 30 19:30:19 nativespace-cdp sshd[7656]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:30:19 nativespace-cdp sshd[7656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:30:21 nativespace-cdp sshd[7656]: Failed password for invalid user chris from 27.254.207.91 port 29648 ssh2
Sep 30 19:30:22 nativespace-cdp sshd[7656]: Received disconnect from 27.254.207.91 port 29648:11: Bye Bye [preauth]
Sep 30 19:30:22 nativespace-cdp sshd[7656]: Disconnected from 27.254.207.91 port 29648 [preauth]
Sep 30 19:30:25 nativespace-cdp sshd[7680]: Invalid user tomcat from 207.154.215.181 port 51742
Sep 30 19:30:25 nativespace-cdp sshd[7680]: input_userauth_request: invalid user tomcat [preauth]
Sep 30 19:30:25 nativespace-cdp sshd[7680]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:30:25 nativespace-cdp sshd[7680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181
Sep 30 19:30:27 nativespace-cdp sshd[7680]: Failed password for invalid user tomcat from 207.154.215.181 port 51742 ssh2
Sep 30 19:30:27 nativespace-cdp sshd[7680]: Received disconnect from 207.154.215.181 port 51742:11: Bye Bye [preauth]
Sep 30 19:30:27 nativespace-cdp sshd[7680]: Disconnected from 207.154.215.181 port 51742 [preauth]
Sep 30 19:31:33 nativespace-cdp sshd[7926]: Connection closed by 159.100.136.21 port 54752 [preauth]
Sep 30 19:34:04 nativespace-cdp sshd[8249]: ssh_dispatch_run_fatal: Connection from 27.254.207.91 port 21311: Broken pipe [preauth]
Sep 30 19:34:36 nativespace-cdp sshd[8362]: ssh_dispatch_run_fatal: Connection from 27.254.207.91 port 61863: Broken pipe [preauth]
Sep 30 19:35:07 nativespace-cdp sshd[8515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=david
Sep 30 19:35:09 nativespace-cdp sshd[8515]: Failed password for david from 27.254.207.91 port 46030 ssh2
Sep 30 19:35:09 nativespace-cdp sshd[8515]: Received disconnect from 27.254.207.91 port 46030:11: Bye Bye [preauth]
Sep 30 19:35:09 nativespace-cdp sshd[8515]: Disconnected from 27.254.207.91 port 46030 [preauth]
Sep 30 19:35:21 nativespace-cdp sshd[8762]: Invalid user anand from 207.154.215.181 port 49332
Sep 30 19:35:21 nativespace-cdp sshd[8762]: input_userauth_request: invalid user anand [preauth]
Sep 30 19:35:21 nativespace-cdp sshd[8762]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:35:21 nativespace-cdp sshd[8762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181
Sep 30 19:35:23 nativespace-cdp sshd[8762]: Failed password for invalid user anand from 207.154.215.181 port 49332 ssh2
Sep 30 19:35:23 nativespace-cdp sshd[8762]: Received disconnect from 207.154.215.181 port 49332:11: Bye Bye [preauth]
Sep 30 19:35:23 nativespace-cdp sshd[8762]: Disconnected from 207.154.215.181 port 49332 [preauth]
Sep 30 19:35:49 nativespace-cdp sshd[9098]: Invalid user admin from 27.254.207.91 port 56066
Sep 30 19:35:49 nativespace-cdp sshd[9098]: input_userauth_request: invalid user admin [preauth]
Sep 30 19:35:49 nativespace-cdp sshd[9098]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:35:49 nativespace-cdp sshd[9098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:35:50 nativespace-cdp sshd[9098]: Failed password for invalid user admin from 27.254.207.91 port 56066 ssh2
Sep 30 19:35:50 nativespace-cdp sshd[9098]: Received disconnect from 27.254.207.91 port 56066:11: Bye Bye [preauth]
Sep 30 19:35:50 nativespace-cdp sshd[9098]: Disconnected from 27.254.207.91 port 56066 [preauth]
Sep 30 19:36:32 nativespace-cdp sshd[9237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181  user=root
Sep 30 19:36:32 nativespace-cdp sshd[9237]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:36:33 nativespace-cdp sshd[9239]: Connection closed by 159.100.136.21 port 36422 [preauth]
Sep 30 19:36:34 nativespace-cdp sshd[9237]: Failed password for root from 207.154.215.181 port 53930 ssh2
Sep 30 19:36:36 nativespace-cdp sshd[9237]: Received disconnect from 207.154.215.181 port 53930:11: Bye Bye [preauth]
Sep 30 19:36:36 nativespace-cdp sshd[9237]: Disconnected from 207.154.215.181 port 53930 [preauth]
Sep 30 19:36:37 nativespace-cdp sshd[9248]: Invalid user cacti from 27.254.207.91 port 42587
Sep 30 19:36:37 nativespace-cdp sshd[9248]: input_userauth_request: invalid user cacti [preauth]
Sep 30 19:36:37 nativespace-cdp sshd[9248]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:36:37 nativespace-cdp sshd[9248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:36:39 nativespace-cdp sshd[9248]: Failed password for invalid user cacti from 27.254.207.91 port 42587 ssh2
Sep 30 19:36:39 nativespace-cdp sshd[9248]: Received disconnect from 27.254.207.91 port 42587:11: Bye Bye [preauth]
Sep 30 19:36:39 nativespace-cdp sshd[9248]: Disconnected from 27.254.207.91 port 42587 [preauth]
Sep 30 19:37:29 nativespace-cdp sshd[9427]: Invalid user anand from 27.254.207.91 port 22995
Sep 30 19:37:29 nativespace-cdp sshd[9427]: input_userauth_request: invalid user anand [preauth]
Sep 30 19:37:29 nativespace-cdp sshd[9427]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:37:29 nativespace-cdp sshd[9427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:37:32 nativespace-cdp sshd[9427]: Failed password for invalid user anand from 27.254.207.91 port 22995 ssh2
Sep 30 19:37:32 nativespace-cdp sshd[9427]: Received disconnect from 27.254.207.91 port 22995:11: Bye Bye [preauth]
Sep 30 19:37:32 nativespace-cdp sshd[9427]: Disconnected from 27.254.207.91 port 22995 [preauth]
Sep 30 19:38:21 nativespace-cdp sshd[9544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:38:21 nativespace-cdp sshd[9544]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:38:24 nativespace-cdp sshd[9544]: Failed password for root from 27.254.207.91 port 50537 ssh2
Sep 30 19:38:28 nativespace-cdp sshd[9544]: Received disconnect from 27.254.207.91 port 50537:11: Bye Bye [preauth]
Sep 30 19:38:28 nativespace-cdp sshd[9544]: Disconnected from 27.254.207.91 port 50537 [preauth]
Sep 30 19:38:51 nativespace-cdp sshd[9624]: Invalid user daniel from 207.154.215.181 port 58012
Sep 30 19:38:51 nativespace-cdp sshd[9624]: input_userauth_request: invalid user daniel [preauth]
Sep 30 19:38:51 nativespace-cdp sshd[9624]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:38:51 nativespace-cdp sshd[9624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181
Sep 30 19:38:52 nativespace-cdp sshd[9624]: Failed password for invalid user daniel from 207.154.215.181 port 58012 ssh2
Sep 30 19:38:52 nativespace-cdp sshd[9624]: Received disconnect from 207.154.215.181 port 58012:11: Bye Bye [preauth]
Sep 30 19:38:52 nativespace-cdp sshd[9624]: Disconnected from 207.154.215.181 port 58012 [preauth]
Sep 30 19:39:06 nativespace-cdp sshd[9672]: Invalid user debian from 27.254.207.91 port 6135
Sep 30 19:39:06 nativespace-cdp sshd[9672]: input_userauth_request: invalid user debian [preauth]
Sep 30 19:39:06 nativespace-cdp sshd[9672]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:39:06 nativespace-cdp sshd[9672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:39:08 nativespace-cdp sshd[9672]: Failed password for invalid user debian from 27.254.207.91 port 6135 ssh2
Sep 30 19:39:10 nativespace-cdp sshd[9672]: Received disconnect from 27.254.207.91 port 6135:11: Bye Bye [preauth]
Sep 30 19:39:10 nativespace-cdp sshd[9672]: Disconnected from 27.254.207.91 port 6135 [preauth]
Sep 30 19:39:54 nativespace-cdp sshd[9795]: Invalid user admin from 27.254.207.91 port 3176
Sep 30 19:39:54 nativespace-cdp sshd[9795]: input_userauth_request: invalid user admin [preauth]
Sep 30 19:39:54 nativespace-cdp sshd[9795]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:39:54 nativespace-cdp sshd[9795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:39:56 nativespace-cdp sshd[9795]: Failed password for invalid user admin from 27.254.207.91 port 3176 ssh2
Sep 30 19:39:56 nativespace-cdp sshd[9795]: Received disconnect from 27.254.207.91 port 3176:11: Bye Bye [preauth]
Sep 30 19:39:56 nativespace-cdp sshd[9795]: Disconnected from 27.254.207.91 port 3176 [preauth]
Sep 30 19:40:41 nativespace-cdp sshd[10153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:40:41 nativespace-cdp sshd[10153]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:40:43 nativespace-cdp sshd[10153]: Failed password for root from 27.254.207.91 port 56370 ssh2
Sep 30 19:40:43 nativespace-cdp sshd[10153]: Received disconnect from 27.254.207.91 port 56370:11: Bye Bye [preauth]
Sep 30 19:40:43 nativespace-cdp sshd[10153]: Disconnected from 27.254.207.91 port 56370 [preauth]
Sep 30 19:41:26 nativespace-cdp sshd[10287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:41:26 nativespace-cdp sshd[10287]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:41:28 nativespace-cdp sshd[10287]: Failed password for root from 27.254.207.91 port 33249 ssh2
Sep 30 19:41:28 nativespace-cdp sshd[10287]: Received disconnect from 27.254.207.91 port 33249:11: Bye Bye [preauth]
Sep 30 19:41:28 nativespace-cdp sshd[10287]: Disconnected from 27.254.207.91 port 33249 [preauth]
Sep 30 19:41:33 nativespace-cdp sshd[10319]: Connection closed by 159.100.136.21 port 46108 [preauth]
Sep 30 19:42:12 nativespace-cdp sshd[10412]: Invalid user administrator from 27.254.207.91 port 26918
Sep 30 19:42:12 nativespace-cdp sshd[10412]: input_userauth_request: invalid user administrator [preauth]
Sep 30 19:42:12 nativespace-cdp sshd[10412]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:42:12 nativespace-cdp sshd[10412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:42:14 nativespace-cdp sshd[10412]: Failed password for invalid user administrator from 27.254.207.91 port 26918 ssh2
Sep 30 19:42:15 nativespace-cdp sshd[10412]: Received disconnect from 27.254.207.91 port 26918:11: Bye Bye [preauth]
Sep 30 19:42:15 nativespace-cdp sshd[10412]: Disconnected from 27.254.207.91 port 26918 [preauth]
Sep 30 19:43:02 nativespace-cdp sshd[10551]: Invalid user admin from 27.254.207.91 port 56811
Sep 30 19:43:02 nativespace-cdp sshd[10551]: input_userauth_request: invalid user admin [preauth]
Sep 30 19:43:02 nativespace-cdp sshd[10551]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:43:02 nativespace-cdp sshd[10551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:43:04 nativespace-cdp sshd[10551]: Failed password for invalid user admin from 27.254.207.91 port 56811 ssh2
Sep 30 19:43:06 nativespace-cdp sshd[10551]: Received disconnect from 27.254.207.91 port 56811:11: Bye Bye [preauth]
Sep 30 19:43:06 nativespace-cdp sshd[10551]: Disconnected from 27.254.207.91 port 56811 [preauth]
Sep 30 19:43:54 nativespace-cdp sshd[10718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:43:54 nativespace-cdp sshd[10718]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:43:56 nativespace-cdp sshd[10718]: Failed password for root from 27.254.207.91 port 43493 ssh2
Sep 30 19:44:00 nativespace-cdp sshd[10718]: Received disconnect from 27.254.207.91 port 43493:11: Bye Bye [preauth]
Sep 30 19:44:00 nativespace-cdp sshd[10718]: Disconnected from 27.254.207.91 port 43493 [preauth]
Sep 30 19:44:50 nativespace-cdp sshd[10857]: Connection closed by 27.254.207.91 port 15616 [preauth]
Sep 30 19:45:40 nativespace-cdp sshd[11224]: Invalid user admin from 27.254.207.91 port 41775
Sep 30 19:45:40 nativespace-cdp sshd[11224]: input_userauth_request: invalid user admin [preauth]
Sep 30 19:45:40 nativespace-cdp sshd[11224]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:45:40 nativespace-cdp sshd[11224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:45:41 nativespace-cdp sshd[11224]: Failed password for invalid user admin from 27.254.207.91 port 41775 ssh2
Sep 30 19:45:43 nativespace-cdp sshd[11224]: Received disconnect from 27.254.207.91 port 41775:11: Bye Bye [preauth]
Sep 30 19:45:43 nativespace-cdp sshd[11224]: Disconnected from 27.254.207.91 port 41775 [preauth]
Sep 30 19:46:33 nativespace-cdp sshd[11442]: Connection closed by 159.100.136.21 port 56136 [preauth]
Sep 30 19:46:33 nativespace-cdp sshd[11439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:46:33 nativespace-cdp sshd[11439]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:46:35 nativespace-cdp sshd[11439]: Failed password for root from 27.254.207.91 port 50796 ssh2
Sep 30 19:46:36 nativespace-cdp sshd[11439]: Received disconnect from 27.254.207.91 port 50796:11: Bye Bye [preauth]
Sep 30 19:46:36 nativespace-cdp sshd[11439]: Disconnected from 27.254.207.91 port 50796 [preauth]
Sep 30 19:47:29 nativespace-cdp sshd[11603]: Invalid user nisec from 27.254.207.91 port 46249
Sep 30 19:47:29 nativespace-cdp sshd[11603]: input_userauth_request: invalid user nisec [preauth]
Sep 30 19:47:29 nativespace-cdp sshd[11603]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:47:29 nativespace-cdp sshd[11603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:47:31 nativespace-cdp sshd[11603]: Failed password for invalid user nisec from 27.254.207.91 port 46249 ssh2
Sep 30 19:47:31 nativespace-cdp sshd[11603]: Received disconnect from 27.254.207.91 port 46249:11: Bye Bye [preauth]
Sep 30 19:47:31 nativespace-cdp sshd[11603]: Disconnected from 27.254.207.91 port 46249 [preauth]
Sep 30 19:49:21 nativespace-cdp sshd[11875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:49:21 nativespace-cdp sshd[11875]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:49:23 nativespace-cdp sshd[11875]: Failed password for root from 27.254.207.91 port 4131 ssh2
Sep 30 19:49:24 nativespace-cdp sshd[11875]: Received disconnect from 27.254.207.91 port 4131:11: Bye Bye [preauth]
Sep 30 19:49:24 nativespace-cdp sshd[11875]: Disconnected from 27.254.207.91 port 4131 [preauth]
Sep 30 19:50:18 nativespace-cdp sshd[12184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:50:18 nativespace-cdp sshd[12184]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:50:20 nativespace-cdp sshd[12184]: Failed password for root from 27.254.207.91 port 45874 ssh2
Sep 30 19:50:20 nativespace-cdp sshd[12184]: Received disconnect from 27.254.207.91 port 45874:11: Bye Bye [preauth]
Sep 30 19:50:20 nativespace-cdp sshd[12184]: Disconnected from 27.254.207.91 port 45874 [preauth]
Sep 30 19:51:11 nativespace-cdp sshd[12467]: Invalid user admin from 27.254.207.91 port 41548
Sep 30 19:51:11 nativespace-cdp sshd[12467]: input_userauth_request: invalid user admin [preauth]
Sep 30 19:51:11 nativespace-cdp sshd[12467]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:51:11 nativespace-cdp sshd[12467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:51:13 nativespace-cdp sshd[12467]: Failed password for invalid user admin from 27.254.207.91 port 41548 ssh2
Sep 30 19:51:13 nativespace-cdp sshd[12467]: Received disconnect from 27.254.207.91 port 41548:11: Bye Bye [preauth]
Sep 30 19:51:13 nativespace-cdp sshd[12467]: Disconnected from 27.254.207.91 port 41548 [preauth]
Sep 30 19:51:33 nativespace-cdp sshd[12532]: Connection closed by 159.100.136.21 port 37252 [preauth]
Sep 30 19:51:47 nativespace-cdp sshd[12579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181  user=root
Sep 30 19:51:47 nativespace-cdp sshd[12579]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:51:49 nativespace-cdp sshd[12579]: Failed password for root from 207.154.215.181 port 60072 ssh2
Sep 30 19:51:49 nativespace-cdp sshd[12579]: Received disconnect from 207.154.215.181 port 60072:11: Bye Bye [preauth]
Sep 30 19:51:49 nativespace-cdp sshd[12579]: Disconnected from 207.154.215.181 port 60072 [preauth]
Sep 30 19:52:04 nativespace-cdp sshd[12693]: Invalid user basesystem from 27.254.207.91 port 47837
Sep 30 19:52:04 nativespace-cdp sshd[12693]: input_userauth_request: invalid user basesystem [preauth]
Sep 30 19:52:04 nativespace-cdp sshd[12693]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:52:04 nativespace-cdp sshd[12693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:52:06 nativespace-cdp sshd[12693]: Failed password for invalid user basesystem from 27.254.207.91 port 47837 ssh2
Sep 30 19:52:06 nativespace-cdp sshd[12693]: Received disconnect from 27.254.207.91 port 47837:11: Bye Bye [preauth]
Sep 30 19:52:06 nativespace-cdp sshd[12693]: Disconnected from 27.254.207.91 port 47837 [preauth]
Sep 30 19:52:59 nativespace-cdp sshd[12832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:52:59 nativespace-cdp sshd[12832]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:53:02 nativespace-cdp sshd[12832]: Failed password for root from 27.254.207.91 port 52224 ssh2
Sep 30 19:53:02 nativespace-cdp sshd[12832]: Received disconnect from 27.254.207.91 port 52224:11: Bye Bye [preauth]
Sep 30 19:53:02 nativespace-cdp sshd[12832]: Disconnected from 27.254.207.91 port 52224 [preauth]
Sep 30 19:53:53 nativespace-cdp sshd[12957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:53:53 nativespace-cdp sshd[12957]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:53:55 nativespace-cdp sshd[12957]: Failed password for root from 27.254.207.91 port 62968 ssh2
Sep 30 19:53:56 nativespace-cdp sshd[12957]: Received disconnect from 27.254.207.91 port 62968:11: Bye Bye [preauth]
Sep 30 19:53:56 nativespace-cdp sshd[12957]: Disconnected from 27.254.207.91 port 62968 [preauth]
Sep 30 19:54:48 nativespace-cdp sshd[13273]: Invalid user mosquitto from 27.254.207.91 port 8576
Sep 30 19:54:48 nativespace-cdp sshd[13273]: input_userauth_request: invalid user mosquitto [preauth]
Sep 30 19:54:48 nativespace-cdp sshd[13273]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:54:48 nativespace-cdp sshd[13273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:54:50 nativespace-cdp sshd[13273]: Failed password for invalid user mosquitto from 27.254.207.91 port 8576 ssh2
Sep 30 19:54:50 nativespace-cdp sshd[13273]: Received disconnect from 27.254.207.91 port 8576:11: Bye Bye [preauth]
Sep 30 19:54:50 nativespace-cdp sshd[13273]: Disconnected from 27.254.207.91 port 8576 [preauth]
Sep 30 19:55:45 nativespace-cdp sshd[13668]: Invalid user admin from 27.254.207.91 port 1801
Sep 30 19:55:45 nativespace-cdp sshd[13668]: input_userauth_request: invalid user admin [preauth]
Sep 30 19:55:45 nativespace-cdp sshd[13668]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:55:45 nativespace-cdp sshd[13668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:55:48 nativespace-cdp sshd[13668]: Failed password for invalid user admin from 27.254.207.91 port 1801 ssh2
Sep 30 19:55:48 nativespace-cdp sshd[13668]: Received disconnect from 27.254.207.91 port 1801:11: Bye Bye [preauth]
Sep 30 19:55:48 nativespace-cdp sshd[13668]: Disconnected from 27.254.207.91 port 1801 [preauth]
Sep 30 19:56:37 nativespace-cdp sshd[13803]: Connection closed by 159.100.136.21 port 47174 [preauth]
Sep 30 19:56:42 nativespace-cdp sshd[13823]: Invalid user adminftp from 27.254.207.91 port 52791
Sep 30 19:56:42 nativespace-cdp sshd[13823]: input_userauth_request: invalid user adminftp [preauth]
Sep 30 19:56:42 nativespace-cdp sshd[13823]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:56:42 nativespace-cdp sshd[13823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 19:56:44 nativespace-cdp sshd[13823]: Failed password for invalid user adminftp from 27.254.207.91 port 52791 ssh2
Sep 30 19:56:44 nativespace-cdp sshd[13823]: Received disconnect from 27.254.207.91 port 52791:11: Bye Bye [preauth]
Sep 30 19:56:44 nativespace-cdp sshd[13823]: Disconnected from 27.254.207.91 port 52791 [preauth]
Sep 30 19:57:38 nativespace-cdp sshd[13958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:57:38 nativespace-cdp sshd[13958]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:57:39 nativespace-cdp sshd[13958]: Failed password for root from 27.254.207.91 port 54879 ssh2
Sep 30 19:57:40 nativespace-cdp sshd[13958]: Received disconnect from 27.254.207.91 port 54879:11: Bye Bye [preauth]
Sep 30 19:57:40 nativespace-cdp sshd[13958]: Disconnected from 27.254.207.91 port 54879 [preauth]
Sep 30 19:57:40 nativespace-cdp sshd[13969]: Invalid user admin from 207.154.215.181 port 52126
Sep 30 19:57:40 nativespace-cdp sshd[13969]: input_userauth_request: invalid user admin [preauth]
Sep 30 19:57:40 nativespace-cdp sshd[13969]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 19:57:40 nativespace-cdp sshd[13969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181
Sep 30 19:57:43 nativespace-cdp sshd[13969]: Failed password for invalid user admin from 207.154.215.181 port 52126 ssh2
Sep 30 19:57:43 nativespace-cdp sshd[13969]: Received disconnect from 207.154.215.181 port 52126:11: Bye Bye [preauth]
Sep 30 19:57:43 nativespace-cdp sshd[13969]: Disconnected from 207.154.215.181 port 52126 [preauth]
Sep 30 19:58:34 nativespace-cdp sshd[14092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=david
Sep 30 19:58:36 nativespace-cdp sshd[14092]: Failed password for david from 27.254.207.91 port 12569 ssh2
Sep 30 19:58:36 nativespace-cdp sshd[14092]: Received disconnect from 27.254.207.91 port 12569:11: Bye Bye [preauth]
Sep 30 19:58:36 nativespace-cdp sshd[14092]: Disconnected from 27.254.207.91 port 12569 [preauth]
Sep 30 19:59:31 nativespace-cdp sshd[14239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 19:59:31 nativespace-cdp sshd[14239]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 19:59:33 nativespace-cdp sshd[14239]: Failed password for root from 27.254.207.91 port 22984 ssh2
Sep 30 19:59:33 nativespace-cdp sshd[14239]: Received disconnect from 27.254.207.91 port 22984:11: Bye Bye [preauth]
Sep 30 19:59:33 nativespace-cdp sshd[14239]: Disconnected from 27.254.207.91 port 22984 [preauth]
Sep 30 20:01:17 nativespace-cdp sshd[14858]: Invalid user debianuser from 27.254.207.91 port 29544
Sep 30 20:01:17 nativespace-cdp sshd[14858]: input_userauth_request: invalid user debianuser [preauth]
Sep 30 20:01:17 nativespace-cdp sshd[14858]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 20:01:17 nativespace-cdp sshd[14858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 20:01:19 nativespace-cdp sshd[14858]: Failed password for invalid user debianuser from 27.254.207.91 port 29544 ssh2
Sep 30 20:01:23 nativespace-cdp sshd[14858]: Received disconnect from 27.254.207.91 port 29544:11: Bye Bye [preauth]
Sep 30 20:01:23 nativespace-cdp sshd[14858]: Disconnected from 27.254.207.91 port 29544 [preauth]
Sep 30 20:01:35 nativespace-cdp sshd[14900]: Connection closed by 159.100.136.21 port 56396 [preauth]
Sep 30 20:02:11 nativespace-cdp sshd[15043]: Invalid user administrator from 27.254.207.91 port 9814
Sep 30 20:02:11 nativespace-cdp sshd[15043]: input_userauth_request: invalid user administrator [preauth]
Sep 30 20:02:11 nativespace-cdp sshd[15043]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 20:02:11 nativespace-cdp sshd[15043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 20:02:14 nativespace-cdp sshd[15043]: Failed password for invalid user administrator from 27.254.207.91 port 9814 ssh2
Sep 30 20:02:14 nativespace-cdp sshd[15043]: Received disconnect from 27.254.207.91 port 9814:11: Bye Bye [preauth]
Sep 30 20:02:14 nativespace-cdp sshd[15043]: Disconnected from 27.254.207.91 port 9814 [preauth]
Sep 30 20:03:08 nativespace-cdp sshd[15163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 20:03:08 nativespace-cdp sshd[15163]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 20:03:10 nativespace-cdp sshd[15163]: Failed password for root from 27.254.207.91 port 38508 ssh2
Sep 30 20:03:11 nativespace-cdp sshd[15163]: Received disconnect from 27.254.207.91 port 38508:11: Bye Bye [preauth]
Sep 30 20:03:11 nativespace-cdp sshd[15163]: Disconnected from 27.254.207.91 port 38508 [preauth]
Sep 30 20:03:36 nativespace-cdp sshd[15219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181  user=root
Sep 30 20:03:36 nativespace-cdp sshd[15219]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 20:03:38 nativespace-cdp sshd[15219]: Failed password for root from 207.154.215.181 port 58736 ssh2
Sep 30 20:03:38 nativespace-cdp sshd[15219]: Received disconnect from 207.154.215.181 port 58736:11: Bye Bye [preauth]
Sep 30 20:03:38 nativespace-cdp sshd[15219]: Disconnected from 207.154.215.181 port 58736 [preauth]
Sep 30 20:04:04 nativespace-cdp sshd[15314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 20:04:04 nativespace-cdp sshd[15314]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 20:04:06 nativespace-cdp sshd[15314]: Failed password for root from 27.254.207.91 port 54278 ssh2
Sep 30 20:04:06 nativespace-cdp sshd[15314]: Received disconnect from 27.254.207.91 port 54278:11: Bye Bye [preauth]
Sep 30 20:04:06 nativespace-cdp sshd[15314]: Disconnected from 27.254.207.91 port 54278 [preauth]
Sep 30 20:04:43 nativespace-cdp sshd[15410]: Invalid user admin from 207.154.215.181 port 40192
Sep 30 20:04:43 nativespace-cdp sshd[15410]: input_userauth_request: invalid user admin [preauth]
Sep 30 20:04:43 nativespace-cdp sshd[15410]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 20:04:43 nativespace-cdp sshd[15410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181
Sep 30 20:04:44 nativespace-cdp sshd[15410]: Failed password for invalid user admin from 207.154.215.181 port 40192 ssh2
Sep 30 20:04:46 nativespace-cdp sshd[15410]: Received disconnect from 207.154.215.181 port 40192:11: Bye Bye [preauth]
Sep 30 20:04:46 nativespace-cdp sshd[15410]: Disconnected from 207.154.215.181 port 40192 [preauth]
Sep 30 20:04:58 nativespace-cdp sshd[15516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91  user=root
Sep 30 20:04:58 nativespace-cdp sshd[15516]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 20:05:01 nativespace-cdp sshd[15516]: Failed password for root from 27.254.207.91 port 1621 ssh2
Sep 30 20:05:01 nativespace-cdp sshd[15516]: Received disconnect from 27.254.207.91 port 1621:11: Bye Bye [preauth]
Sep 30 20:05:01 nativespace-cdp sshd[15516]: Disconnected from 27.254.207.91 port 1621 [preauth]
Sep 30 20:05:50 nativespace-cdp sshd[16032]: Invalid user admin from 27.254.207.91 port 8350
Sep 30 20:05:50 nativespace-cdp sshd[16032]: input_userauth_request: invalid user admin [preauth]
Sep 30 20:05:50 nativespace-cdp sshd[16032]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 20:05:50 nativespace-cdp sshd[16032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.207.91
Sep 30 20:05:52 nativespace-cdp sshd[16032]: Failed password for invalid user admin from 27.254.207.91 port 8350 ssh2
Sep 30 20:05:52 nativespace-cdp sshd[16032]: Received disconnect from 27.254.207.91 port 8350:11: Bye Bye [preauth]
Sep 30 20:05:52 nativespace-cdp sshd[16032]: Disconnected from 27.254.207.91 port 8350 [preauth]
Sep 30 20:05:56 nativespace-cdp sshd[16113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181  user=root
Sep 30 20:05:56 nativespace-cdp sshd[16113]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 30 20:05:58 nativespace-cdp sshd[16113]: Failed password for root from 207.154.215.181 port 38870 ssh2
Sep 30 20:06:00 nativespace-cdp sshd[16113]: Received disconnect from 207.154.215.181 port 38870:11: Bye Bye [preauth]
Sep 30 20:06:00 nativespace-cdp sshd[16113]: Disconnected from 207.154.215.181 port 38870 [preauth]
Sep 30 20:06:34 nativespace-cdp sshd[16214]: Connection closed by 159.100.136.21 port 37938 [preauth]
Sep 30 20:07:04 nativespace-cdp sshd[16327]: Invalid user admin from 207.154.215.181 port 37226
Sep 30 20:07:04 nativespace-cdp sshd[16327]: input_userauth_request: invalid user admin [preauth]
Sep 30 20:07:04 nativespace-cdp sshd[16327]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 20:07:04 nativespace-cdp sshd[16327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181
Sep 30 20:07:06 nativespace-cdp sshd[16327]: Failed password for invalid user admin from 207.154.215.181 port 37226 ssh2
Sep 30 20:07:06 nativespace-cdp sshd[16327]: Received disconnect from 207.154.215.181 port 37226:11: Bye Bye [preauth]
Sep 30 20:07:06 nativespace-cdp sshd[16327]: Disconnected from 207.154.215.181 port 37226 [preauth]
Sep 30 20:09:00 nativespace-cdp sshd[28454]: pam_unix(sshd:session): session closed for user root
Sep 30 20:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 20:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:15 nativespace-cdp sudo[16925]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 20:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:15 nativespace-cdp sudo[16930]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 20:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:19 nativespace-cdp sudo[16933]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 20:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:19 nativespace-cdp sudo[16943]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 20:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:27 nativespace-cdp sudo[16946]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 20:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:28 nativespace-cdp sudo[16973]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 20:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:28 nativespace-cdp sudo[16977]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 20:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:28 nativespace-cdp sudo[16980]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 20:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:28 nativespace-cdp sudo[16984]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 20:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:28 nativespace-cdp sudo[16987]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 20:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:28 nativespace-cdp sudo[16999]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 20:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:31 nativespace-cdp sudo[17084]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 20:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:34 nativespace-cdp sudo[17093]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=steve user-2=zebrapho user-3=bwppodcast user-4=sibtoncc user-5=asandcoc user-6=dhyana user-7=eatspam user-8=darkstar user-9=beauty user-10=nsceres user-11=burydropin user-12=fawcettd user-13=tigerlet user-14=barbersh user-15=hidden user-16=nomistakes user-17=isleofwi user-18=smrszyqg user-19=philmcph user-20=ctedorgu user-21=donnychicago user-22=steakbridieme user-23=firstre5 user-24=lkpier user-25=fortunaz user-26=health2045 user-27=foods user-28=leftie user-29=nscdp user-30=courseme user-31=eugincou user-32=hirefootballgame user-33=pugwash user-34=howardon user-35=paulmca1 user-36=cwsocial user-37=reliable user-38=ninejimm user-39=cambria1 user-40=cathski user-41=nbhavers user-42=careers user-43=david user-44=mcdermos user-45=chrisdal user-46=jennimil user-47=tomandle user-48=romaldki
Sep 30 20:10:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=branko user-50=hodgsonmail user-51=outdoorc user-52=ranxterc user-53=onlycont user-54=attlebor user-55=lucy user-56=sosevalu user-57=crrtipdl user-58=bakery user-59=boldover user-60=nove user-61=design user-62=kategilpin user-63=ladburyp user-64=dancinggardener user-65=stagingerris user-66=nvihkvu user-67=cath user-68=sketchy user-69=havantho user-70=what user-71=tstardom user-72=oubpgvbx user-73=ulsukarm user-74=maflemin user-75=lbscrmod user-76=connect9 user-77=athenare user-78=vantagep user-79=booff user-80=foundation user-81=markward user-82=leereyn1 user-83=stephani user-84=still user-85=agproduc user-86=theblack user-87=hodgesonweb user-88=spectrum user-89=jarvisin user-90=musorguk user-91=megacards user-92=wilsonsw user-93=sarafoundation user-94=atestord user-95=strathar user-96=brmrjxl user-97=lakesan1 user-98=magichat user-99=lbhyisi user-100=hhdugcor user-101=ptkxhsbt user-102=dickemery123
Sep 30 20:10:34 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=martsblo user-104=southlon user-105=highlegh user-106=firstred user-107=costestimatorco user-108=clarkass user-109=firstrel user-110=coursemc user-111=opaiscyx user-112=firstres user-113=seftvta user-114=jonhartl user-115=ultbcrra user-116=thqkgnbz user-117=connectedshoppin user-118=ianrayne user-119=accooper user-120=carsinyo user-121=fetch user-122=hubmaster user-123=elecleis user-124=milloyco user-125=gilpin user-126=bemadonn user-127=belle user-128=ggaaorgu user-129=newstoda user-130=bedfords user-131=battlere user-132=oneoarco user-133=firstre2 user-134=vivienn1 user-135=brighto1 user-136=nstriton user-137=nativene user-138=stuartge user-139=askhform user-140=innovat1 user-141=skyfirec user-142=alexadmin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 20:10:34 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 20:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:36 nativespace-cdp sudo[17101]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 20:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:38 nativespace-cdp sudo[17113]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gM6Ut3iM7OqHAL91.~
Sep 30 20:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:38 nativespace-cdp sudo[17116]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gM6Ut3iM7OqHAL91.~'
Sep 30 20:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:38 nativespace-cdp sudo[17119]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-gM6Ut3iM7OqHAL91.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 20:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:38 nativespace-cdp sudo[17123]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 20:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:38 nativespace-cdp sudo[17126]: pam_unix(sudo:session): session closed for user root
Sep 30 20:10:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Sep 30 20:10:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:10:44 nativespace-cdp sudo[17129]: pam_unix(sudo:session): session closed for user root
Sep 30 20:11:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 gethostname --output=json
Sep 30 20:11:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:11:13 nativespace-cdp sudo[17293]: pam_unix(sudo:session): session closed for user root
Sep 30 20:11:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Themes get_theme_base --output=json
Sep 30 20:11:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:11:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 20:11:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:11:14 nativespace-cdp sudo[17311]: pam_unix(sudo:session): session closed for user root
Sep 30 20:11:14 nativespace-cdp sudo[17299]: pam_unix(sudo:session): session closed for user root
Sep 30 20:11:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=steve WpToolkitNotification send_admin_vulnerability_found_notification 'message=WP Toolkit has detected new vulnerabilities on WordPress sites under your care. It is strongly recommended to update or disable vulnerable assets on these sites. You can also configure WP Toolkit to perform automatic actions when vulnerabilities are detected. <br/><br/>The following vulnerabilities need your attention because they have to be addressed manually:<br/><br/>    <table border='"'"'0'"'"' cellpadding='"'"'5'"'"' cellspacing='"'"'0'"'"' style="border: 1px solid #ccc; margin: 5px 0; color: #737373">#012        <colgroup>#012            <col />#012            <col width="50"/>#012            <col/>#012            <col/>#012        </colgroup>#012        <tr style="border-bottom: 1px solid #ccc">#012            <td>&nbsp;</td>#012            <td colspan="2">Site:
Sep 30 20:11:15 nativespace-cdp sudo: wp-toolkit : (command continued) <span style="color: black">oneoar.co.uk</span></td>#012            <td align="right"><a href="https://nativespace-cdp.ns-cdp.com:2087/?goto_uri=/cgi/wp-toolkit/index.cgi#/list/id/8/checkSecurity/1/activeTab/1" target="_blank" style="white-space: nowrap; color: rgb(37, 156, 204); text-decoration: none">Open in panel</a></td>#012            <td>&nbsp;</td>#012        </tr>#012        <tr>#012            <td>&nbsp;</td>#012            <td align="center" valign="top"><span style="width: 67px; padding: 4px 6px; font-weight: 600; font-size: 14px; line-height: 16px; display: inline-block; text-align: center; white-space: nowrap; border-radius: 2px; color: rgb(153, 51, 0); background-color: rgb(252, 238, 215);">#012    Medium#012</span></td>#012            <td colspan="2">#012                <span style="color: black">Slider Revolution &lt;= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload</span><br/>
Sep 30 20:11:15 nativespace-cdp sudo: wp-toolkit : (command continued) <div style="line-height: 1.5em; font-size: 0.9em">The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. By default, this can only be exploited by administrators, but the ability to use and configure Slider Revolution can be extended to authors.</div>#012                <div style='"'"'line-height:1em;'"'"'><a target='"'"'_blank'"'"' href='"'"'https://wordfence.com'"'"' style='"'"'color: #737373; font-size: 0.7em; text-decoration: none;'"'"'>This record contains material that is subject to copyright.</a></div>#012                <b style="font-size: 0.8em">Source: <a
Sep 30 20:11:15 nativespace-cdp sudo: wp-toolkit : (command continued) target='"'"'_blank'"'"' href='"'"'https://www.wordfence.com/threat-intel/vulnerabilities/id/22b59b36-ba47-4c10-8f43-a29ae3b9d446?source=api-prod'"'"' style='"'"'color: inherit; text-decoration: none;'"'"'>Wordfence</a></b>#012            </td>#012            <td>&nbsp;</td>#012        </tr>#012    </table><br/>More vulnerabilities were found, please go to WP Toolkit for the full list. <br/><br/>Automatic actions can be defined on the site autoupdate policy screen.' --output=json
Sep 30 20:11:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 20:11:15 nativespace-cdp sudo[17319]: pam_unix(sudo:session): session closed for user root
Sep 30 20:11:36 nativespace-cdp sshd[17369]: Connection closed by 159.100.136.21 port 47608 [preauth]
Sep 30 20:11:48 nativespace-cdp sshd[17402]: Invalid user nisec from 207.154.215.181 port 36978
Sep 30 20:11:48 nativespace-cdp sshd[17402]: input_userauth_request: invalid user nisec [preauth]
Sep 30 20:11:48 nativespace-cdp sshd[17402]: pam_unix(sshd:auth): check pass; user unknown
Sep 30 20:11:48 nativespace-cdp sshd[17402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.215.181
Sep 30 20:11:50 nativespace-cdp sshd[17402]: Failed password for invalid user nisec from 207.154.215.181 port 36978 ssh2
Sep 30 20:11:50 nativespace-cdp sshd[17402]: Received disconnect from 207.154.215.181 port 36978:11: Bye Bye [preauth]
Sep 30 20:11:50 nativespace-cdp sshd[17402]: Disconnected from 207.154.215.181 port 36978 [preauth]
Sep 30 20:16:33 nativespace-cdp sshd[18301]: Connection closed by 159.100.136.21 port 57590 [preauth]
Sep 30 20:21:33 nativespace-cdp sshd[19555]: Connection closed by 159.100.136.21 port 38906 [preauth]
Sep 30 20:26:33 nativespace-cdp sshd[20597]: Connection closed by 159.100.136.21 port 49024 [preauth]
Sep 30 20:31:33 nativespace-cdp sshd[21651]: Connection closed by 159.100.136.21 port 58470 [preauth]
Sep 30 20:36:35 nativespace-cdp sshd[22904]: Connection closed by 159.100.136.21 port 40050 [preauth]
Sep 30 20:41:36 nativespace-cdp sshd[23888]: Connection closed by 159.100.136.21 port 49730 [preauth]
Sep 30 20:46:34 nativespace-cdp sshd[24878]: Connection closed by 159.100.136.21 port 59434 [preauth]
Sep 30 20:51:33 nativespace-cdp sshd[26124]: Connection closed by 159.100.136.21 port 40498 [preauth]
Sep 30 20:56:33 nativespace-cdp sshd[27137]: Connection closed by 159.100.136.21 port 50480 [preauth]
Sep 30 21:01:33 nativespace-cdp sshd[28234]: Connection closed by 159.100.136.21 port 59804 [preauth]
Sep 30 21:03:25 nativespace-cdp sshd[22466]: pam_unix(sshd:session): session closed for user root
Sep 30 21:03:42 nativespace-cdp sshd[22602]: pam_unix(sshd:session): session closed for user root
Sep 30 21:06:36 nativespace-cdp sshd[29683]: Connection closed by 159.100.136.21 port 41702 [preauth]
Sep 30 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:09:59 nativespace-cdp sudo[30223]: pam_unix(sudo:session): session closed for user root
Sep 30 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:09:59 nativespace-cdp sudo[30227]: pam_unix(sudo:session): session closed for user root
Sep 30 21:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 21:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:00 nativespace-cdp sudo[30230]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 21:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:00 nativespace-cdp sudo[30235]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 21:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:13 nativespace-cdp sudo[30238]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 21:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:13 nativespace-cdp sudo[30406]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 21:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:13 nativespace-cdp sudo[30409]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:14 nativespace-cdp sudo[30412]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:14 nativespace-cdp sudo[30415]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:14 nativespace-cdp sudo[30418]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 21:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:14 nativespace-cdp sudo[30421]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 21:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:17 nativespace-cdp sudo[30436]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 21:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:20 nativespace-cdp sudo[30443]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nove user-2=boldover user-3=bakery user-4=crrtipdl user-5=sosevalu user-6=oubpgvbx user-7=tstardom user-8=what user-9=havantho user-10=sketchy user-11=cath user-12=nvihkvu user-13=dancinggardener user-14=stagingerris user-15=ladburyp user-16=kategilpin user-17=design user-18=tomandle user-19=jennimil user-20=chrisdal user-21=mcdermos user-22=david user-23=careers user-24=nbhavers user-25=lucy user-26=attlebor user-27=onlycont user-28=ranxterc user-29=outdoorc user-30=hodgsonmail user-31=branko user-32=romaldki user-33=nscdp user-34=leftie user-35=foods user-36=health2045 user-37=fortunaz user-38=lkpier user-39=donnychicago user-40=steakbridieme user-41=firstre5 user-42=philmcph user-43=ctedorgu user-44=smrszyqg user-45=isleofwi user-46=nomistakes user-47=hidden user-48=barbersh user-49=tigerlet
Sep 30 21:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=cathski user-51=cambria1 user-52=ninejimm user-53=reliable user-54=cwsocial user-55=howardon user-56=pugwash user-57=paulmca1 user-58=hirefootballgame user-59=eugincou user-60=courseme user-61=asandcoc user-62=sibtoncc user-63=bwppodcast user-64=zebrapho user-65=steve user-66=fawcettd user-67=burydropin user-68=nsceres user-69=beauty user-70=darkstar user-71=eatspam user-72=dhyana user-73=nstriton user-74=brighto1 user-75=vivienn1 user-76=firstre2 user-77=oneoarco user-78=battlere user-79=bedfords user-80=newstoda user-81=belle user-82=ggaaorgu user-83=bemadonn user-84=skyfirec user-85=alexadmin user-86=innovat1 user-87=askhform user-88=stuartge user-89=nativene user-90=ultbcrra user-91=jonhartl user-92=seftvta user-93=firstres user-94=coursemc user-95=opaiscyx user-96=clarkass user-97=firstrel user-98=costestimatorco user-99=firstred user-100=highlegh user-101=southlon user-102=gilpin user-103=milloyco
Sep 30 21:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=elecleis user-105=hubmaster user-106=fetch user-107=carsinyo user-108=accooper user-109=ianrayne user-110=connectedshoppin user-111=thqkgnbz user-112=brmrjxl user-113=lakesan1 user-114=strathar user-115=atestord user-116=sarafoundation user-117=wilsonsw user-118=megacards user-119=musorguk user-120=martsblo user-121=dickemery123 user-122=ptkxhsbt user-123=hhdugcor user-124=lbhyisi user-125=magichat user-126=foundation user-127=booff user-128=markward user-129=vantagep user-130=athenare user-131=connect9 user-132=lbscrmod user-133=maflemin user-134=ulsukarm user-135=jarvisin user-136=spectrum user-137=hodgesonweb user-138=theblack user-139=agproduc user-140=still user-141=stephani user-142=leereyn1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 21:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 21:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:21 nativespace-cdp sudo[30466]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 21:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:22 nativespace-cdp sudo[30482]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-y2wfLthfj1Vr9XuU.~
Sep 30 21:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:22 nativespace-cdp sudo[30486]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-y2wfLthfj1Vr9XuU.~'
Sep 30 21:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:22 nativespace-cdp sudo[30489]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-y2wfLthfj1Vr9XuU.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 21:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:22 nativespace-cdp sudo[30493]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 21:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:22 nativespace-cdp sudo[30497]: pam_unix(sudo:session): session closed for user root
Sep 30 21:10:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 21:10:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 21:10:37 nativespace-cdp sudo[30541]: pam_unix(sudo:session): session closed for user root
Sep 30 21:11:33 nativespace-cdp sshd[30828]: Connection closed by 159.100.136.21 port 51244 [preauth]
Sep 30 21:16:33 nativespace-cdp sshd[31990]: Connection closed by 159.100.136.21 port 32810 [preauth]
Sep 30 21:21:34 nativespace-cdp sshd[740]: Connection closed by 159.100.136.21 port 42244 [preauth]
Sep 30 21:26:33 nativespace-cdp sshd[1921]: Connection closed by 159.100.136.21 port 52008 [preauth]
Sep 30 21:31:35 nativespace-cdp sshd[3121]: Connection closed by 159.100.136.21 port 60652 [preauth]
Sep 30 21:36:34 nativespace-cdp sshd[4396]: Connection closed by 159.100.136.21 port 42138 [preauth]
Sep 30 21:41:33 nativespace-cdp sshd[5392]: Connection closed by 159.100.136.21 port 50978 [preauth]
Sep 30 21:46:33 nativespace-cdp sshd[6506]: Connection closed by 159.100.136.21 port 60270 [preauth]
Sep 30 21:51:33 nativespace-cdp sshd[7657]: Connection closed by 159.100.136.21 port 41026 [preauth]
Sep 30 21:56:34 nativespace-cdp sshd[8777]: Connection closed by 159.100.136.21 port 50952 [preauth]
Sep 30 22:01:34 nativespace-cdp sshd[10002]: Connection closed by 159.100.136.21 port 60326 [preauth]
Sep 30 22:06:34 nativespace-cdp sshd[11229]: Connection closed by 159.100.136.21 port 41940 [preauth]
Sep 30 22:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 22:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:20 nativespace-cdp sudo[12003]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 22:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:20 nativespace-cdp sudo[12006]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 22:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:23 nativespace-cdp sudo[12010]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 22:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:23 nativespace-cdp sudo[12019]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 22:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:35 nativespace-cdp sudo[12022]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 22:10:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:35 nativespace-cdp sudo[12060]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 22:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:36 nativespace-cdp sudo[12063]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 22:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:36 nativespace-cdp sudo[12066]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 22:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:36 nativespace-cdp sudo[12069]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 22:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:36 nativespace-cdp sudo[12072]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 22:10:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:36 nativespace-cdp sudo[12075]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 22:10:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:39 nativespace-cdp sudo[12131]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 22:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:41 nativespace-cdp sudo[12136]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=fawcettd user-2=burydropin user-3=nsceres user-4=beauty user-5=darkstar user-6=eatspam user-7=dhyana user-8=asandcoc user-9=sibtoncc user-10=bwppodcast user-11=zebrapho user-12=steve user-13=cathski user-14=cambria1 user-15=reliable user-16=ninejimm user-17=cwsocial user-18=pugwash user-19=howardon user-20=paulmca1 user-21=hirefootballgame user-22=eugincou user-23=courseme user-24=nscdp user-25=foods user-26=leftie user-27=health2045 user-28=fortunaz user-29=lkpier user-30=firstre5 user-31=donnychicago user-32=steakbridieme user-33=ctedorgu user-34=philmcph user-35=smrszyqg user-36=isleofwi user-37=nomistakes user-38=hidden user-39=tigerlet user-40=barbersh user-41=lucy user-42=attlebor user-43=onlycont user-44=hodgsonmail user-45=outdoorc user-46=ranxterc user-47=branko user-48=romaldki
Sep 30 22:10:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=tomandle user-50=jennimil user-51=chrisdal user-52=mcdermos user-53=david user-54=nbhavers user-55=careers user-56=oubpgvbx user-57=tstardom user-58=what user-59=havantho user-60=cath user-61=sketchy user-62=nvihkvu user-63=dancinggardener user-64=stagingerris user-65=ladburyp user-66=kategilpin user-67=design user-68=nove user-69=boldover user-70=bakery user-71=crrtipdl user-72=sosevalu user-73=jarvisin user-74=spectrum user-75=hodgesonweb user-76=theblack user-77=agproduc user-78=still user-79=stephani user-80=leereyn1 user-81=foundation user-82=booff user-83=markward user-84=vantagep user-85=athenare user-86=connect9 user-87=lbscrmod user-88=maflemin user-89=ulsukarm user-90=martsblo user-91=dickemery123 user-92=ptkxhsbt user-93=hhdugcor user-94=lbhyisi user-95=magichat user-96=brmrjxl user-97=lakesan1 user-98=strathar user-99=atestord user-100=sarafoundation user-101=wilsonsw user-102=megacards
Sep 30 22:10:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=musorguk user-104=milloyco user-105=gilpin user-106=elecleis user-107=hubmaster user-108=fetch user-109=carsinyo user-110=accooper user-111=ianrayne user-112=connectedshoppin user-113=thqkgnbz user-114=ultbcrra user-115=seftvta user-116=jonhartl user-117=firstres user-118=coursemc user-119=opaiscyx user-120=clarkass user-121=firstrel user-122=costestimatorco user-123=firstred user-124=highlegh user-125=southlon user-126=alexadmin user-127=skyfirec user-128=innovat1 user-129=stuartge user-130=askhform user-131=nativene user-132=nstriton user-133=brighto1 user-134=vivienn1 user-135=firstre2 user-136=oneoarco user-137=battlere user-138=bedfords user-139=newstoda user-140=ggaaorgu user-141=belle user-142=bemadonn feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 22:10:41 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 22:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:43 nativespace-cdp sudo[12141]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 22:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:45 nativespace-cdp sudo[12155]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wx29cQcEph2w5DRg.~
Sep 30 22:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:45 nativespace-cdp sudo[12158]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wx29cQcEph2w5DRg.~'
Sep 30 22:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:45 nativespace-cdp sudo[12161]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wx29cQcEph2w5DRg.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 22:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:45 nativespace-cdp sudo[12165]: pam_unix(sudo:session): session closed for user root
Sep 30 22:10:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 22:10:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:10:45 nativespace-cdp sudo[12168]: pam_unix(sudo:session): session closed for user root
Sep 30 22:11:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 22:11:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 22:11:18 nativespace-cdp sudo[12255]: pam_unix(sudo:session): session closed for user root
Sep 30 22:11:33 nativespace-cdp sshd[12290]: Connection closed by 159.100.136.21 port 51476 [preauth]
Sep 30 22:16:33 nativespace-cdp sshd[13456]: Connection closed by 159.100.136.21 port 32932 [preauth]
Sep 30 22:21:33 nativespace-cdp sshd[14606]: Connection closed by 159.100.136.21 port 41634 [preauth]
Sep 30 22:26:33 nativespace-cdp sshd[15634]: Connection closed by 159.100.136.21 port 51198 [preauth]
Sep 30 22:31:36 nativespace-cdp sshd[16664]: Connection closed by 159.100.136.21 port 60772 [preauth]
Sep 30 22:36:33 nativespace-cdp sshd[17885]: Connection closed by 159.100.136.21 port 42528 [preauth]
Sep 30 22:41:33 nativespace-cdp sshd[18946]: Connection closed by 159.100.136.21 port 51466 [preauth]
Sep 30 22:46:33 nativespace-cdp sshd[19950]: Connection closed by 159.100.136.21 port 32792 [preauth]
Sep 30 22:51:33 nativespace-cdp sshd[21164]: Connection closed by 159.100.136.21 port 42456 [preauth]
Sep 30 22:56:33 nativespace-cdp sshd[22219]: Connection closed by 159.100.136.21 port 52372 [preauth]
Sep 30 23:01:34 nativespace-cdp sshd[23295]: Connection closed by 159.100.136.21 port 33888 [preauth]
Sep 30 23:06:33 nativespace-cdp sshd[24284]: Connection closed by 159.100.136.21 port 43636 [preauth]
Sep 30 23:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Sep 30 23:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:53 nativespace-cdp sudo[25193]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Sep 30 23:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:53 nativespace-cdp sudo[25196]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Sep 30 23:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:54 nativespace-cdp sudo[25199]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Sep 30 23:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:54 nativespace-cdp sudo[25204]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Sep 30 23:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:57 nativespace-cdp sudo[25207]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Sep 30 23:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:57 nativespace-cdp sudo[25217]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Sep 30 23:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:57 nativespace-cdp sudo[25221]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Sep 30 23:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:57 nativespace-cdp sudo[25225]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Sep 30 23:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:57 nativespace-cdp sudo[25229]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Sep 30 23:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:57 nativespace-cdp sudo[25232]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Sep 30 23:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:57 nativespace-cdp sudo[25235]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Sep 30 23:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:59 nativespace-cdp sudo[25244]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Sep 30 23:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:09:59 nativespace-cdp sudo[25249]: pam_unix(sudo:session): session closed for user root
Sep 30 23:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bakery user-2=crrtipdl user-3=sosevalu user-4=boldover user-5=nove user-6=design user-7=stagingerris user-8=dancinggardener user-9=ladburyp user-10=kategilpin user-11=havantho user-12=cath user-13=sketchy user-14=nvihkvu user-15=oubpgvbx user-16=tstardom user-17=what user-18=david user-19=careers user-20=nbhavers user-21=chrisdal user-22=mcdermos user-23=jennimil user-24=tomandle user-25=romaldki user-26=hodgsonmail user-27=ranxterc user-28=outdoorc user-29=branko user-30=onlycont user-31=lucy user-32=attlebor user-33=nomistakes user-34=hidden user-35=tigerlet user-36=barbersh user-37=smrszyqg user-38=isleofwi user-39=lkpier user-40=steakbridieme user-41=firstre5 user-42=donnychicago user-43=philmcph user-44=ctedorgu user-45=nscdp user-46=foods user-47=leftie user-48=fortunaz user-49=health2045
Sep 30 23:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=eugincou user-51=courseme user-52=hirefootballgame user-53=cwsocial user-54=pugwash user-55=howardon user-56=paulmca1 user-57=cathski user-58=cambria1 user-59=reliable user-60=ninejimm user-61=steve user-62=bwppodcast user-63=zebrapho user-64=sibtoncc user-65=asandcoc user-66=dhyana user-67=beauty user-68=darkstar user-69=eatspam user-70=nsceres user-71=fawcettd user-72=burydropin user-73=newstoda user-74=belle user-75=ggaaorgu user-76=bemadonn user-77=bedfords user-78=vivienn1 user-79=firstre2 user-80=oneoarco user-81=battlere user-82=nstriton user-83=brighto1 user-84=nativene user-85=innovat1 user-86=askhform user-87=stuartge user-88=alexadmin user-89=skyfirec user-90=firstred user-91=highlegh user-92=southlon user-93=firstrel user-94=clarkass user-95=costestimatorco user-96=opaiscyx user-97=coursemc user-98=ultbcrra user-99=jonhartl user-100=seftvta user-101=firstres user-102=connectedshoppin
Sep 30 23:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=thqkgnbz user-104=accooper user-105=ianrayne user-106=hubmaster user-107=fetch user-108=carsinyo user-109=gilpin user-110=milloyco user-111=elecleis user-112=megacards user-113=musorguk user-114=wilsonsw user-115=strathar user-116=atestord user-117=sarafoundation user-118=brmrjxl user-119=lakesan1 user-120=magichat user-121=hhdugcor user-122=lbhyisi user-123=dickemery123 user-124=ptkxhsbt user-125=martsblo user-126=ulsukarm user-127=vantagep user-128=athenare user-129=connect9 user-130=lbscrmod user-131=maflemin user-132=booff user-133=markward user-134=foundation user-135=stephani user-136=leereyn1 user-137=agproduc user-138=still user-139=spectrum user-140=theblack user-141=hodgesonweb user-142=jarvisin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Sep 30 23:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Sep 30 23:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:10:01 nativespace-cdp sudo[25260]: pam_unix(sudo:session): session closed for user root
Sep 30 23:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 23:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:10:02 nativespace-cdp sudo[25360]: pam_unix(sudo:session): session closed for user root
Sep 30 23:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eDsM6Z1svw3utIWX.~
Sep 30 23:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:10:02 nativespace-cdp sudo[25365]: pam_unix(sudo:session): session closed for user root
Sep 30 23:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eDsM6Z1svw3utIWX.~'
Sep 30 23:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:10:02 nativespace-cdp sudo[25368]: pam_unix(sudo:session): session closed for user root
Sep 30 23:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eDsM6Z1svw3utIWX.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Sep 30 23:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:10:02 nativespace-cdp sudo[25372]: pam_unix(sudo:session): session closed for user root
Sep 30 23:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Sep 30 23:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:10:02 nativespace-cdp sudo[25375]: pam_unix(sudo:session): session closed for user root
Sep 30 23:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Sep 30 23:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep 30 23:10:09 nativespace-cdp sudo[25435]: pam_unix(sudo:session): session closed for user root
Sep 30 23:11:33 nativespace-cdp sshd[25651]: Connection closed by 159.100.136.21 port 53272 [preauth]
Sep 30 23:16:33 nativespace-cdp sshd[26666]: Connection closed by 159.100.136.21 port 34994 [preauth]
Sep 30 23:21:33 nativespace-cdp sshd[27846]: Connection closed by 159.100.136.21 port 44608 [preauth]
Sep 30 23:26:34 nativespace-cdp sshd[28687]: Connection closed by 159.100.136.21 port 53826 [preauth]
Sep 30 23:31:33 nativespace-cdp sshd[29718]: Connection closed by 159.100.136.21 port 35310 [preauth]
Sep 30 23:36:33 nativespace-cdp sshd[30818]: Connection closed by 159.100.136.21 port 44040 [preauth]
Sep 30 23:41:36 nativespace-cdp sshd[31780]: Connection closed by 159.100.136.21 port 53058 [preauth]
Sep 30 23:46:33 nativespace-cdp sshd[32666]: Connection closed by 159.100.136.21 port 34018 [preauth]
Sep 30 23:51:35 nativespace-cdp sshd[1223]: Connection closed by 159.100.136.21 port 42904 [preauth]
Sep 30 23:56:34 nativespace-cdp sshd[2451]: Connection closed by 159.100.136.21 port 52348 [preauth]
Oct  1 00:01:33 nativespace-cdp sshd[3727]: Connection closed by 159.100.136.21 port 33722 [preauth]
Oct  1 00:04:44 nativespace-cdp sshd[4253]: Invalid user admin from 103.130.214.174 port 60730
Oct  1 00:04:44 nativespace-cdp sshd[4253]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:04:45 nativespace-cdp sshd[4253]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:04:45 nativespace-cdp sshd[4253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:04:47 nativespace-cdp sshd[4253]: Failed password for invalid user admin from 103.130.214.174 port 60730 ssh2
Oct  1 00:04:47 nativespace-cdp sshd[4253]: Received disconnect from 103.130.214.174 port 60730:11: Bye Bye [preauth]
Oct  1 00:04:47 nativespace-cdp sshd[4253]: Disconnected from 103.130.214.174 port 60730 [preauth]
Oct  1 00:04:58 nativespace-cdp sshd[4333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:04:58 nativespace-cdp sshd[4333]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:05:00 nativespace-cdp sshd[4333]: Failed password for root from 175.6.141.237 port 60440 ssh2
Oct  1 00:05:00 nativespace-cdp sshd[4333]: Received disconnect from 175.6.141.237 port 60440:11: Bye Bye [preauth]
Oct  1 00:05:00 nativespace-cdp sshd[4333]: Disconnected from 175.6.141.237 port 60440 [preauth]
Oct  1 00:06:33 nativespace-cdp sshd[4884]: Connection closed by 159.100.136.21 port 42168 [preauth]
Oct  1 00:06:54 nativespace-cdp sshd[4918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253  user=root
Oct  1 00:06:54 nativespace-cdp sshd[4918]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:06:56 nativespace-cdp sshd[4918]: Failed password for root from 47.97.2.253 port 54946 ssh2
Oct  1 00:06:56 nativespace-cdp sshd[4918]: Received disconnect from 47.97.2.253 port 54946:11: Bye Bye [preauth]
Oct  1 00:06:56 nativespace-cdp sshd[4918]: Disconnected from 47.97.2.253 port 54946 [preauth]
Oct  1 00:08:56 nativespace-cdp sshd[5316]: Invalid user admin from 189.8.108.39 port 56994
Oct  1 00:08:56 nativespace-cdp sshd[5316]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:08:56 nativespace-cdp sshd[5316]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:08:56 nativespace-cdp sshd[5316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:08:58 nativespace-cdp sshd[5316]: Failed password for invalid user admin from 189.8.108.39 port 56994 ssh2
Oct  1 00:09:02 nativespace-cdp sshd[5316]: Received disconnect from 189.8.108.39 port 56994:11: Bye Bye [preauth]
Oct  1 00:09:02 nativespace-cdp sshd[5316]: Disconnected from 189.8.108.39 port 56994 [preauth]
Oct  1 00:09:11 nativespace-cdp sshd[5365]: Invalid user tomcat from 140.246.228.50 port 38534
Oct  1 00:09:11 nativespace-cdp sshd[5365]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 00:09:11 nativespace-cdp sshd[5365]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:09:11 nativespace-cdp sshd[5365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:09:14 nativespace-cdp sshd[5365]: Failed password for invalid user tomcat from 140.246.228.50 port 38534 ssh2
Oct  1 00:09:14 nativespace-cdp sshd[5365]: Received disconnect from 140.246.228.50 port 38534:11: Bye Bye [preauth]
Oct  1 00:09:14 nativespace-cdp sshd[5365]: Disconnected from 140.246.228.50 port 38534 [preauth]
Oct  1 00:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 00:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:53 nativespace-cdp sudo[5457]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 00:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:53 nativespace-cdp sudo[5460]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 00:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:54 nativespace-cdp sudo[5463]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 00:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:54 nativespace-cdp sudo[5470]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 00:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:55 nativespace-cdp sshd[5440]: Invalid user admin from 189.8.108.39 port 39416
Oct  1 00:09:55 nativespace-cdp sshd[5440]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:09:55 nativespace-cdp sshd[5440]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:09:55 nativespace-cdp sshd[5440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:09:56 nativespace-cdp sudo[5473]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 00:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:56 nativespace-cdp sudo[5486]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 00:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:56 nativespace-cdp sudo[5489]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 00:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:56 nativespace-cdp sudo[5492]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 00:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:56 nativespace-cdp sudo[5495]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 00:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:56 nativespace-cdp sudo[5499]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 00:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:09:57 nativespace-cdp sudo[5502]: pam_unix(sudo:session): session closed for user root
Oct  1 00:09:57 nativespace-cdp sshd[5440]: Failed password for invalid user admin from 189.8.108.39 port 39416 ssh2
Oct  1 00:09:57 nativespace-cdp sshd[5440]: Received disconnect from 189.8.108.39 port 39416:11: Bye Bye [preauth]
Oct  1 00:09:57 nativespace-cdp sshd[5440]: Disconnected from 189.8.108.39 port 39416 [preauth]
Oct  1 00:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 00:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:10:04 nativespace-cdp sudo[5685]: pam_unix(sudo:session): session closed for user root
Oct  1 00:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 00:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:10:05 nativespace-cdp sudo[5689]: pam_unix(sudo:session): session closed for user root
Oct  1 00:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=design user-2=dancinggardener user-3=stagingerris user-4=ladburyp user-5=kategilpin user-6=havantho user-7=sketchy user-8=cath user-9=nvihkvu user-10=oubpgvbx user-11=tstardom user-12=what user-13=bakery user-14=crrtipdl user-15=sosevalu user-16=boldover user-17=nove user-18=romaldki user-19=ranxterc user-20=hodgsonmail user-21=outdoorc user-22=branko user-23=onlycont user-24=lucy user-25=attlebor user-26=david user-27=nbhavers user-28=careers user-29=chrisdal user-30=mcdermos user-31=jennimil user-32=tomandle user-33=eugincou user-34=courseme user-35=hirefootballgame user-36=cwsocial user-37=paulmca1 user-38=howardon user-39=pugwash user-40=cathski user-41=cambria1 user-42=ninejimm user-43=reliable user-44=nomistakes user-45=hidden user-46=barbersh user-47=tigerlet user-48=isleofwi
Oct  1 00:10:05 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=smrszyqg user-50=lkpier user-51=steakbridieme user-52=firstre5 user-53=donnychicago user-54=ctedorgu user-55=philmcph user-56=nscdp user-57=leftie user-58=foods user-59=health2045 user-60=fortunaz user-61=dhyana user-62=beauty user-63=darkstar user-64=eatspam user-65=nsceres user-66=fawcettd user-67=burydropin user-68=steve user-69=bwppodcast user-70=zebrapho user-71=sibtoncc user-72=asandcoc user-73=nativene user-74=innovat1 user-75=askhform user-76=stuartge user-77=alexadmin user-78=skyfirec user-79=newstoda user-80=belle user-81=ggaaorgu user-82=bemadonn user-83=bedfords user-84=vivienn1 user-85=firstre2 user-86=oneoarco user-87=battlere user-88=nstriton user-89=brighto1 user-90=connectedshoppin user-91=thqkgnbz user-92=accooper user-93=ianrayne user-94=hubmaster user-95=fetch user-96=carsinyo user-97=milloyco user-98=gilpin user-99=elecleis user-100=firstred user-101=highlegh user-102=southlon
Oct  1 00:10:05 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=clarkass user-104=firstrel user-105=costestimatorco user-106=coursemc user-107=opaiscyx user-108=ultbcrra user-109=jonhartl user-110=seftvta user-111=firstres user-112=magichat user-113=hhdugcor user-114=lbhyisi user-115=dickemery123 user-116=ptkxhsbt user-117=martsblo user-118=megacards user-119=musorguk user-120=wilsonsw user-121=strathar user-122=atestord user-123=sarafoundation user-124=brmrjxl user-125=lakesan1 user-126=stephani user-127=leereyn1 user-128=agproduc user-129=still user-130=spectrum user-131=theblack user-132=hodgesonweb user-133=jarvisin user-134=ulsukarm user-135=vantagep user-136=athenare user-137=connect9 user-138=lbscrmod user-139=maflemin user-140=booff user-141=foundation user-142=markward feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 00:10:05 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 00:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:10:05 nativespace-cdp sudo[5698]: pam_unix(sudo:session): session closed for user root
Oct  1 00:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 00:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:10:06 nativespace-cdp sudo[5704]: pam_unix(sudo:session): session closed for user root
Oct  1 00:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qj03fTjY8noHFqnZ.~
Oct  1 00:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:10:06 nativespace-cdp sudo[5709]: pam_unix(sudo:session): session closed for user root
Oct  1 00:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qj03fTjY8noHFqnZ.~'
Oct  1 00:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:10:06 nativespace-cdp sudo[5712]: pam_unix(sudo:session): session closed for user root
Oct  1 00:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qj03fTjY8noHFqnZ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 00:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:10:06 nativespace-cdp sudo[5716]: pam_unix(sudo:session): session closed for user root
Oct  1 00:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 00:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:10:06 nativespace-cdp sudo[5719]: pam_unix(sudo:session): session closed for user root
Oct  1 00:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 00:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 00:10:07 nativespace-cdp sudo[5748]: pam_unix(sudo:session): session closed for user root
Oct  1 00:10:36 nativespace-cdp sshd[5801]: Invalid user administrator from 189.8.108.39 port 43940
Oct  1 00:10:36 nativespace-cdp sshd[5801]: input_userauth_request: invalid user administrator [preauth]
Oct  1 00:10:36 nativespace-cdp sshd[5801]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:10:36 nativespace-cdp sshd[5801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:10:39 nativespace-cdp sshd[5801]: Failed password for invalid user administrator from 189.8.108.39 port 43940 ssh2
Oct  1 00:10:39 nativespace-cdp sshd[5801]: Received disconnect from 189.8.108.39 port 43940:11: Bye Bye [preauth]
Oct  1 00:10:39 nativespace-cdp sshd[5801]: Disconnected from 189.8.108.39 port 43940 [preauth]
Oct  1 00:10:57 nativespace-cdp sshd[5846]: Invalid user daniel from 103.130.214.174 port 56126
Oct  1 00:10:57 nativespace-cdp sshd[5846]: input_userauth_request: invalid user daniel [preauth]
Oct  1 00:10:57 nativespace-cdp sshd[5846]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:10:57 nativespace-cdp sshd[5846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:10:58 nativespace-cdp sshd[5846]: Failed password for invalid user daniel from 103.130.214.174 port 56126 ssh2
Oct  1 00:10:58 nativespace-cdp sshd[5846]: Received disconnect from 103.130.214.174 port 56126:11: Bye Bye [preauth]
Oct  1 00:10:58 nativespace-cdp sshd[5846]: Disconnected from 103.130.214.174 port 56126 [preauth]
Oct  1 00:11:27 nativespace-cdp sshd[5921]: Invalid user debianuser from 189.8.108.39 port 43018
Oct  1 00:11:27 nativespace-cdp sshd[5921]: input_userauth_request: invalid user debianuser [preauth]
Oct  1 00:11:27 nativespace-cdp sshd[5921]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:11:27 nativespace-cdp sshd[5921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:11:29 nativespace-cdp sshd[5921]: Failed password for invalid user debianuser from 189.8.108.39 port 43018 ssh2
Oct  1 00:11:30 nativespace-cdp sshd[5921]: Received disconnect from 189.8.108.39 port 43018:11: Bye Bye [preauth]
Oct  1 00:11:30 nativespace-cdp sshd[5921]: Disconnected from 189.8.108.39 port 43018 [preauth]
Oct  1 00:11:33 nativespace-cdp sshd[5940]: Connection closed by 159.100.136.21 port 51788 [preauth]
Oct  1 00:11:53 nativespace-cdp sshd[5972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=root
Oct  1 00:11:53 nativespace-cdp sshd[5972]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:11:55 nativespace-cdp sshd[5972]: Failed password for root from 103.130.214.174 port 44648 ssh2
Oct  1 00:11:58 nativespace-cdp sshd[5972]: Received disconnect from 103.130.214.174 port 44648:11: Bye Bye [preauth]
Oct  1 00:11:58 nativespace-cdp sshd[5972]: Disconnected from 103.130.214.174 port 44648 [preauth]
Oct  1 00:12:08 nativespace-cdp sshd[6049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:12:08 nativespace-cdp sshd[6049]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:12:11 nativespace-cdp sshd[6049]: Failed password for root from 189.8.108.39 port 35510 ssh2
Oct  1 00:12:11 nativespace-cdp sshd[6049]: Received disconnect from 189.8.108.39 port 35510:11: Bye Bye [preauth]
Oct  1 00:12:11 nativespace-cdp sshd[6049]: Disconnected from 189.8.108.39 port 35510 [preauth]
Oct  1 00:12:59 nativespace-cdp sshd[6211]: Invalid user admin from 189.8.108.39 port 41826
Oct  1 00:12:59 nativespace-cdp sshd[6211]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:12:59 nativespace-cdp sshd[6211]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:12:59 nativespace-cdp sshd[6211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:12:59 nativespace-cdp sshd[6209]: Invalid user debianuser from 103.130.214.174 port 49402
Oct  1 00:12:59 nativespace-cdp sshd[6209]: input_userauth_request: invalid user debianuser [preauth]
Oct  1 00:12:59 nativespace-cdp sshd[6209]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:12:59 nativespace-cdp sshd[6209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:13:01 nativespace-cdp sshd[6211]: Failed password for invalid user admin from 189.8.108.39 port 41826 ssh2
Oct  1 00:13:01 nativespace-cdp sshd[6209]: Failed password for invalid user debianuser from 103.130.214.174 port 49402 ssh2
Oct  1 00:13:01 nativespace-cdp sshd[6211]: Received disconnect from 189.8.108.39 port 41826:11: Bye Bye [preauth]
Oct  1 00:13:01 nativespace-cdp sshd[6211]: Disconnected from 189.8.108.39 port 41826 [preauth]
Oct  1 00:13:01 nativespace-cdp sshd[6209]: Received disconnect from 103.130.214.174 port 49402:11: Bye Bye [preauth]
Oct  1 00:13:01 nativespace-cdp sshd[6209]: Disconnected from 103.130.214.174 port 49402 [preauth]
Oct  1 00:13:41 nativespace-cdp sshd[6306]: Invalid user local from 189.8.108.39 port 42750
Oct  1 00:13:41 nativespace-cdp sshd[6306]: input_userauth_request: invalid user local [preauth]
Oct  1 00:13:41 nativespace-cdp sshd[6306]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:13:41 nativespace-cdp sshd[6306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:13:43 nativespace-cdp sshd[6306]: Failed password for invalid user local from 189.8.108.39 port 42750 ssh2
Oct  1 00:13:43 nativespace-cdp sshd[6306]: Received disconnect from 189.8.108.39 port 42750:11: Bye Bye [preauth]
Oct  1 00:13:43 nativespace-cdp sshd[6306]: Disconnected from 189.8.108.39 port 42750 [preauth]
Oct  1 00:13:57 nativespace-cdp sshd[6343]: Connection closed by 175.6.141.237 port 38808 [preauth]
Oct  1 00:13:58 nativespace-cdp sshd[6339]: Invalid user anand from 103.130.214.174 port 59494
Oct  1 00:13:58 nativespace-cdp sshd[6339]: input_userauth_request: invalid user anand [preauth]
Oct  1 00:13:58 nativespace-cdp sshd[6339]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:13:58 nativespace-cdp sshd[6339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:14:00 nativespace-cdp sshd[6339]: Failed password for invalid user anand from 103.130.214.174 port 59494 ssh2
Oct  1 00:14:29 nativespace-cdp sshd[6436]: Invalid user chris from 189.8.108.39 port 43958
Oct  1 00:14:29 nativespace-cdp sshd[6436]: input_userauth_request: invalid user chris [preauth]
Oct  1 00:14:29 nativespace-cdp sshd[6436]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:14:29 nativespace-cdp sshd[6436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:14:31 nativespace-cdp sshd[6436]: Failed password for invalid user chris from 189.8.108.39 port 43958 ssh2
Oct  1 00:14:31 nativespace-cdp sshd[6436]: Received disconnect from 189.8.108.39 port 43958:11: Bye Bye [preauth]
Oct  1 00:14:31 nativespace-cdp sshd[6436]: Disconnected from 189.8.108.39 port 43958 [preauth]
Oct  1 00:14:38 nativespace-cdp sshd[6460]: Invalid user ansible from 47.97.2.253 port 50906
Oct  1 00:14:38 nativespace-cdp sshd[6460]: input_userauth_request: invalid user ansible [preauth]
Oct  1 00:14:38 nativespace-cdp sshd[6460]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:14:38 nativespace-cdp sshd[6460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:14:40 nativespace-cdp sshd[6460]: Failed password for invalid user ansible from 47.97.2.253 port 50906 ssh2
Oct  1 00:14:40 nativespace-cdp sshd[6460]: Received disconnect from 47.97.2.253 port 50906:11: Bye Bye [preauth]
Oct  1 00:14:40 nativespace-cdp sshd[6460]: Disconnected from 47.97.2.253 port 50906 [preauth]
Oct  1 00:14:49 nativespace-cdp sshd[6339]: Received disconnect from 103.130.214.174 port 59494:11: Bye Bye [preauth]
Oct  1 00:14:49 nativespace-cdp sshd[6339]: Disconnected from 103.130.214.174 port 59494 [preauth]
Oct  1 00:15:02 nativespace-cdp sshd[6525]: Invalid user admin from 103.130.214.174 port 35308
Oct  1 00:15:02 nativespace-cdp sshd[6525]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:15:02 nativespace-cdp sshd[6525]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:15:02 nativespace-cdp sshd[6525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:15:04 nativespace-cdp sshd[6525]: Failed password for invalid user admin from 103.130.214.174 port 35308 ssh2
Oct  1 00:15:09 nativespace-cdp sshd[6525]: Received disconnect from 103.130.214.174 port 35308:11: Bye Bye [preauth]
Oct  1 00:15:09 nativespace-cdp sshd[6525]: Disconnected from 103.130.214.174 port 35308 [preauth]
Oct  1 00:15:11 nativespace-cdp sshd[6732]: Invalid user cacti from 189.8.108.39 port 48786
Oct  1 00:15:11 nativespace-cdp sshd[6732]: input_userauth_request: invalid user cacti [preauth]
Oct  1 00:15:11 nativespace-cdp sshd[6732]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:15:11 nativespace-cdp sshd[6732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:15:13 nativespace-cdp sshd[6732]: Failed password for invalid user cacti from 189.8.108.39 port 48786 ssh2
Oct  1 00:15:13 nativespace-cdp sshd[6732]: Received disconnect from 189.8.108.39 port 48786:11: Bye Bye [preauth]
Oct  1 00:15:13 nativespace-cdp sshd[6732]: Disconnected from 189.8.108.39 port 48786 [preauth]
Oct  1 00:15:26 nativespace-cdp sshd[6767]: Invalid user nexus from 140.246.228.50 port 38612
Oct  1 00:15:26 nativespace-cdp sshd[6767]: input_userauth_request: invalid user nexus [preauth]
Oct  1 00:15:26 nativespace-cdp sshd[6767]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:15:26 nativespace-cdp sshd[6767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:15:28 nativespace-cdp sshd[6767]: Failed password for invalid user nexus from 140.246.228.50 port 38612 ssh2
Oct  1 00:15:28 nativespace-cdp sshd[6767]: Received disconnect from 140.246.228.50 port 38612:11: Bye Bye [preauth]
Oct  1 00:15:28 nativespace-cdp sshd[6767]: Disconnected from 140.246.228.50 port 38612 [preauth]
Oct  1 00:15:29 nativespace-cdp sshd[6474]: Connection reset by 140.246.228.50 port 59178 [preauth]
Oct  1 00:15:38 nativespace-cdp sshd[6348]: Connection reset by 140.246.228.50 port 51538 [preauth]
Oct  1 00:15:47 nativespace-cdp sshd[6869]: Connection reset by 140.246.228.50 port 42428 [preauth]
Oct  1 00:15:49 nativespace-cdp sshd[6527]: Connection reset by 140.246.228.50 port 34780 [preauth]
Oct  1 00:15:56 nativespace-cdp sshd[6898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=root
Oct  1 00:15:56 nativespace-cdp sshd[6898]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:15:58 nativespace-cdp sshd[6905]: Invalid user adminftp from 189.8.108.39 port 49328
Oct  1 00:15:58 nativespace-cdp sshd[6905]: input_userauth_request: invalid user adminftp [preauth]
Oct  1 00:15:58 nativespace-cdp sshd[6905]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:15:58 nativespace-cdp sshd[6905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:15:58 nativespace-cdp sshd[6898]: Failed password for root from 103.130.214.174 port 53818 ssh2
Oct  1 00:16:00 nativespace-cdp sshd[6905]: Failed password for invalid user adminftp from 189.8.108.39 port 49328 ssh2
Oct  1 00:16:01 nativespace-cdp sshd[6898]: Received disconnect from 103.130.214.174 port 53818:11: Bye Bye [preauth]
Oct  1 00:16:01 nativespace-cdp sshd[6898]: Disconnected from 103.130.214.174 port 53818 [preauth]
Oct  1 00:16:01 nativespace-cdp sshd[6905]: Received disconnect from 189.8.108.39 port 49328:11: Bye Bye [preauth]
Oct  1 00:16:01 nativespace-cdp sshd[6905]: Disconnected from 189.8.108.39 port 49328 [preauth]
Oct  1 00:16:03 nativespace-cdp sshd[6923]: Invalid user tg from 140.246.228.50 port 46236
Oct  1 00:16:03 nativespace-cdp sshd[6923]: input_userauth_request: invalid user tg [preauth]
Oct  1 00:16:03 nativespace-cdp sshd[6923]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:16:03 nativespace-cdp sshd[6923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:16:05 nativespace-cdp sshd[6923]: Failed password for invalid user tg from 140.246.228.50 port 46236 ssh2
Oct  1 00:16:05 nativespace-cdp sshd[6923]: Received disconnect from 140.246.228.50 port 46236:11: Bye Bye [preauth]
Oct  1 00:16:05 nativespace-cdp sshd[6923]: Disconnected from 140.246.228.50 port 46236 [preauth]
Oct  1 00:16:18 nativespace-cdp sshd[7002]: Invalid user ubuntu from 140.246.228.50 port 50064
Oct  1 00:16:18 nativespace-cdp sshd[7002]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:16:18 nativespace-cdp sshd[7002]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:16:18 nativespace-cdp sshd[7002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:16:21 nativespace-cdp sshd[7002]: Failed password for invalid user ubuntu from 140.246.228.50 port 50064 ssh2
Oct  1 00:16:21 nativespace-cdp sshd[7002]: Received disconnect from 140.246.228.50 port 50064:11: Bye Bye [preauth]
Oct  1 00:16:21 nativespace-cdp sshd[7002]: Disconnected from 140.246.228.50 port 50064 [preauth]
Oct  1 00:16:34 nativespace-cdp sshd[7030]: Connection closed by 159.100.136.21 port 33364 [preauth]
Oct  1 00:16:36 nativespace-cdp sshd[7034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50  user=root
Oct  1 00:16:36 nativespace-cdp sshd[7034]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:16:39 nativespace-cdp sshd[7034]: Failed password for root from 140.246.228.50 port 53888 ssh2
Oct  1 00:16:41 nativespace-cdp sshd[7034]: Received disconnect from 140.246.228.50 port 53888:11: Bye Bye [preauth]
Oct  1 00:16:41 nativespace-cdp sshd[7034]: Disconnected from 140.246.228.50 port 53888 [preauth]
Oct  1 00:16:46 nativespace-cdp sshd[7057]: Invalid user daniel from 189.8.108.39 port 40998
Oct  1 00:16:46 nativespace-cdp sshd[7057]: input_userauth_request: invalid user daniel [preauth]
Oct  1 00:16:46 nativespace-cdp sshd[7057]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:16:46 nativespace-cdp sshd[7057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:16:48 nativespace-cdp sshd[7057]: Failed password for invalid user daniel from 189.8.108.39 port 40998 ssh2
Oct  1 00:16:48 nativespace-cdp sshd[7057]: Received disconnect from 189.8.108.39 port 40998:11: Bye Bye [preauth]
Oct  1 00:16:48 nativespace-cdp sshd[7057]: Disconnected from 189.8.108.39 port 40998 [preauth]
Oct  1 00:16:56 nativespace-cdp sshd[7069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:16:56 nativespace-cdp sshd[7069]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:16:56 nativespace-cdp sshd[7073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50  user=root
Oct  1 00:16:56 nativespace-cdp sshd[7073]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:16:57 nativespace-cdp sshd[7078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=root
Oct  1 00:16:57 nativespace-cdp sshd[7078]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:16:58 nativespace-cdp sshd[7069]: Failed password for root from 175.6.141.237 port 46452 ssh2
Oct  1 00:16:58 nativespace-cdp sshd[7073]: Failed password for root from 140.246.228.50 port 57706 ssh2
Oct  1 00:16:58 nativespace-cdp sshd[7069]: Received disconnect from 175.6.141.237 port 46452:11: Bye Bye [preauth]
Oct  1 00:16:58 nativespace-cdp sshd[7069]: Disconnected from 175.6.141.237 port 46452 [preauth]
Oct  1 00:16:58 nativespace-cdp sshd[7073]: Received disconnect from 140.246.228.50 port 57706:11: Bye Bye [preauth]
Oct  1 00:16:58 nativespace-cdp sshd[7073]: Disconnected from 140.246.228.50 port 57706 [preauth]
Oct  1 00:16:59 nativespace-cdp sshd[7078]: Failed password for root from 103.130.214.174 port 57110 ssh2
Oct  1 00:17:00 nativespace-cdp sshd[7078]: Received disconnect from 103.130.214.174 port 57110:11: Bye Bye [preauth]
Oct  1 00:17:00 nativespace-cdp sshd[7078]: Disconnected from 103.130.214.174 port 57110 [preauth]
Oct  1 00:17:10 nativespace-cdp sshd[7120]: Invalid user test01 from 140.246.228.50 port 33280
Oct  1 00:17:10 nativespace-cdp sshd[7120]: input_userauth_request: invalid user test01 [preauth]
Oct  1 00:17:10 nativespace-cdp sshd[7120]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:17:10 nativespace-cdp sshd[7120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:17:12 nativespace-cdp sshd[7120]: Failed password for invalid user test01 from 140.246.228.50 port 33280 ssh2
Oct  1 00:17:13 nativespace-cdp sshd[7120]: Received disconnect from 140.246.228.50 port 33280:11: Bye Bye [preauth]
Oct  1 00:17:13 nativespace-cdp sshd[7120]: Disconnected from 140.246.228.50 port 33280 [preauth]
Oct  1 00:17:26 nativespace-cdp sshd[7147]: Invalid user svn from 140.246.228.50 port 37102
Oct  1 00:17:26 nativespace-cdp sshd[7147]: input_userauth_request: invalid user svn [preauth]
Oct  1 00:17:26 nativespace-cdp sshd[7147]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:17:26 nativespace-cdp sshd[7147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:17:28 nativespace-cdp sshd[7147]: Failed password for invalid user svn from 140.246.228.50 port 37102 ssh2
Oct  1 00:17:32 nativespace-cdp sshd[7147]: Received disconnect from 140.246.228.50 port 37102:11: Bye Bye [preauth]
Oct  1 00:17:32 nativespace-cdp sshd[7147]: Disconnected from 140.246.228.50 port 37102 [preauth]
Oct  1 00:17:32 nativespace-cdp sshd[6891]: Connection closed by 175.6.141.237 port 34484 [preauth]
Oct  1 00:17:33 nativespace-cdp sshd[7157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:17:33 nativespace-cdp sshd[7157]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:17:35 nativespace-cdp sshd[7157]: Failed password for root from 189.8.108.39 port 57240 ssh2
Oct  1 00:17:35 nativespace-cdp sshd[7157]: Received disconnect from 189.8.108.39 port 57240:11: Bye Bye [preauth]
Oct  1 00:17:35 nativespace-cdp sshd[7157]: Disconnected from 189.8.108.39 port 57240 [preauth]
Oct  1 00:17:37 nativespace-cdp sshd[7167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:17:37 nativespace-cdp sshd[7167]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:17:40 nativespace-cdp sshd[7167]: Failed password for root from 175.6.141.237 port 58412 ssh2
Oct  1 00:17:40 nativespace-cdp sshd[7167]: Received disconnect from 175.6.141.237 port 58412:11: Bye Bye [preauth]
Oct  1 00:17:40 nativespace-cdp sshd[7167]: Disconnected from 175.6.141.237 port 58412 [preauth]
Oct  1 00:17:46 nativespace-cdp sshd[7218]: Invalid user test from 140.246.228.50 port 40920
Oct  1 00:17:46 nativespace-cdp sshd[7218]: input_userauth_request: invalid user test [preauth]
Oct  1 00:17:46 nativespace-cdp sshd[7218]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:17:46 nativespace-cdp sshd[7218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:17:48 nativespace-cdp sshd[7218]: Failed password for invalid user test from 140.246.228.50 port 40920 ssh2
Oct  1 00:17:49 nativespace-cdp sshd[7218]: Received disconnect from 140.246.228.50 port 40920:11: Bye Bye [preauth]
Oct  1 00:17:49 nativespace-cdp sshd[7218]: Disconnected from 140.246.228.50 port 40920 [preauth]
Oct  1 00:17:54 nativespace-cdp sshd[7320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=root
Oct  1 00:17:54 nativespace-cdp sshd[7320]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:17:57 nativespace-cdp sshd[7320]: Failed password for root from 103.130.214.174 port 54550 ssh2
Oct  1 00:17:57 nativespace-cdp sshd[7320]: Received disconnect from 103.130.214.174 port 54550:11: Bye Bye [preauth]
Oct  1 00:17:57 nativespace-cdp sshd[7320]: Disconnected from 103.130.214.174 port 54550 [preauth]
Oct  1 00:18:08 nativespace-cdp sshd[7360]: Invalid user ubuntu from 140.246.228.50 port 44750
Oct  1 00:18:08 nativespace-cdp sshd[7360]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:18:08 nativespace-cdp sshd[7360]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:18:08 nativespace-cdp sshd[7360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:18:09 nativespace-cdp sshd[7360]: Failed password for invalid user ubuntu from 140.246.228.50 port 44750 ssh2
Oct  1 00:18:10 nativespace-cdp sshd[7360]: Received disconnect from 140.246.228.50 port 44750:11: Bye Bye [preauth]
Oct  1 00:18:10 nativespace-cdp sshd[7360]: Disconnected from 140.246.228.50 port 44750 [preauth]
Oct  1 00:18:22 nativespace-cdp sshd[7397]: Invalid user bkp from 189.8.108.39 port 51762
Oct  1 00:18:22 nativespace-cdp sshd[7397]: input_userauth_request: invalid user bkp [preauth]
Oct  1 00:18:22 nativespace-cdp sshd[7397]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:18:22 nativespace-cdp sshd[7397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:18:24 nativespace-cdp sshd[7397]: Failed password for invalid user bkp from 189.8.108.39 port 51762 ssh2
Oct  1 00:18:24 nativespace-cdp sshd[7402]: Invalid user administrator from 175.6.141.237 port 42136
Oct  1 00:18:24 nativespace-cdp sshd[7402]: input_userauth_request: invalid user administrator [preauth]
Oct  1 00:18:24 nativespace-cdp sshd[7402]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:18:24 nativespace-cdp sshd[7402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:18:24 nativespace-cdp sshd[7397]: Received disconnect from 189.8.108.39 port 51762:11: Bye Bye [preauth]
Oct  1 00:18:24 nativespace-cdp sshd[7397]: Disconnected from 189.8.108.39 port 51762 [preauth]
Oct  1 00:18:25 nativespace-cdp sshd[7407]: Invalid user test from 140.246.228.50 port 48582
Oct  1 00:18:25 nativespace-cdp sshd[7407]: input_userauth_request: invalid user test [preauth]
Oct  1 00:18:25 nativespace-cdp sshd[7407]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:18:25 nativespace-cdp sshd[7407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:18:26 nativespace-cdp sshd[7402]: Failed password for invalid user administrator from 175.6.141.237 port 42136 ssh2
Oct  1 00:18:27 nativespace-cdp sshd[7407]: Failed password for invalid user test from 140.246.228.50 port 48582 ssh2
Oct  1 00:18:29 nativespace-cdp sshd[7402]: Received disconnect from 175.6.141.237 port 42136:11: Bye Bye [preauth]
Oct  1 00:18:29 nativespace-cdp sshd[7402]: Disconnected from 175.6.141.237 port 42136 [preauth]
Oct  1 00:18:32 nativespace-cdp sshd[7407]: Received disconnect from 140.246.228.50 port 48582:11: Bye Bye [preauth]
Oct  1 00:18:32 nativespace-cdp sshd[7407]: Disconnected from 140.246.228.50 port 48582 [preauth]
Oct  1 00:18:43 nativespace-cdp sshd[7498]: Invalid user ubuntu from 140.246.228.50 port 52412
Oct  1 00:18:43 nativespace-cdp sshd[7498]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:18:43 nativespace-cdp sshd[7498]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:18:43 nativespace-cdp sshd[7498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:18:45 nativespace-cdp sshd[7498]: Failed password for invalid user ubuntu from 140.246.228.50 port 52412 ssh2
Oct  1 00:18:46 nativespace-cdp sshd[7498]: Received disconnect from 140.246.228.50 port 52412:11: Bye Bye [preauth]
Oct  1 00:18:46 nativespace-cdp sshd[7498]: Disconnected from 140.246.228.50 port 52412 [preauth]
Oct  1 00:18:54 nativespace-cdp sshd[7529]: Invalid user admin from 103.130.214.174 port 38058
Oct  1 00:18:54 nativespace-cdp sshd[7529]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:18:54 nativespace-cdp sshd[7529]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:18:54 nativespace-cdp sshd[7529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:18:56 nativespace-cdp sshd[7529]: Failed password for invalid user admin from 103.130.214.174 port 38058 ssh2
Oct  1 00:18:56 nativespace-cdp sshd[7529]: Received disconnect from 103.130.214.174 port 38058:11: Bye Bye [preauth]
Oct  1 00:18:56 nativespace-cdp sshd[7529]: Disconnected from 103.130.214.174 port 38058 [preauth]
Oct  1 00:18:59 nativespace-cdp sshd[7542]: Invalid user user from 140.246.228.50 port 56218
Oct  1 00:18:59 nativespace-cdp sshd[7542]: input_userauth_request: invalid user user [preauth]
Oct  1 00:18:59 nativespace-cdp sshd[7542]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:18:59 nativespace-cdp sshd[7542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:19:01 nativespace-cdp sshd[7542]: Failed password for invalid user user from 140.246.228.50 port 56218 ssh2
Oct  1 00:19:01 nativespace-cdp sshd[7542]: Received disconnect from 140.246.228.50 port 56218:11: Bye Bye [preauth]
Oct  1 00:19:01 nativespace-cdp sshd[7542]: Disconnected from 140.246.228.50 port 56218 [preauth]
Oct  1 00:19:08 nativespace-cdp sshd[7594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=david
Oct  1 00:19:09 nativespace-cdp sshd[7602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:19:09 nativespace-cdp sshd[7602]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:19:09 nativespace-cdp sshd[7594]: Failed password for david from 189.8.108.39 port 44420 ssh2
Oct  1 00:19:09 nativespace-cdp sshd[7594]: Received disconnect from 189.8.108.39 port 44420:11: Bye Bye [preauth]
Oct  1 00:19:09 nativespace-cdp sshd[7594]: Disconnected from 189.8.108.39 port 44420 [preauth]
Oct  1 00:19:11 nativespace-cdp sshd[7602]: Failed password for root from 175.6.141.237 port 54090 ssh2
Oct  1 00:19:20 nativespace-cdp sshd[7621]: Invalid user tommy from 140.246.228.50 port 60050
Oct  1 00:19:20 nativespace-cdp sshd[7621]: input_userauth_request: invalid user tommy [preauth]
Oct  1 00:19:20 nativespace-cdp sshd[7621]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:19:20 nativespace-cdp sshd[7621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:19:21 nativespace-cdp sshd[7621]: Failed password for invalid user tommy from 140.246.228.50 port 60050 ssh2
Oct  1 00:19:21 nativespace-cdp sshd[7621]: Received disconnect from 140.246.228.50 port 60050:11: Bye Bye [preauth]
Oct  1 00:19:21 nativespace-cdp sshd[7621]: Disconnected from 140.246.228.50 port 60050 [preauth]
Oct  1 00:19:22 nativespace-cdp sshd[7602]: Received disconnect from 175.6.141.237 port 54090:11: Bye Bye [preauth]
Oct  1 00:19:22 nativespace-cdp sshd[7602]: Disconnected from 175.6.141.237 port 54090 [preauth]
Oct  1 00:19:38 nativespace-cdp sshd[7674]: Invalid user user from 140.246.228.50 port 35634
Oct  1 00:19:38 nativespace-cdp sshd[7674]: input_userauth_request: invalid user user [preauth]
Oct  1 00:19:39 nativespace-cdp sshd[7674]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:19:39 nativespace-cdp sshd[7674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:19:40 nativespace-cdp sshd[7674]: Failed password for invalid user user from 140.246.228.50 port 35634 ssh2
Oct  1 00:19:42 nativespace-cdp sshd[7674]: Received disconnect from 140.246.228.50 port 35634:11: Bye Bye [preauth]
Oct  1 00:19:42 nativespace-cdp sshd[7674]: Disconnected from 140.246.228.50 port 35634 [preauth]
Oct  1 00:19:51 nativespace-cdp sshd[7714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:19:51 nativespace-cdp sshd[7714]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:19:52 nativespace-cdp sshd[7716]: Invalid user admin from 103.130.214.174 port 59670
Oct  1 00:19:52 nativespace-cdp sshd[7716]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:19:52 nativespace-cdp sshd[7716]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:19:52 nativespace-cdp sshd[7716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:19:52 nativespace-cdp sshd[7720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:19:52 nativespace-cdp sshd[7720]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:19:53 nativespace-cdp sshd[7714]: Failed password for root from 175.6.141.237 port 37804 ssh2
Oct  1 00:19:53 nativespace-cdp sshd[7714]: Received disconnect from 175.6.141.237 port 37804:11: Bye Bye [preauth]
Oct  1 00:19:53 nativespace-cdp sshd[7714]: Disconnected from 175.6.141.237 port 37804 [preauth]
Oct  1 00:19:53 nativespace-cdp sshd[7716]: Failed password for invalid user admin from 103.130.214.174 port 59670 ssh2
Oct  1 00:19:53 nativespace-cdp sshd[7726]: Invalid user acer from 140.246.228.50 port 39440
Oct  1 00:19:53 nativespace-cdp sshd[7726]: input_userauth_request: invalid user acer [preauth]
Oct  1 00:19:53 nativespace-cdp sshd[7726]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:19:53 nativespace-cdp sshd[7726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:19:53 nativespace-cdp sshd[7716]: Received disconnect from 103.130.214.174 port 59670:11: Bye Bye [preauth]
Oct  1 00:19:53 nativespace-cdp sshd[7716]: Disconnected from 103.130.214.174 port 59670 [preauth]
Oct  1 00:19:54 nativespace-cdp sshd[7720]: Failed password for root from 189.8.108.39 port 41952 ssh2
Oct  1 00:19:54 nativespace-cdp sshd[7720]: Received disconnect from 189.8.108.39 port 41952:11: Bye Bye [preauth]
Oct  1 00:19:54 nativespace-cdp sshd[7720]: Disconnected from 189.8.108.39 port 41952 [preauth]
Oct  1 00:19:55 nativespace-cdp sshd[7726]: Failed password for invalid user acer from 140.246.228.50 port 39440 ssh2
Oct  1 00:19:55 nativespace-cdp sshd[7726]: Received disconnect from 140.246.228.50 port 39440:11: Bye Bye [preauth]
Oct  1 00:19:55 nativespace-cdp sshd[7726]: Disconnected from 140.246.228.50 port 39440 [preauth]
Oct  1 00:20:08 nativespace-cdp sshd[8117]: Invalid user support from 47.97.2.253 port 44398
Oct  1 00:20:08 nativespace-cdp sshd[8117]: input_userauth_request: invalid user support [preauth]
Oct  1 00:20:08 nativespace-cdp sshd[8117]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:20:08 nativespace-cdp sshd[8117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:20:09 nativespace-cdp sshd[8132]: Invalid user sysadmin from 140.246.228.50 port 43264
Oct  1 00:20:09 nativespace-cdp sshd[8132]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 00:20:09 nativespace-cdp sshd[8132]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:20:09 nativespace-cdp sshd[8132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:20:10 nativespace-cdp sshd[8117]: Failed password for invalid user support from 47.97.2.253 port 44398 ssh2
Oct  1 00:20:10 nativespace-cdp sshd[8117]: Received disconnect from 47.97.2.253 port 44398:11: Bye Bye [preauth]
Oct  1 00:20:10 nativespace-cdp sshd[8117]: Disconnected from 47.97.2.253 port 44398 [preauth]
Oct  1 00:20:11 nativespace-cdp sshd[8132]: Failed password for invalid user sysadmin from 140.246.228.50 port 43264 ssh2
Oct  1 00:20:12 nativespace-cdp sshd[8132]: Received disconnect from 140.246.228.50 port 43264:11: Bye Bye [preauth]
Oct  1 00:20:12 nativespace-cdp sshd[8132]: Disconnected from 140.246.228.50 port 43264 [preauth]
Oct  1 00:20:18 nativespace-cdp sshd[7512]: Connection closed by 47.97.2.253 port 60144 [preauth]
Oct  1 00:20:26 nativespace-cdp sshd[8186]: Invalid user support from 140.246.228.50 port 47092
Oct  1 00:20:26 nativespace-cdp sshd[8186]: input_userauth_request: invalid user support [preauth]
Oct  1 00:20:26 nativespace-cdp sshd[8186]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:20:26 nativespace-cdp sshd[8186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:20:27 nativespace-cdp sshd[8186]: Failed password for invalid user support from 140.246.228.50 port 47092 ssh2
Oct  1 00:20:28 nativespace-cdp sshd[8186]: Received disconnect from 140.246.228.50 port 47092:11: Bye Bye [preauth]
Oct  1 00:20:28 nativespace-cdp sshd[8186]: Disconnected from 140.246.228.50 port 47092 [preauth]
Oct  1 00:20:34 nativespace-cdp sshd[8197]: Invalid user daniel from 175.6.141.237 port 49754
Oct  1 00:20:34 nativespace-cdp sshd[8197]: input_userauth_request: invalid user daniel [preauth]
Oct  1 00:20:34 nativespace-cdp sshd[8197]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:20:34 nativespace-cdp sshd[8197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:20:36 nativespace-cdp sshd[8197]: Failed password for invalid user daniel from 175.6.141.237 port 49754 ssh2
Oct  1 00:20:36 nativespace-cdp sshd[8197]: Received disconnect from 175.6.141.237 port 49754:11: Bye Bye [preauth]
Oct  1 00:20:36 nativespace-cdp sshd[8197]: Disconnected from 175.6.141.237 port 49754 [preauth]
Oct  1 00:20:41 nativespace-cdp sshd[8211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=david
Oct  1 00:20:42 nativespace-cdp sshd[8214]: Invalid user ubuntu from 140.246.228.50 port 50916
Oct  1 00:20:42 nativespace-cdp sshd[8214]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:20:42 nativespace-cdp sshd[8214]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:20:42 nativespace-cdp sshd[8214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:20:43 nativespace-cdp sshd[8211]: Failed password for david from 189.8.108.39 port 46218 ssh2
Oct  1 00:20:43 nativespace-cdp sshd[8211]: Received disconnect from 189.8.108.39 port 46218:11: Bye Bye [preauth]
Oct  1 00:20:43 nativespace-cdp sshd[8211]: Disconnected from 189.8.108.39 port 46218 [preauth]
Oct  1 00:20:44 nativespace-cdp sshd[8214]: Failed password for invalid user ubuntu from 140.246.228.50 port 50916 ssh2
Oct  1 00:20:44 nativespace-cdp sshd[8214]: Received disconnect from 140.246.228.50 port 50916:11: Bye Bye [preauth]
Oct  1 00:20:44 nativespace-cdp sshd[8214]: Disconnected from 140.246.228.50 port 50916 [preauth]
Oct  1 00:20:56 nativespace-cdp sshd[8246]: Invalid user tuan from 47.97.2.253 port 56882
Oct  1 00:20:56 nativespace-cdp sshd[8246]: input_userauth_request: invalid user tuan [preauth]
Oct  1 00:20:56 nativespace-cdp sshd[8246]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:20:56 nativespace-cdp sshd[8246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:20:58 nativespace-cdp sshd[8246]: Failed password for invalid user tuan from 47.97.2.253 port 56882 ssh2
Oct  1 00:21:01 nativespace-cdp sshd[8246]: Received disconnect from 47.97.2.253 port 56882:11: Bye Bye [preauth]
Oct  1 00:21:01 nativespace-cdp sshd[8246]: Disconnected from 47.97.2.253 port 56882 [preauth]
Oct  1 00:21:08 nativespace-cdp sshd[8229]: Received disconnect from 103.130.214.174 port 53434:11: Bye Bye [preauth]
Oct  1 00:21:08 nativespace-cdp sshd[8229]: Disconnected from 103.130.214.174 port 53434 [preauth]
Oct  1 00:21:15 nativespace-cdp sshd[8349]: Invalid user abhishek from 140.246.228.50 port 58562
Oct  1 00:21:15 nativespace-cdp sshd[8349]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 00:21:15 nativespace-cdp sshd[8349]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:21:15 nativespace-cdp sshd[8349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:21:17 nativespace-cdp sshd[8349]: Failed password for invalid user abhishek from 140.246.228.50 port 58562 ssh2
Oct  1 00:21:17 nativespace-cdp sshd[8349]: Received disconnect from 140.246.228.50 port 58562:11: Bye Bye [preauth]
Oct  1 00:21:17 nativespace-cdp sshd[8349]: Disconnected from 140.246.228.50 port 58562 [preauth]
Oct  1 00:21:17 nativespace-cdp sshd[8357]: Invalid user admin from 175.6.141.237 port 33472
Oct  1 00:21:17 nativespace-cdp sshd[8357]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:21:17 nativespace-cdp sshd[8357]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:21:17 nativespace-cdp sshd[8357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:21:19 nativespace-cdp sshd[8357]: Failed password for invalid user admin from 175.6.141.237 port 33472 ssh2
Oct  1 00:21:19 nativespace-cdp sshd[8357]: Received disconnect from 175.6.141.237 port 33472:11: Bye Bye [preauth]
Oct  1 00:21:19 nativespace-cdp sshd[8357]: Disconnected from 175.6.141.237 port 33472 [preauth]
Oct  1 00:21:28 nativespace-cdp sshd[8378]: Invalid user jenkins from 189.8.108.39 port 53854
Oct  1 00:21:28 nativespace-cdp sshd[8378]: input_userauth_request: invalid user jenkins [preauth]
Oct  1 00:21:28 nativespace-cdp sshd[8378]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:21:28 nativespace-cdp sshd[8378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:21:30 nativespace-cdp sshd[8378]: Failed password for invalid user jenkins from 189.8.108.39 port 53854 ssh2
Oct  1 00:21:30 nativespace-cdp sshd[8378]: Received disconnect from 189.8.108.39 port 53854:11: Bye Bye [preauth]
Oct  1 00:21:30 nativespace-cdp sshd[8378]: Disconnected from 189.8.108.39 port 53854 [preauth]
Oct  1 00:21:31 nativespace-cdp sshd[8386]: Invalid user sysadmin from 140.246.228.50 port 34146
Oct  1 00:21:31 nativespace-cdp sshd[8386]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 00:21:31 nativespace-cdp sshd[8386]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:21:31 nativespace-cdp sshd[8386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:21:33 nativespace-cdp sshd[8386]: Failed password for invalid user sysadmin from 140.246.228.50 port 34146 ssh2
Oct  1 00:21:33 nativespace-cdp sshd[8393]: Connection closed by 159.100.136.21 port 42832 [preauth]
Oct  1 00:21:33 nativespace-cdp sshd[8386]: Received disconnect from 140.246.228.50 port 34146:11: Bye Bye [preauth]
Oct  1 00:21:33 nativespace-cdp sshd[8386]: Disconnected from 140.246.228.50 port 34146 [preauth]
Oct  1 00:21:44 nativespace-cdp sshd[8432]: Invalid user user6 from 47.97.2.253 port 41142
Oct  1 00:21:44 nativespace-cdp sshd[8432]: input_userauth_request: invalid user user6 [preauth]
Oct  1 00:21:45 nativespace-cdp sshd[8432]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:21:45 nativespace-cdp sshd[8432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:21:45 nativespace-cdp sshd[8427]: Invalid user administrator from 103.130.214.174 port 36044
Oct  1 00:21:45 nativespace-cdp sshd[8427]: input_userauth_request: invalid user administrator [preauth]
Oct  1 00:21:45 nativespace-cdp sshd[8427]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:21:45 nativespace-cdp sshd[8427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:21:46 nativespace-cdp sshd[8432]: Failed password for invalid user user6 from 47.97.2.253 port 41142 ssh2
Oct  1 00:21:47 nativespace-cdp sshd[8427]: Failed password for invalid user administrator from 103.130.214.174 port 36044 ssh2
Oct  1 00:21:50 nativespace-cdp sshd[8427]: Received disconnect from 103.130.214.174 port 36044:11: Bye Bye [preauth]
Oct  1 00:21:50 nativespace-cdp sshd[8427]: Disconnected from 103.130.214.174 port 36044 [preauth]
Oct  1 00:21:54 nativespace-cdp sshd[8470]: Invalid user test_user from 140.246.228.50 port 37978
Oct  1 00:21:54 nativespace-cdp sshd[8470]: input_userauth_request: invalid user test_user [preauth]
Oct  1 00:21:54 nativespace-cdp sshd[8470]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:21:54 nativespace-cdp sshd[8470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:21:55 nativespace-cdp sshd[8432]: Received disconnect from 47.97.2.253 port 41142:11: Bye Bye [preauth]
Oct  1 00:21:55 nativespace-cdp sshd[8432]: Disconnected from 47.97.2.253 port 41142 [preauth]
Oct  1 00:21:57 nativespace-cdp sshd[8470]: Failed password for invalid user test_user from 140.246.228.50 port 37978 ssh2
Oct  1 00:21:57 nativespace-cdp sshd[8470]: Received disconnect from 140.246.228.50 port 37978:11: Bye Bye [preauth]
Oct  1 00:21:57 nativespace-cdp sshd[8470]: Disconnected from 140.246.228.50 port 37978 [preauth]
Oct  1 00:22:04 nativespace-cdp sshd[8510]: Invalid user admin from 175.6.141.237 port 45428
Oct  1 00:22:04 nativespace-cdp sshd[8510]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:22:04 nativespace-cdp sshd[8510]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:22:04 nativespace-cdp sshd[8510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:22:06 nativespace-cdp sshd[8510]: Failed password for invalid user admin from 175.6.141.237 port 45428 ssh2
Oct  1 00:22:06 nativespace-cdp sshd[8510]: Received disconnect from 175.6.141.237 port 45428:11: Bye Bye [preauth]
Oct  1 00:22:06 nativespace-cdp sshd[8510]: Disconnected from 175.6.141.237 port 45428 [preauth]
Oct  1 00:22:13 nativespace-cdp sshd[8529]: Invalid user odoo from 140.246.228.50 port 41804
Oct  1 00:22:13 nativespace-cdp sshd[8529]: input_userauth_request: invalid user odoo [preauth]
Oct  1 00:22:13 nativespace-cdp sshd[8529]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:22:13 nativespace-cdp sshd[8529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:22:15 nativespace-cdp sshd[8536]: Invalid user basesystem from 189.8.108.39 port 36384
Oct  1 00:22:15 nativespace-cdp sshd[8536]: input_userauth_request: invalid user basesystem [preauth]
Oct  1 00:22:15 nativespace-cdp sshd[8536]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:22:15 nativespace-cdp sshd[8536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:22:15 nativespace-cdp sshd[8529]: Failed password for invalid user odoo from 140.246.228.50 port 41804 ssh2
Oct  1 00:22:15 nativespace-cdp sshd[8529]: Received disconnect from 140.246.228.50 port 41804:11: Bye Bye [preauth]
Oct  1 00:22:15 nativespace-cdp sshd[8529]: Disconnected from 140.246.228.50 port 41804 [preauth]
Oct  1 00:22:17 nativespace-cdp sshd[8536]: Failed password for invalid user basesystem from 189.8.108.39 port 36384 ssh2
Oct  1 00:22:17 nativespace-cdp sshd[8536]: Received disconnect from 189.8.108.39 port 36384:11: Bye Bye [preauth]
Oct  1 00:22:17 nativespace-cdp sshd[8536]: Disconnected from 189.8.108.39 port 36384 [preauth]
Oct  1 00:22:29 nativespace-cdp sshd[8560]: Invalid user ubuntu from 140.246.228.50 port 45636
Oct  1 00:22:29 nativespace-cdp sshd[8560]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:22:29 nativespace-cdp sshd[8560]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:22:29 nativespace-cdp sshd[8560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:22:31 nativespace-cdp sshd[8567]: Connection closed by 47.97.2.253 port 53626 [preauth]
Oct  1 00:22:31 nativespace-cdp sshd[8560]: Failed password for invalid user ubuntu from 140.246.228.50 port 45636 ssh2
Oct  1 00:22:31 nativespace-cdp sshd[8560]: Received disconnect from 140.246.228.50 port 45636:11: Bye Bye [preauth]
Oct  1 00:22:31 nativespace-cdp sshd[8560]: Disconnected from 140.246.228.50 port 45636 [preauth]
Oct  1 00:22:49 nativespace-cdp sshd[8599]: Invalid user debian from 103.130.214.174 port 38940
Oct  1 00:22:49 nativespace-cdp sshd[8599]: input_userauth_request: invalid user debian [preauth]
Oct  1 00:22:49 nativespace-cdp sshd[8599]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:22:49 nativespace-cdp sshd[8599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:22:50 nativespace-cdp sshd[8603]: Invalid user test from 140.246.228.50 port 49486
Oct  1 00:22:50 nativespace-cdp sshd[8603]: input_userauth_request: invalid user test [preauth]
Oct  1 00:22:50 nativespace-cdp sshd[8603]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:22:50 nativespace-cdp sshd[8603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:22:51 nativespace-cdp sshd[8599]: Failed password for invalid user debian from 103.130.214.174 port 38940 ssh2
Oct  1 00:22:52 nativespace-cdp sshd[8603]: Failed password for invalid user test from 140.246.228.50 port 49486 ssh2
Oct  1 00:22:52 nativespace-cdp sshd[8599]: Received disconnect from 103.130.214.174 port 38940:11: Bye Bye [preauth]
Oct  1 00:22:52 nativespace-cdp sshd[8599]: Disconnected from 103.130.214.174 port 38940 [preauth]
Oct  1 00:22:52 nativespace-cdp sshd[8603]: Received disconnect from 140.246.228.50 port 49486:11: Bye Bye [preauth]
Oct  1 00:22:52 nativespace-cdp sshd[8603]: Disconnected from 140.246.228.50 port 49486 [preauth]
Oct  1 00:22:54 nativespace-cdp sshd[8704]: Invalid user nisec from 175.6.141.237 port 57394
Oct  1 00:22:54 nativespace-cdp sshd[8704]: input_userauth_request: invalid user nisec [preauth]
Oct  1 00:22:54 nativespace-cdp sshd[8704]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:22:54 nativespace-cdp sshd[8704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:22:56 nativespace-cdp sshd[8704]: Failed password for invalid user nisec from 175.6.141.237 port 57394 ssh2
Oct  1 00:22:57 nativespace-cdp sshd[8704]: Received disconnect from 175.6.141.237 port 57394:11: Bye Bye [preauth]
Oct  1 00:22:57 nativespace-cdp sshd[8704]: Disconnected from 175.6.141.237 port 57394 [preauth]
Oct  1 00:23:05 nativespace-cdp sshd[8742]: Connection closed by 189.8.108.39 port 57040 [preauth]
Oct  1 00:23:07 nativespace-cdp sshd[8746]: Invalid user svn from 47.97.2.253 port 37886
Oct  1 00:23:07 nativespace-cdp sshd[8746]: input_userauth_request: invalid user svn [preauth]
Oct  1 00:23:07 nativespace-cdp sshd[8746]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:23:07 nativespace-cdp sshd[8746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:23:08 nativespace-cdp sshd[8749]: Invalid user testuser from 140.246.228.50 port 53318
Oct  1 00:23:08 nativespace-cdp sshd[8749]: input_userauth_request: invalid user testuser [preauth]
Oct  1 00:23:08 nativespace-cdp sshd[8749]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:23:08 nativespace-cdp sshd[8749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:23:09 nativespace-cdp sshd[8749]: Failed password for invalid user testuser from 140.246.228.50 port 53318 ssh2
Oct  1 00:23:10 nativespace-cdp sshd[8749]: Received disconnect from 140.246.228.50 port 53318:11: Bye Bye [preauth]
Oct  1 00:23:10 nativespace-cdp sshd[8749]: Disconnected from 140.246.228.50 port 53318 [preauth]
Oct  1 00:23:10 nativespace-cdp sshd[8746]: Failed password for invalid user svn from 47.97.2.253 port 37886 ssh2
Oct  1 00:23:10 nativespace-cdp sshd[8746]: Received disconnect from 47.97.2.253 port 37886:11: Bye Bye [preauth]
Oct  1 00:23:10 nativespace-cdp sshd[8746]: Disconnected from 47.97.2.253 port 37886 [preauth]
Oct  1 00:23:24 nativespace-cdp sshd[8793]: Invalid user steam from 140.246.228.50 port 57130
Oct  1 00:23:24 nativespace-cdp sshd[8793]: input_userauth_request: invalid user steam [preauth]
Oct  1 00:23:24 nativespace-cdp sshd[8793]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:23:24 nativespace-cdp sshd[8793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:23:26 nativespace-cdp sshd[8793]: Failed password for invalid user steam from 140.246.228.50 port 57130 ssh2
Oct  1 00:23:26 nativespace-cdp sshd[8793]: Received disconnect from 140.246.228.50 port 57130:11: Bye Bye [preauth]
Oct  1 00:23:26 nativespace-cdp sshd[8793]: Disconnected from 140.246.228.50 port 57130 [preauth]
Oct  1 00:23:45 nativespace-cdp sshd[8827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:23:45 nativespace-cdp sshd[8827]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:23:46 nativespace-cdp sshd[8837]: Invalid user usuario from 140.246.228.50 port 60968
Oct  1 00:23:46 nativespace-cdp sshd[8837]: input_userauth_request: invalid user usuario [preauth]
Oct  1 00:23:46 nativespace-cdp sshd[8837]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:23:46 nativespace-cdp sshd[8837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:23:47 nativespace-cdp sshd[8827]: Failed password for root from 175.6.141.237 port 41124 ssh2
Oct  1 00:23:47 nativespace-cdp sshd[8840]: Invalid user admin from 189.8.108.39 port 47874
Oct  1 00:23:47 nativespace-cdp sshd[8840]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:23:47 nativespace-cdp sshd[8840]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:23:47 nativespace-cdp sshd[8840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:23:47 nativespace-cdp sshd[8827]: Received disconnect from 175.6.141.237 port 41124:11: Bye Bye [preauth]
Oct  1 00:23:47 nativespace-cdp sshd[8827]: Disconnected from 175.6.141.237 port 41124 [preauth]
Oct  1 00:23:48 nativespace-cdp sshd[8837]: Failed password for invalid user usuario from 140.246.228.50 port 60968 ssh2
Oct  1 00:23:48 nativespace-cdp sshd[8837]: Received disconnect from 140.246.228.50 port 60968:11: Bye Bye [preauth]
Oct  1 00:23:48 nativespace-cdp sshd[8837]: Disconnected from 140.246.228.50 port 60968 [preauth]
Oct  1 00:23:50 nativespace-cdp sshd[8840]: Failed password for invalid user admin from 189.8.108.39 port 47874 ssh2
Oct  1 00:23:50 nativespace-cdp sshd[8840]: Received disconnect from 189.8.108.39 port 47874:11: Bye Bye [preauth]
Oct  1 00:23:50 nativespace-cdp sshd[8840]: Disconnected from 189.8.108.39 port 47874 [preauth]
Oct  1 00:23:50 nativespace-cdp sshd[8848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=root
Oct  1 00:23:50 nativespace-cdp sshd[8848]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:23:52 nativespace-cdp sshd[8848]: Failed password for root from 103.130.214.174 port 57600 ssh2
Oct  1 00:23:52 nativespace-cdp sshd[8848]: Received disconnect from 103.130.214.174 port 57600:11: Bye Bye [preauth]
Oct  1 00:23:52 nativespace-cdp sshd[8848]: Disconnected from 103.130.214.174 port 57600 [preauth]
Oct  1 00:23:57 nativespace-cdp sshd[8862]: Invalid user test01 from 47.97.2.253 port 50376
Oct  1 00:23:57 nativespace-cdp sshd[8862]: input_userauth_request: invalid user test01 [preauth]
Oct  1 00:23:57 nativespace-cdp sshd[8862]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:23:57 nativespace-cdp sshd[8862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:23:59 nativespace-cdp sshd[8862]: Failed password for invalid user test01 from 47.97.2.253 port 50376 ssh2
Oct  1 00:23:59 nativespace-cdp sshd[8862]: Received disconnect from 47.97.2.253 port 50376:11: Bye Bye [preauth]
Oct  1 00:23:59 nativespace-cdp sshd[8862]: Disconnected from 47.97.2.253 port 50376 [preauth]
Oct  1 00:24:02 nativespace-cdp sshd[8894]: Invalid user ubuntu from 140.246.228.50 port 36570
Oct  1 00:24:02 nativespace-cdp sshd[8894]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:24:02 nativespace-cdp sshd[8894]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:24:02 nativespace-cdp sshd[8894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:24:03 nativespace-cdp sshd[8894]: Failed password for invalid user ubuntu from 140.246.228.50 port 36570 ssh2
Oct  1 00:24:06 nativespace-cdp sshd[8894]: Received disconnect from 140.246.228.50 port 36570:11: Bye Bye [preauth]
Oct  1 00:24:06 nativespace-cdp sshd[8894]: Disconnected from 140.246.228.50 port 36570 [preauth]
Oct  1 00:24:19 nativespace-cdp sshd[8974]: Invalid user support from 140.246.228.50 port 40372
Oct  1 00:24:19 nativespace-cdp sshd[8974]: input_userauth_request: invalid user support [preauth]
Oct  1 00:24:19 nativespace-cdp sshd[8974]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:24:19 nativespace-cdp sshd[8974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:24:22 nativespace-cdp sshd[8974]: Failed password for invalid user support from 140.246.228.50 port 40372 ssh2
Oct  1 00:24:22 nativespace-cdp sshd[8974]: Received disconnect from 140.246.228.50 port 40372:11: Bye Bye [preauth]
Oct  1 00:24:22 nativespace-cdp sshd[8974]: Disconnected from 140.246.228.50 port 40372 [preauth]
Oct  1 00:24:29 nativespace-cdp sshd[9005]: Invalid user admin from 175.6.141.237 port 53078
Oct  1 00:24:29 nativespace-cdp sshd[9005]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:24:29 nativespace-cdp sshd[9005]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:24:29 nativespace-cdp sshd[9005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:24:32 nativespace-cdp sshd[9005]: Failed password for invalid user admin from 175.6.141.237 port 53078 ssh2
Oct  1 00:24:34 nativespace-cdp sshd[9005]: Received disconnect from 175.6.141.237 port 53078:11: Bye Bye [preauth]
Oct  1 00:24:34 nativespace-cdp sshd[9005]: Disconnected from 175.6.141.237 port 53078 [preauth]
Oct  1 00:24:35 nativespace-cdp sshd[9019]: Invalid user ubuntu from 140.246.228.50 port 44204
Oct  1 00:24:35 nativespace-cdp sshd[9019]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:24:35 nativespace-cdp sshd[9019]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:24:35 nativespace-cdp sshd[9019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:24:36 nativespace-cdp sshd[9021]: Invalid user admin from 189.8.108.39 port 39502
Oct  1 00:24:36 nativespace-cdp sshd[9021]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:24:36 nativespace-cdp sshd[9021]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:24:36 nativespace-cdp sshd[9021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:24:37 nativespace-cdp sshd[9019]: Failed password for invalid user ubuntu from 140.246.228.50 port 44204 ssh2
Oct  1 00:24:37 nativespace-cdp sshd[9019]: Received disconnect from 140.246.228.50 port 44204:11: Bye Bye [preauth]
Oct  1 00:24:37 nativespace-cdp sshd[9019]: Disconnected from 140.246.228.50 port 44204 [preauth]
Oct  1 00:24:38 nativespace-cdp sshd[9021]: Failed password for invalid user admin from 189.8.108.39 port 39502 ssh2
Oct  1 00:24:38 nativespace-cdp sshd[9021]: Received disconnect from 189.8.108.39 port 39502:11: Bye Bye [preauth]
Oct  1 00:24:38 nativespace-cdp sshd[9021]: Disconnected from 189.8.108.39 port 39502 [preauth]
Oct  1 00:24:44 nativespace-cdp sshd[9041]: Invalid user test from 47.97.2.253 port 34628
Oct  1 00:24:44 nativespace-cdp sshd[9041]: input_userauth_request: invalid user test [preauth]
Oct  1 00:24:44 nativespace-cdp sshd[9041]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:24:44 nativespace-cdp sshd[9041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:24:45 nativespace-cdp sshd[9041]: Failed password for invalid user test from 47.97.2.253 port 34628 ssh2
Oct  1 00:24:50 nativespace-cdp sshd[9041]: Received disconnect from 47.97.2.253 port 34628:11: Bye Bye [preauth]
Oct  1 00:24:50 nativespace-cdp sshd[9041]: Disconnected from 47.97.2.253 port 34628 [preauth]
Oct  1 00:24:52 nativespace-cdp sshd[9068]: Invalid user jenkins from 103.130.214.174 port 41918
Oct  1 00:24:52 nativespace-cdp sshd[9068]: input_userauth_request: invalid user jenkins [preauth]
Oct  1 00:24:52 nativespace-cdp sshd[9068]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:24:52 nativespace-cdp sshd[9068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:24:52 nativespace-cdp sshd[9070]: Invalid user superman from 140.246.228.50 port 48016
Oct  1 00:24:52 nativespace-cdp sshd[9070]: input_userauth_request: invalid user superman [preauth]
Oct  1 00:24:52 nativespace-cdp sshd[9070]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:24:52 nativespace-cdp sshd[9070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:24:54 nativespace-cdp sshd[9068]: Failed password for invalid user jenkins from 103.130.214.174 port 41918 ssh2
Oct  1 00:24:54 nativespace-cdp sshd[9070]: Failed password for invalid user superman from 140.246.228.50 port 48016 ssh2
Oct  1 00:24:54 nativespace-cdp sshd[9068]: Received disconnect from 103.130.214.174 port 41918:11: Bye Bye [preauth]
Oct  1 00:24:54 nativespace-cdp sshd[9068]: Disconnected from 103.130.214.174 port 41918 [preauth]
Oct  1 00:24:55 nativespace-cdp sshd[9070]: Received disconnect from 140.246.228.50 port 48016:11: Bye Bye [preauth]
Oct  1 00:24:55 nativespace-cdp sshd[9070]: Disconnected from 140.246.228.50 port 48016 [preauth]
Oct  1 00:25:18 nativespace-cdp sshd[9229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:25:18 nativespace-cdp sshd[9229]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:25:19 nativespace-cdp sshd[9234]: Invalid user nisec from 189.8.108.39 port 44004
Oct  1 00:25:19 nativespace-cdp sshd[9234]: input_userauth_request: invalid user nisec [preauth]
Oct  1 00:25:19 nativespace-cdp sshd[9234]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:25:19 nativespace-cdp sshd[9234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:25:20 nativespace-cdp sshd[9229]: Failed password for root from 175.6.141.237 port 36806 ssh2
Oct  1 00:25:21 nativespace-cdp sshd[9229]: Received disconnect from 175.6.141.237 port 36806:11: Bye Bye [preauth]
Oct  1 00:25:21 nativespace-cdp sshd[9229]: Disconnected from 175.6.141.237 port 36806 [preauth]
Oct  1 00:25:22 nativespace-cdp sshd[9234]: Failed password for invalid user nisec from 189.8.108.39 port 44004 ssh2
Oct  1 00:25:22 nativespace-cdp sshd[9234]: Received disconnect from 189.8.108.39 port 44004:11: Bye Bye [preauth]
Oct  1 00:25:22 nativespace-cdp sshd[9234]: Disconnected from 189.8.108.39 port 44004 [preauth]
Oct  1 00:25:26 nativespace-cdp sshd[9295]: Invalid user deploy from 140.246.228.50 port 55658
Oct  1 00:25:26 nativespace-cdp sshd[9295]: input_userauth_request: invalid user deploy [preauth]
Oct  1 00:25:26 nativespace-cdp sshd[9295]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:25:26 nativespace-cdp sshd[9295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:25:28 nativespace-cdp sshd[9295]: Failed password for invalid user deploy from 140.246.228.50 port 55658 ssh2
Oct  1 00:25:32 nativespace-cdp sshd[9295]: Received disconnect from 140.246.228.50 port 55658:11: Bye Bye [preauth]
Oct  1 00:25:32 nativespace-cdp sshd[9295]: Disconnected from 140.246.228.50 port 55658 [preauth]
Oct  1 00:25:33 nativespace-cdp sshd[9308]: Invalid user sysadmin from 47.97.2.253 port 47112
Oct  1 00:25:33 nativespace-cdp sshd[9308]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 00:25:33 nativespace-cdp sshd[9308]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:25:33 nativespace-cdp sshd[9308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:25:35 nativespace-cdp sshd[9308]: Failed password for invalid user sysadmin from 47.97.2.253 port 47112 ssh2
Oct  1 00:25:35 nativespace-cdp sshd[9308]: Received disconnect from 47.97.2.253 port 47112:11: Bye Bye [preauth]
Oct  1 00:25:35 nativespace-cdp sshd[9308]: Disconnected from 47.97.2.253 port 47112 [preauth]
Oct  1 00:25:44 nativespace-cdp sshd[9348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50  user=root
Oct  1 00:25:44 nativespace-cdp sshd[9348]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:25:46 nativespace-cdp sshd[9348]: Failed password for root from 140.246.228.50 port 59486 ssh2
Oct  1 00:25:49 nativespace-cdp sshd[9348]: Received disconnect from 140.246.228.50 port 59486:11: Bye Bye [preauth]
Oct  1 00:25:49 nativespace-cdp sshd[9348]: Disconnected from 140.246.228.50 port 59486 [preauth]
Oct  1 00:25:53 nativespace-cdp sshd[9365]: Invalid user adminftp from 103.130.214.174 port 55018
Oct  1 00:25:53 nativespace-cdp sshd[9365]: input_userauth_request: invalid user adminftp [preauth]
Oct  1 00:25:53 nativespace-cdp sshd[9365]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:25:53 nativespace-cdp sshd[9365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:25:55 nativespace-cdp sshd[9365]: Failed password for invalid user adminftp from 103.130.214.174 port 55018 ssh2
Oct  1 00:25:55 nativespace-cdp sshd[9365]: Received disconnect from 103.130.214.174 port 55018:11: Bye Bye [preauth]
Oct  1 00:25:55 nativespace-cdp sshd[9365]: Disconnected from 103.130.214.174 port 55018 [preauth]
Oct  1 00:26:03 nativespace-cdp sshd[9398]: Invalid user test from 140.246.228.50 port 35076
Oct  1 00:26:03 nativespace-cdp sshd[9398]: input_userauth_request: invalid user test [preauth]
Oct  1 00:26:03 nativespace-cdp sshd[9398]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:26:03 nativespace-cdp sshd[9398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:26:03 nativespace-cdp sshd[9400]: Invalid user admin from 189.8.108.39 port 51326
Oct  1 00:26:03 nativespace-cdp sshd[9400]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:26:03 nativespace-cdp sshd[9400]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:26:03 nativespace-cdp sshd[9400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:26:04 nativespace-cdp sshd[9398]: Failed password for invalid user test from 140.246.228.50 port 35076 ssh2
Oct  1 00:26:05 nativespace-cdp sshd[9400]: Failed password for invalid user admin from 189.8.108.39 port 51326 ssh2
Oct  1 00:26:05 nativespace-cdp sshd[9398]: Received disconnect from 140.246.228.50 port 35076:11: Bye Bye [preauth]
Oct  1 00:26:05 nativespace-cdp sshd[9398]: Disconnected from 140.246.228.50 port 35076 [preauth]
Oct  1 00:26:05 nativespace-cdp sshd[9400]: Received disconnect from 189.8.108.39 port 51326:11: Bye Bye [preauth]
Oct  1 00:26:05 nativespace-cdp sshd[9400]: Disconnected from 189.8.108.39 port 51326 [preauth]
Oct  1 00:26:06 nativespace-cdp sshd[9413]: Invalid user admin from 175.6.141.237 port 48774
Oct  1 00:26:06 nativespace-cdp sshd[9413]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:26:06 nativespace-cdp sshd[9413]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:26:06 nativespace-cdp sshd[9413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:26:08 nativespace-cdp sshd[9413]: Failed password for invalid user admin from 175.6.141.237 port 48774 ssh2
Oct  1 00:26:09 nativespace-cdp sshd[9413]: Received disconnect from 175.6.141.237 port 48774:11: Bye Bye [preauth]
Oct  1 00:26:09 nativespace-cdp sshd[9413]: Disconnected from 175.6.141.237 port 48774 [preauth]
Oct  1 00:26:24 nativespace-cdp sshd[9451]: Invalid user tuan from 140.246.228.50 port 38906
Oct  1 00:26:24 nativespace-cdp sshd[9451]: input_userauth_request: invalid user tuan [preauth]
Oct  1 00:26:24 nativespace-cdp sshd[9451]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:26:24 nativespace-cdp sshd[9451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:26:26 nativespace-cdp sshd[9451]: Failed password for invalid user tuan from 140.246.228.50 port 38906 ssh2
Oct  1 00:26:28 nativespace-cdp sshd[9459]: Invalid user test from 47.97.2.253 port 59600
Oct  1 00:26:28 nativespace-cdp sshd[9459]: input_userauth_request: invalid user test [preauth]
Oct  1 00:26:28 nativespace-cdp sshd[9459]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:26:28 nativespace-cdp sshd[9459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:26:28 nativespace-cdp sshd[9451]: Received disconnect from 140.246.228.50 port 38906:11: Bye Bye [preauth]
Oct  1 00:26:28 nativespace-cdp sshd[9451]: Disconnected from 140.246.228.50 port 38906 [preauth]
Oct  1 00:26:29 nativespace-cdp sshd[9459]: Failed password for invalid user test from 47.97.2.253 port 59600 ssh2
Oct  1 00:26:29 nativespace-cdp sshd[9459]: Received disconnect from 47.97.2.253 port 59600:11: Bye Bye [preauth]
Oct  1 00:26:29 nativespace-cdp sshd[9459]: Disconnected from 47.97.2.253 port 59600 [preauth]
Oct  1 00:26:35 nativespace-cdp sshd[9490]: Connection closed by 159.100.136.21 port 52850 [preauth]
Oct  1 00:26:38 nativespace-cdp sshd[9501]: Invalid user ubuntu from 140.246.228.50 port 42734
Oct  1 00:26:38 nativespace-cdp sshd[9501]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:26:38 nativespace-cdp sshd[9501]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:26:38 nativespace-cdp sshd[9501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:26:40 nativespace-cdp sshd[9501]: Failed password for invalid user ubuntu from 140.246.228.50 port 42734 ssh2
Oct  1 00:26:40 nativespace-cdp sshd[9501]: Received disconnect from 140.246.228.50 port 42734:11: Bye Bye [preauth]
Oct  1 00:26:40 nativespace-cdp sshd[9501]: Disconnected from 140.246.228.50 port 42734 [preauth]
Oct  1 00:26:54 nativespace-cdp sshd[9545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=root
Oct  1 00:26:54 nativespace-cdp sshd[9545]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:26:55 nativespace-cdp sshd[9540]: Invalid user debianuser from 175.6.141.237 port 60730
Oct  1 00:26:55 nativespace-cdp sshd[9540]: input_userauth_request: invalid user debianuser [preauth]
Oct  1 00:26:55 nativespace-cdp sshd[9540]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:26:55 nativespace-cdp sshd[9540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:26:56 nativespace-cdp sshd[9545]: Failed password for root from 103.130.214.174 port 52336 ssh2
Oct  1 00:26:56 nativespace-cdp sshd[9553]: Invalid user user from 140.246.228.50 port 46560
Oct  1 00:26:56 nativespace-cdp sshd[9553]: input_userauth_request: invalid user user [preauth]
Oct  1 00:26:56 nativespace-cdp sshd[9553]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:26:56 nativespace-cdp sshd[9553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:26:56 nativespace-cdp sshd[9545]: Received disconnect from 103.130.214.174 port 52336:11: Bye Bye [preauth]
Oct  1 00:26:56 nativespace-cdp sshd[9545]: Disconnected from 103.130.214.174 port 52336 [preauth]
Oct  1 00:26:57 nativespace-cdp sshd[9540]: Failed password for invalid user debianuser from 175.6.141.237 port 60730 ssh2
Oct  1 00:26:59 nativespace-cdp sshd[9553]: Failed password for invalid user user from 140.246.228.50 port 46560 ssh2
Oct  1 00:27:00 nativespace-cdp sshd[9553]: Received disconnect from 140.246.228.50 port 46560:11: Bye Bye [preauth]
Oct  1 00:27:00 nativespace-cdp sshd[9553]: Disconnected from 140.246.228.50 port 46560 [preauth]
Oct  1 00:27:06 nativespace-cdp sshd[9540]: Received disconnect from 175.6.141.237 port 60730:11: Bye Bye [preauth]
Oct  1 00:27:06 nativespace-cdp sshd[9540]: Disconnected from 175.6.141.237 port 60730 [preauth]
Oct  1 00:27:06 nativespace-cdp sshd[9531]: Received disconnect from 189.8.108.39 port 52082:11: Bye Bye [preauth]
Oct  1 00:27:06 nativespace-cdp sshd[9531]: Disconnected from 189.8.108.39 port 52082 [preauth]
Oct  1 00:27:15 nativespace-cdp sshd[9609]: Invalid user test from 140.246.228.50 port 50376
Oct  1 00:27:15 nativespace-cdp sshd[9609]: input_userauth_request: invalid user test [preauth]
Oct  1 00:27:15 nativespace-cdp sshd[9609]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:27:15 nativespace-cdp sshd[9609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:27:15 nativespace-cdp sshd[9619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253  user=root
Oct  1 00:27:15 nativespace-cdp sshd[9619]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:27:17 nativespace-cdp sshd[9609]: Failed password for invalid user test from 140.246.228.50 port 50376 ssh2
Oct  1 00:27:17 nativespace-cdp sshd[9619]: Failed password for root from 47.97.2.253 port 43856 ssh2
Oct  1 00:27:21 nativespace-cdp sshd[9619]: Received disconnect from 47.97.2.253 port 43856:11: Bye Bye [preauth]
Oct  1 00:27:21 nativespace-cdp sshd[9619]: Disconnected from 47.97.2.253 port 43856 [preauth]
Oct  1 00:27:27 nativespace-cdp sshd[9609]: Received disconnect from 140.246.228.50 port 50376:11: Bye Bye [preauth]
Oct  1 00:27:27 nativespace-cdp sshd[9609]: Disconnected from 140.246.228.50 port 50376 [preauth]
Oct  1 00:27:34 nativespace-cdp sshd[9657]: Invalid user ubuntu from 140.246.228.50 port 54198
Oct  1 00:27:34 nativespace-cdp sshd[9657]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:27:34 nativespace-cdp sshd[9657]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:27:34 nativespace-cdp sshd[9657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.228.50
Oct  1 00:27:34 nativespace-cdp sshd[9660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:27:34 nativespace-cdp sshd[9660]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:27:35 nativespace-cdp sshd[9657]: Failed password for invalid user ubuntu from 140.246.228.50 port 54198 ssh2
Oct  1 00:27:36 nativespace-cdp sshd[9657]: Received disconnect from 140.246.228.50 port 54198:11: Bye Bye [preauth]
Oct  1 00:27:36 nativespace-cdp sshd[9657]: Disconnected from 140.246.228.50 port 54198 [preauth]
Oct  1 00:27:36 nativespace-cdp sshd[9660]: Failed password for root from 189.8.108.39 port 48882 ssh2
Oct  1 00:27:36 nativespace-cdp sshd[9660]: Received disconnect from 189.8.108.39 port 48882:11: Bye Bye [preauth]
Oct  1 00:27:36 nativespace-cdp sshd[9660]: Disconnected from 189.8.108.39 port 48882 [preauth]
Oct  1 00:27:38 nativespace-cdp sshd[9669]: Invalid user bkp from 175.6.141.237 port 44452
Oct  1 00:27:38 nativespace-cdp sshd[9669]: input_userauth_request: invalid user bkp [preauth]
Oct  1 00:27:38 nativespace-cdp sshd[9669]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:27:38 nativespace-cdp sshd[9669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:27:40 nativespace-cdp sshd[9669]: Failed password for invalid user bkp from 175.6.141.237 port 44452 ssh2
Oct  1 00:27:43 nativespace-cdp sshd[9669]: Received disconnect from 175.6.141.237 port 44452:11: Bye Bye [preauth]
Oct  1 00:27:43 nativespace-cdp sshd[9669]: Disconnected from 175.6.141.237 port 44452 [preauth]
Oct  1 00:28:07 nativespace-cdp sshd[9829]: Invalid user test_user from 47.97.2.253 port 56344
Oct  1 00:28:07 nativespace-cdp sshd[9829]: input_userauth_request: invalid user test_user [preauth]
Oct  1 00:28:07 nativespace-cdp sshd[9829]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:28:07 nativespace-cdp sshd[9829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:28:09 nativespace-cdp sshd[9829]: Failed password for invalid user test_user from 47.97.2.253 port 56344 ssh2
Oct  1 00:28:13 nativespace-cdp sshd[9829]: Received disconnect from 47.97.2.253 port 56344:11: Bye Bye [preauth]
Oct  1 00:28:13 nativespace-cdp sshd[9829]: Disconnected from 47.97.2.253 port 56344 [preauth]
Oct  1 00:28:26 nativespace-cdp sshd[9869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=david
Oct  1 00:28:27 nativespace-cdp sshd[9876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:28:27 nativespace-cdp sshd[9876]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:28:28 nativespace-cdp sshd[9869]: Failed password for david from 175.6.141.237 port 56412 ssh2
Oct  1 00:28:28 nativespace-cdp sshd[9869]: Received disconnect from 175.6.141.237 port 56412:11: Bye Bye [preauth]
Oct  1 00:28:28 nativespace-cdp sshd[9869]: Disconnected from 175.6.141.237 port 56412 [preauth]
Oct  1 00:28:29 nativespace-cdp sshd[9876]: Failed password for root from 189.8.108.39 port 51418 ssh2
Oct  1 00:28:29 nativespace-cdp sshd[9876]: Received disconnect from 189.8.108.39 port 51418:11: Bye Bye [preauth]
Oct  1 00:28:29 nativespace-cdp sshd[9876]: Disconnected from 189.8.108.39 port 51418 [preauth]
Oct  1 00:28:48 nativespace-cdp sshd[9915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=root
Oct  1 00:28:48 nativespace-cdp sshd[9915]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:28:51 nativespace-cdp sshd[9915]: Failed password for root from 103.130.214.174 port 58470 ssh2
Oct  1 00:28:51 nativespace-cdp sshd[9915]: Received disconnect from 103.130.214.174 port 58470:11: Bye Bye [preauth]
Oct  1 00:28:51 nativespace-cdp sshd[9915]: Disconnected from 103.130.214.174 port 58470 [preauth]
Oct  1 00:29:02 nativespace-cdp sshd[9956]: Invalid user ubuntu from 47.97.2.253 port 40596
Oct  1 00:29:02 nativespace-cdp sshd[9956]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:29:02 nativespace-cdp sshd[9956]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:29:02 nativespace-cdp sshd[9956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:29:05 nativespace-cdp sshd[9956]: Failed password for invalid user ubuntu from 47.97.2.253 port 40596 ssh2
Oct  1 00:29:07 nativespace-cdp sshd[9956]: Received disconnect from 47.97.2.253 port 40596:11: Bye Bye [preauth]
Oct  1 00:29:07 nativespace-cdp sshd[9956]: Disconnected from 47.97.2.253 port 40596 [preauth]
Oct  1 00:29:17 nativespace-cdp sshd[9995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:29:17 nativespace-cdp sshd[9995]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:29:19 nativespace-cdp sshd[9995]: Failed password for root from 175.6.141.237 port 40146 ssh2
Oct  1 00:29:20 nativespace-cdp sshd[9995]: Received disconnect from 175.6.141.237 port 40146:11: Bye Bye [preauth]
Oct  1 00:29:20 nativespace-cdp sshd[9995]: Disconnected from 175.6.141.237 port 40146 [preauth]
Oct  1 00:29:21 nativespace-cdp sshd[10003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:29:21 nativespace-cdp sshd[10003]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:29:23 nativespace-cdp sshd[10003]: Failed password for root from 189.8.108.39 port 58682 ssh2
Oct  1 00:29:23 nativespace-cdp sshd[10003]: Received disconnect from 189.8.108.39 port 58682:11: Bye Bye [preauth]
Oct  1 00:29:23 nativespace-cdp sshd[10003]: Disconnected from 189.8.108.39 port 58682 [preauth]
Oct  1 00:29:53 nativespace-cdp sshd[10062]: Invalid user ubuntu from 47.97.2.253 port 53080
Oct  1 00:29:53 nativespace-cdp sshd[10062]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:29:53 nativespace-cdp sshd[10062]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:29:53 nativespace-cdp sshd[10062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:29:56 nativespace-cdp sshd[10062]: Failed password for invalid user ubuntu from 47.97.2.253 port 53080 ssh2
Oct  1 00:29:57 nativespace-cdp sshd[10062]: Received disconnect from 47.97.2.253 port 53080:11: Bye Bye [preauth]
Oct  1 00:29:57 nativespace-cdp sshd[10062]: Disconnected from 47.97.2.253 port 53080 [preauth]
Oct  1 00:30:01 nativespace-cdp sshd[10060]: Connection closed by 103.130.214.174 port 35882 [preauth]
Oct  1 00:30:11 nativespace-cdp sshd[10266]: Invalid user admin from 175.6.141.237 port 52112
Oct  1 00:30:11 nativespace-cdp sshd[10266]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:30:11 nativespace-cdp sshd[10266]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:30:11 nativespace-cdp sshd[10266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:30:11 nativespace-cdp sshd[10268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:30:11 nativespace-cdp sshd[10268]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:30:13 nativespace-cdp sshd[10266]: Failed password for invalid user admin from 175.6.141.237 port 52112 ssh2
Oct  1 00:30:13 nativespace-cdp sshd[10266]: Received disconnect from 175.6.141.237 port 52112:11: Bye Bye [preauth]
Oct  1 00:30:13 nativespace-cdp sshd[10266]: Disconnected from 175.6.141.237 port 52112 [preauth]
Oct  1 00:30:13 nativespace-cdp sshd[10268]: Failed password for root from 189.8.108.39 port 38618 ssh2
Oct  1 00:30:14 nativespace-cdp sshd[10268]: Received disconnect from 189.8.108.39 port 38618:11: Bye Bye [preauth]
Oct  1 00:30:14 nativespace-cdp sshd[10268]: Disconnected from 189.8.108.39 port 38618 [preauth]
Oct  1 00:30:45 nativespace-cdp sshd[10379]: Invalid user abhishek from 47.97.2.253 port 37334
Oct  1 00:30:45 nativespace-cdp sshd[10379]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 00:30:45 nativespace-cdp sshd[10379]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:30:45 nativespace-cdp sshd[10379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:30:47 nativespace-cdp sshd[10379]: Failed password for invalid user abhishek from 47.97.2.253 port 37334 ssh2
Oct  1 00:30:47 nativespace-cdp sshd[10379]: Received disconnect from 47.97.2.253 port 37334:11: Bye Bye [preauth]
Oct  1 00:30:47 nativespace-cdp sshd[10379]: Disconnected from 47.97.2.253 port 37334 [preauth]
Oct  1 00:30:57 nativespace-cdp sshd[10400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:30:57 nativespace-cdp sshd[10400]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:30:58 nativespace-cdp sshd[10400]: Failed password for root from 189.8.108.39 port 48954 ssh2
Oct  1 00:30:59 nativespace-cdp sshd[10400]: Received disconnect from 189.8.108.39 port 48954:11: Bye Bye [preauth]
Oct  1 00:30:59 nativespace-cdp sshd[10400]: Disconnected from 189.8.108.39 port 48954 [preauth]
Oct  1 00:30:59 nativespace-cdp sshd[10403]: Invalid user basesystem from 103.130.214.174 port 35666
Oct  1 00:30:59 nativespace-cdp sshd[10403]: input_userauth_request: invalid user basesystem [preauth]
Oct  1 00:30:59 nativespace-cdp sshd[10403]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:30:59 nativespace-cdp sshd[10403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:30:59 nativespace-cdp sshd[10407]: Invalid user debian from 175.6.141.237 port 35846
Oct  1 00:30:59 nativespace-cdp sshd[10407]: input_userauth_request: invalid user debian [preauth]
Oct  1 00:30:59 nativespace-cdp sshd[10407]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:30:59 nativespace-cdp sshd[10407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:31:01 nativespace-cdp sshd[10403]: Failed password for invalid user basesystem from 103.130.214.174 port 35666 ssh2
Oct  1 00:31:01 nativespace-cdp sshd[10407]: Failed password for invalid user debian from 175.6.141.237 port 35846 ssh2
Oct  1 00:31:01 nativespace-cdp sshd[10407]: Received disconnect from 175.6.141.237 port 35846:11: Bye Bye [preauth]
Oct  1 00:31:01 nativespace-cdp sshd[10407]: Disconnected from 175.6.141.237 port 35846 [preauth]
Oct  1 00:31:02 nativespace-cdp sshd[10403]: Received disconnect from 103.130.214.174 port 35666:11: Bye Bye [preauth]
Oct  1 00:31:02 nativespace-cdp sshd[10403]: Disconnected from 103.130.214.174 port 35666 [preauth]
Oct  1 00:31:33 nativespace-cdp sshd[10507]: Connection closed by 159.100.136.21 port 33998 [preauth]
Oct  1 00:31:37 nativespace-cdp sshd[10513]: Invalid user usuario from 47.97.2.253 port 49818
Oct  1 00:31:37 nativespace-cdp sshd[10513]: input_userauth_request: invalid user usuario [preauth]
Oct  1 00:31:37 nativespace-cdp sshd[10513]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:31:37 nativespace-cdp sshd[10513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:31:39 nativespace-cdp sshd[10513]: Failed password for invalid user usuario from 47.97.2.253 port 49818 ssh2
Oct  1 00:31:39 nativespace-cdp sshd[10513]: Received disconnect from 47.97.2.253 port 49818:11: Bye Bye [preauth]
Oct  1 00:31:39 nativespace-cdp sshd[10513]: Disconnected from 47.97.2.253 port 49818 [preauth]
Oct  1 00:31:46 nativespace-cdp sshd[10527]: Connection closed by 189.8.108.39 port 41248 [preauth]
Oct  1 00:31:47 nativespace-cdp sshd[10538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=david
Oct  1 00:31:49 nativespace-cdp sshd[10538]: Failed password for david from 175.6.141.237 port 47806 ssh2
Oct  1 00:31:49 nativespace-cdp sshd[10538]: Received disconnect from 175.6.141.237 port 47806:11: Bye Bye [preauth]
Oct  1 00:31:49 nativespace-cdp sshd[10538]: Disconnected from 175.6.141.237 port 47806 [preauth]
Oct  1 00:32:05 nativespace-cdp sshd[10591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=root
Oct  1 00:32:05 nativespace-cdp sshd[10591]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:32:07 nativespace-cdp sshd[10591]: Failed password for root from 103.130.214.174 port 58202 ssh2
Oct  1 00:32:10 nativespace-cdp sshd[10591]: Received disconnect from 103.130.214.174 port 58202:11: Bye Bye [preauth]
Oct  1 00:32:10 nativespace-cdp sshd[10591]: Disconnected from 103.130.214.174 port 58202 [preauth]
Oct  1 00:32:27 nativespace-cdp sshd[10633]: Invalid user user from 47.97.2.253 port 34076
Oct  1 00:32:27 nativespace-cdp sshd[10633]: input_userauth_request: invalid user user [preauth]
Oct  1 00:32:27 nativespace-cdp sshd[10633]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:32:27 nativespace-cdp sshd[10633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:32:29 nativespace-cdp sshd[10633]: Failed password for invalid user user from 47.97.2.253 port 34076 ssh2
Oct  1 00:32:31 nativespace-cdp sshd[10633]: Received disconnect from 47.97.2.253 port 34076:11: Bye Bye [preauth]
Oct  1 00:32:31 nativespace-cdp sshd[10633]: Disconnected from 47.97.2.253 port 34076 [preauth]
Oct  1 00:32:33 nativespace-cdp sshd[10643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:32:33 nativespace-cdp sshd[10643]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:32:35 nativespace-cdp sshd[10643]: Failed password for root from 189.8.108.39 port 52776 ssh2
Oct  1 00:32:35 nativespace-cdp sshd[10643]: Received disconnect from 189.8.108.39 port 52776:11: Bye Bye [preauth]
Oct  1 00:32:35 nativespace-cdp sshd[10643]: Disconnected from 189.8.108.39 port 52776 [preauth]
Oct  1 00:32:36 nativespace-cdp sshd[10650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:32:36 nativespace-cdp sshd[10650]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:32:38 nativespace-cdp sshd[10650]: Failed password for root from 175.6.141.237 port 59772 ssh2
Oct  1 00:32:40 nativespace-cdp sshd[10650]: Received disconnect from 175.6.141.237 port 59772:11: Bye Bye [preauth]
Oct  1 00:32:40 nativespace-cdp sshd[10650]: Disconnected from 175.6.141.237 port 59772 [preauth]
Oct  1 00:33:14 nativespace-cdp sshd[10814]: Invalid user cacti from 103.130.214.174 port 43952
Oct  1 00:33:14 nativespace-cdp sshd[10814]: input_userauth_request: invalid user cacti [preauth]
Oct  1 00:33:15 nativespace-cdp sshd[10814]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:33:15 nativespace-cdp sshd[10814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:33:16 nativespace-cdp sshd[10814]: Failed password for invalid user cacti from 103.130.214.174 port 43952 ssh2
Oct  1 00:33:16 nativespace-cdp sshd[10814]: Received disconnect from 103.130.214.174 port 43952:11: Bye Bye [preauth]
Oct  1 00:33:16 nativespace-cdp sshd[10814]: Disconnected from 103.130.214.174 port 43952 [preauth]
Oct  1 00:33:19 nativespace-cdp sshd[10833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:33:19 nativespace-cdp sshd[10833]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:33:21 nativespace-cdp sshd[10833]: Failed password for root from 189.8.108.39 port 59694 ssh2
Oct  1 00:33:29 nativespace-cdp sshd[10843]: Invalid user sysadmin from 47.97.2.253 port 46560
Oct  1 00:33:29 nativespace-cdp sshd[10843]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 00:33:29 nativespace-cdp sshd[10843]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:33:29 nativespace-cdp sshd[10843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:33:30 nativespace-cdp sshd[10833]: Received disconnect from 189.8.108.39 port 59694:11: Bye Bye [preauth]
Oct  1 00:33:30 nativespace-cdp sshd[10833]: Disconnected from 189.8.108.39 port 59694 [preauth]
Oct  1 00:33:31 nativespace-cdp sshd[10843]: Failed password for invalid user sysadmin from 47.97.2.253 port 46560 ssh2
Oct  1 00:33:31 nativespace-cdp sshd[10843]: Received disconnect from 47.97.2.253 port 46560:11: Bye Bye [preauth]
Oct  1 00:33:31 nativespace-cdp sshd[10843]: Disconnected from 47.97.2.253 port 46560 [preauth]
Oct  1 00:34:13 nativespace-cdp sshd[10939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:34:13 nativespace-cdp sshd[10939]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:34:13 nativespace-cdp sshd[10941]: Invalid user anand from 175.6.141.237 port 55450
Oct  1 00:34:13 nativespace-cdp sshd[10941]: input_userauth_request: invalid user anand [preauth]
Oct  1 00:34:13 nativespace-cdp sshd[10941]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:34:13 nativespace-cdp sshd[10941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:34:15 nativespace-cdp sshd[10939]: Failed password for root from 189.8.108.39 port 58364 ssh2
Oct  1 00:34:15 nativespace-cdp sshd[10941]: Failed password for invalid user anand from 175.6.141.237 port 55450 ssh2
Oct  1 00:34:15 nativespace-cdp sshd[10939]: Received disconnect from 189.8.108.39 port 58364:11: Bye Bye [preauth]
Oct  1 00:34:15 nativespace-cdp sshd[10939]: Disconnected from 189.8.108.39 port 58364 [preauth]
Oct  1 00:34:15 nativespace-cdp sshd[10941]: Received disconnect from 175.6.141.237 port 55450:11: Bye Bye [preauth]
Oct  1 00:34:15 nativespace-cdp sshd[10941]: Disconnected from 175.6.141.237 port 55450 [preauth]
Oct  1 00:34:21 nativespace-cdp sshd[10954]: Connection closed by 103.130.214.174 port 47050 [preauth]
Oct  1 00:34:30 nativespace-cdp sshd[10969]: Invalid user odoo from 47.97.2.253 port 59044
Oct  1 00:34:30 nativespace-cdp sshd[10969]: input_userauth_request: invalid user odoo [preauth]
Oct  1 00:34:30 nativespace-cdp sshd[10969]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:34:30 nativespace-cdp sshd[10969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:34:32 nativespace-cdp sshd[10969]: Failed password for invalid user odoo from 47.97.2.253 port 59044 ssh2
Oct  1 00:34:32 nativespace-cdp sshd[10969]: Received disconnect from 47.97.2.253 port 59044:11: Bye Bye [preauth]
Oct  1 00:34:32 nativespace-cdp sshd[10969]: Disconnected from 47.97.2.253 port 59044 [preauth]
Oct  1 00:35:01 nativespace-cdp sshd[11183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:35:01 nativespace-cdp sshd[11183]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:35:04 nativespace-cdp sshd[11183]: Failed password for root from 175.6.141.237 port 39182 ssh2
Oct  1 00:35:04 nativespace-cdp sshd[11183]: Received disconnect from 175.6.141.237 port 39182:11: Bye Bye [preauth]
Oct  1 00:35:04 nativespace-cdp sshd[11183]: Disconnected from 175.6.141.237 port 39182 [preauth]
Oct  1 00:35:05 nativespace-cdp sshd[11301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:35:05 nativespace-cdp sshd[11301]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:35:07 nativespace-cdp sshd[11301]: Failed password for root from 189.8.108.39 port 41956 ssh2
Oct  1 00:35:12 nativespace-cdp sshd[11301]: Received disconnect from 189.8.108.39 port 41956:11: Bye Bye [preauth]
Oct  1 00:35:12 nativespace-cdp sshd[11301]: Disconnected from 189.8.108.39 port 41956 [preauth]
Oct  1 00:35:21 nativespace-cdp sshd[11452]: Invalid user superman from 47.97.2.253 port 43300
Oct  1 00:35:21 nativespace-cdp sshd[11452]: input_userauth_request: invalid user superman [preauth]
Oct  1 00:35:21 nativespace-cdp sshd[11452]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:35:21 nativespace-cdp sshd[11452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:35:23 nativespace-cdp sshd[11452]: Failed password for invalid user superman from 47.97.2.253 port 43300 ssh2
Oct  1 00:35:23 nativespace-cdp sshd[11452]: Received disconnect from 47.97.2.253 port 43300:11: Bye Bye [preauth]
Oct  1 00:35:23 nativespace-cdp sshd[11452]: Disconnected from 47.97.2.253 port 43300 [preauth]
Oct  1 00:35:27 nativespace-cdp sshd[11459]: Invalid user admin from 103.130.214.174 port 48482
Oct  1 00:35:27 nativespace-cdp sshd[11459]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:35:27 nativespace-cdp sshd[11459]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:35:27 nativespace-cdp sshd[11459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:35:30 nativespace-cdp sshd[11459]: Failed password for invalid user admin from 103.130.214.174 port 48482 ssh2
Oct  1 00:35:30 nativespace-cdp sshd[11459]: Received disconnect from 103.130.214.174 port 48482:11: Bye Bye [preauth]
Oct  1 00:35:30 nativespace-cdp sshd[11459]: Disconnected from 103.130.214.174 port 48482 [preauth]
Oct  1 00:35:54 nativespace-cdp sshd[11569]: Invalid user local from 175.6.141.237 port 51154
Oct  1 00:35:54 nativespace-cdp sshd[11569]: input_userauth_request: invalid user local [preauth]
Oct  1 00:35:54 nativespace-cdp sshd[11569]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:35:54 nativespace-cdp sshd[11569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:35:56 nativespace-cdp sshd[11569]: Failed password for invalid user local from 175.6.141.237 port 51154 ssh2
Oct  1 00:35:56 nativespace-cdp sshd[11569]: Received disconnect from 175.6.141.237 port 51154:11: Bye Bye [preauth]
Oct  1 00:35:56 nativespace-cdp sshd[11569]: Disconnected from 175.6.141.237 port 51154 [preauth]
Oct  1 00:35:59 nativespace-cdp sshd[11579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:35:59 nativespace-cdp sshd[11579]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:36:01 nativespace-cdp sshd[11579]: Failed password for root from 189.8.108.39 port 51416 ssh2
Oct  1 00:36:04 nativespace-cdp sshd[11579]: Received disconnect from 189.8.108.39 port 51416:11: Bye Bye [preauth]
Oct  1 00:36:04 nativespace-cdp sshd[11579]: Disconnected from 189.8.108.39 port 51416 [preauth]
Oct  1 00:36:18 nativespace-cdp sshd[11632]: Invalid user support from 47.97.2.253 port 55782
Oct  1 00:36:18 nativespace-cdp sshd[11632]: input_userauth_request: invalid user support [preauth]
Oct  1 00:36:18 nativespace-cdp sshd[11632]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:36:18 nativespace-cdp sshd[11632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:36:20 nativespace-cdp sshd[11632]: Failed password for invalid user support from 47.97.2.253 port 55782 ssh2
Oct  1 00:36:20 nativespace-cdp sshd[11632]: Received disconnect from 47.97.2.253 port 55782:11: Bye Bye [preauth]
Oct  1 00:36:20 nativespace-cdp sshd[11632]: Disconnected from 47.97.2.253 port 55782 [preauth]
Oct  1 00:36:33 nativespace-cdp sshd[11668]: Connection closed by 159.100.136.21 port 43904 [preauth]
Oct  1 00:36:37 nativespace-cdp sshd[11673]: Invalid user admin from 103.130.214.174 port 38060
Oct  1 00:36:37 nativespace-cdp sshd[11673]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:36:37 nativespace-cdp sshd[11673]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:36:37 nativespace-cdp sshd[11673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:36:39 nativespace-cdp sshd[11673]: Failed password for invalid user admin from 103.130.214.174 port 38060 ssh2
Oct  1 00:36:39 nativespace-cdp sshd[11673]: Received disconnect from 103.130.214.174 port 38060:11: Bye Bye [preauth]
Oct  1 00:36:39 nativespace-cdp sshd[11673]: Disconnected from 103.130.214.174 port 38060 [preauth]
Oct  1 00:36:47 nativespace-cdp sshd[11693]: Invalid user admin from 175.6.141.237 port 34886
Oct  1 00:36:47 nativespace-cdp sshd[11693]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:36:47 nativespace-cdp sshd[11693]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:36:47 nativespace-cdp sshd[11693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:36:49 nativespace-cdp sshd[11693]: Failed password for invalid user admin from 175.6.141.237 port 34886 ssh2
Oct  1 00:36:49 nativespace-cdp sshd[11693]: Received disconnect from 175.6.141.237 port 34886:11: Bye Bye [preauth]
Oct  1 00:36:49 nativespace-cdp sshd[11693]: Disconnected from 175.6.141.237 port 34886 [preauth]
Oct  1 00:36:50 nativespace-cdp sshd[11705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39  user=root
Oct  1 00:36:50 nativespace-cdp sshd[11705]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:36:52 nativespace-cdp sshd[11705]: Failed password for root from 189.8.108.39 port 38480 ssh2
Oct  1 00:36:56 nativespace-cdp sshd[11705]: Received disconnect from 189.8.108.39 port 38480:11: Bye Bye [preauth]
Oct  1 00:36:56 nativespace-cdp sshd[11705]: Disconnected from 189.8.108.39 port 38480 [preauth]
Oct  1 00:37:09 nativespace-cdp sshd[11758]: Invalid user ubuntu from 47.97.2.253 port 40038
Oct  1 00:37:09 nativespace-cdp sshd[11758]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:37:09 nativespace-cdp sshd[11758]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:37:09 nativespace-cdp sshd[11758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:37:11 nativespace-cdp sshd[11758]: Failed password for invalid user ubuntu from 47.97.2.253 port 40038 ssh2
Oct  1 00:37:11 nativespace-cdp sshd[11758]: Received disconnect from 47.97.2.253 port 40038:11: Bye Bye [preauth]
Oct  1 00:37:11 nativespace-cdp sshd[11758]: Disconnected from 47.97.2.253 port 40038 [preauth]
Oct  1 00:37:35 nativespace-cdp sshd[11811]: Invalid user administrator from 175.6.141.237 port 46844
Oct  1 00:37:35 nativespace-cdp sshd[11811]: input_userauth_request: invalid user administrator [preauth]
Oct  1 00:37:35 nativespace-cdp sshd[11811]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:37:35 nativespace-cdp sshd[11811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:37:36 nativespace-cdp sshd[11811]: Failed password for invalid user administrator from 175.6.141.237 port 46844 ssh2
Oct  1 00:37:36 nativespace-cdp sshd[11811]: Received disconnect from 175.6.141.237 port 46844:11: Bye Bye [preauth]
Oct  1 00:37:36 nativespace-cdp sshd[11811]: Disconnected from 175.6.141.237 port 46844 [preauth]
Oct  1 00:37:40 nativespace-cdp sshd[11825]: Invalid user admin from 189.8.108.39 port 53954
Oct  1 00:37:40 nativespace-cdp sshd[11825]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:37:40 nativespace-cdp sshd[11825]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:37:40 nativespace-cdp sshd[11825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:37:41 nativespace-cdp sshd[11825]: Failed password for invalid user admin from 189.8.108.39 port 53954 ssh2
Oct  1 00:37:42 nativespace-cdp sshd[11825]: Received disconnect from 189.8.108.39 port 53954:11: Bye Bye [preauth]
Oct  1 00:37:42 nativespace-cdp sshd[11825]: Disconnected from 189.8.108.39 port 53954 [preauth]
Oct  1 00:37:48 nativespace-cdp sshd[11838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=david
Oct  1 00:37:50 nativespace-cdp sshd[11838]: Failed password for david from 103.130.214.174 port 58052 ssh2
Oct  1 00:37:50 nativespace-cdp sshd[11838]: Received disconnect from 103.130.214.174 port 58052:11: Bye Bye [preauth]
Oct  1 00:37:50 nativespace-cdp sshd[11838]: Disconnected from 103.130.214.174 port 58052 [preauth]
Oct  1 00:38:03 nativespace-cdp sshd[11876]: Invalid user steam from 47.97.2.253 port 52522
Oct  1 00:38:03 nativespace-cdp sshd[11876]: input_userauth_request: invalid user steam [preauth]
Oct  1 00:38:03 nativespace-cdp sshd[11876]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:38:03 nativespace-cdp sshd[11876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:38:04 nativespace-cdp sshd[11876]: Failed password for invalid user steam from 47.97.2.253 port 52522 ssh2
Oct  1 00:38:04 nativespace-cdp sshd[11876]: Received disconnect from 47.97.2.253 port 52522:11: Bye Bye [preauth]
Oct  1 00:38:04 nativespace-cdp sshd[11876]: Disconnected from 47.97.2.253 port 52522 [preauth]
Oct  1 00:38:21 nativespace-cdp sshd[12004]: Invalid user cacti from 175.6.141.237 port 58804
Oct  1 00:38:21 nativespace-cdp sshd[12004]: input_userauth_request: invalid user cacti [preauth]
Oct  1 00:38:21 nativespace-cdp sshd[12004]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:38:21 nativespace-cdp sshd[12004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:38:23 nativespace-cdp sshd[12004]: Failed password for invalid user cacti from 175.6.141.237 port 58804 ssh2
Oct  1 00:38:23 nativespace-cdp sshd[12004]: Received disconnect from 175.6.141.237 port 58804:11: Bye Bye [preauth]
Oct  1 00:38:23 nativespace-cdp sshd[12004]: Disconnected from 175.6.141.237 port 58804 [preauth]
Oct  1 00:38:25 nativespace-cdp sshd[12013]: Invalid user tony from 189.8.108.39 port 59978
Oct  1 00:38:25 nativespace-cdp sshd[12013]: input_userauth_request: invalid user tony [preauth]
Oct  1 00:38:25 nativespace-cdp sshd[12013]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:38:25 nativespace-cdp sshd[12013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:38:27 nativespace-cdp sshd[12013]: Failed password for invalid user tony from 189.8.108.39 port 59978 ssh2
Oct  1 00:38:35 nativespace-cdp sshd[12013]: Received disconnect from 189.8.108.39 port 59978:11: Bye Bye [preauth]
Oct  1 00:38:35 nativespace-cdp sshd[12013]: Disconnected from 189.8.108.39 port 59978 [preauth]
Oct  1 00:39:03 nativespace-cdp sshd[12078]: Invalid user user from 47.97.2.253 port 36784
Oct  1 00:39:03 nativespace-cdp sshd[12078]: input_userauth_request: invalid user user [preauth]
Oct  1 00:39:03 nativespace-cdp sshd[12078]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:39:03 nativespace-cdp sshd[12078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:39:05 nativespace-cdp sshd[12078]: Failed password for invalid user user from 47.97.2.253 port 36784 ssh2
Oct  1 00:39:06 nativespace-cdp sshd[12078]: Received disconnect from 47.97.2.253 port 36784:11: Bye Bye [preauth]
Oct  1 00:39:06 nativespace-cdp sshd[12078]: Disconnected from 47.97.2.253 port 36784 [preauth]
Oct  1 00:39:09 nativespace-cdp sshd[12114]: Invalid user basesystem from 175.6.141.237 port 42534
Oct  1 00:39:09 nativespace-cdp sshd[12114]: input_userauth_request: invalid user basesystem [preauth]
Oct  1 00:39:09 nativespace-cdp sshd[12114]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:39:09 nativespace-cdp sshd[12114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237
Oct  1 00:39:10 nativespace-cdp sshd[12112]: Invalid user debian from 189.8.108.39 port 33224
Oct  1 00:39:10 nativespace-cdp sshd[12112]: input_userauth_request: invalid user debian [preauth]
Oct  1 00:39:10 nativespace-cdp sshd[12112]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:39:10 nativespace-cdp sshd[12112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.39
Oct  1 00:39:11 nativespace-cdp sshd[12112]: Failed password for invalid user debian from 189.8.108.39 port 33224 ssh2
Oct  1 00:39:11 nativespace-cdp sshd[12114]: Failed password for invalid user basesystem from 175.6.141.237 port 42534 ssh2
Oct  1 00:39:14 nativespace-cdp sshd[12112]: Received disconnect from 189.8.108.39 port 33224:11: Bye Bye [preauth]
Oct  1 00:39:14 nativespace-cdp sshd[12112]: Disconnected from 189.8.108.39 port 33224 [preauth]
Oct  1 00:39:14 nativespace-cdp sshd[12114]: Received disconnect from 175.6.141.237 port 42534:11: Bye Bye [preauth]
Oct  1 00:39:14 nativespace-cdp sshd[12114]: Disconnected from 175.6.141.237 port 42534 [preauth]
Oct  1 00:39:59 nativespace-cdp sshd[12210]: Invalid user administrator from 103.130.214.174 port 60510
Oct  1 00:39:59 nativespace-cdp sshd[12210]: input_userauth_request: invalid user administrator [preauth]
Oct  1 00:39:59 nativespace-cdp sshd[12210]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:39:59 nativespace-cdp sshd[12210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:39:59 nativespace-cdp sshd[12221]: Connection closed by 47.97.2.253 port 49274 [preauth]
Oct  1 00:40:00 nativespace-cdp sshd[12213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:40:00 nativespace-cdp sshd[12213]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:40:00 nativespace-cdp sshd[12210]: Failed password for invalid user administrator from 103.130.214.174 port 60510 ssh2
Oct  1 00:40:01 nativespace-cdp sshd[12210]: Received disconnect from 103.130.214.174 port 60510:11: Bye Bye [preauth]
Oct  1 00:40:01 nativespace-cdp sshd[12210]: Disconnected from 103.130.214.174 port 60510 [preauth]
Oct  1 00:40:01 nativespace-cdp sshd[12213]: Failed password for root from 175.6.141.237 port 54496 ssh2
Oct  1 00:40:02 nativespace-cdp sshd[12213]: Received disconnect from 175.6.141.237 port 54496:11: Bye Bye [preauth]
Oct  1 00:40:02 nativespace-cdp sshd[12213]: Disconnected from 175.6.141.237 port 54496 [preauth]
Oct  1 00:40:49 nativespace-cdp sshd[12498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.141.237  user=root
Oct  1 00:40:49 nativespace-cdp sshd[12498]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:40:50 nativespace-cdp sshd[12490]: Invalid user test from 47.97.2.253 port 33526
Oct  1 00:40:50 nativespace-cdp sshd[12490]: input_userauth_request: invalid user test [preauth]
Oct  1 00:40:50 nativespace-cdp sshd[12490]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:40:50 nativespace-cdp sshd[12490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:40:51 nativespace-cdp sshd[12498]: Failed password for root from 175.6.141.237 port 38222 ssh2
Oct  1 00:40:52 nativespace-cdp sshd[12498]: Received disconnect from 175.6.141.237 port 38222:11: Bye Bye [preauth]
Oct  1 00:40:52 nativespace-cdp sshd[12498]: Disconnected from 175.6.141.237 port 38222 [preauth]
Oct  1 00:40:52 nativespace-cdp sshd[12490]: Failed password for invalid user test from 47.97.2.253 port 33526 ssh2
Oct  1 00:40:53 nativespace-cdp sshd[12490]: Received disconnect from 47.97.2.253 port 33526:11: Bye Bye [preauth]
Oct  1 00:40:53 nativespace-cdp sshd[12490]: Disconnected from 47.97.2.253 port 33526 [preauth]
Oct  1 00:41:04 nativespace-cdp sshd[12544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=root
Oct  1 00:41:04 nativespace-cdp sshd[12544]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:41:06 nativespace-cdp sshd[12544]: Failed password for root from 103.130.214.174 port 37114 ssh2
Oct  1 00:41:09 nativespace-cdp sshd[12544]: Received disconnect from 103.130.214.174 port 37114:11: Bye Bye [preauth]
Oct  1 00:41:09 nativespace-cdp sshd[12544]: Disconnected from 103.130.214.174 port 37114 [preauth]
Oct  1 00:41:33 nativespace-cdp sshd[12600]: Connection closed by 159.100.136.21 port 52960 [preauth]
Oct  1 00:41:43 nativespace-cdp sshd[12617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253  user=root
Oct  1 00:41:43 nativespace-cdp sshd[12617]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:41:45 nativespace-cdp sshd[12617]: Failed password for root from 47.97.2.253 port 46016 ssh2
Oct  1 00:41:45 nativespace-cdp sshd[12617]: Received disconnect from 47.97.2.253 port 46016:11: Bye Bye [preauth]
Oct  1 00:41:45 nativespace-cdp sshd[12617]: Disconnected from 47.97.2.253 port 46016 [preauth]
Oct  1 00:42:12 nativespace-cdp sshd[12677]: Invalid user tony from 103.130.214.174 port 51592
Oct  1 00:42:12 nativespace-cdp sshd[12677]: input_userauth_request: invalid user tony [preauth]
Oct  1 00:42:12 nativespace-cdp sshd[12677]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:42:12 nativespace-cdp sshd[12677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:42:14 nativespace-cdp sshd[12677]: Failed password for invalid user tony from 103.130.214.174 port 51592 ssh2
Oct  1 00:42:16 nativespace-cdp sshd[12677]: Received disconnect from 103.130.214.174 port 51592:11: Bye Bye [preauth]
Oct  1 00:42:16 nativespace-cdp sshd[12677]: Disconnected from 103.130.214.174 port 51592 [preauth]
Oct  1 00:42:39 nativespace-cdp sshd[12731]: Invalid user test from 47.97.2.253 port 58500
Oct  1 00:42:39 nativespace-cdp sshd[12731]: input_userauth_request: invalid user test [preauth]
Oct  1 00:42:39 nativespace-cdp sshd[12731]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:42:39 nativespace-cdp sshd[12731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:42:42 nativespace-cdp sshd[12731]: Failed password for invalid user test from 47.97.2.253 port 58500 ssh2
Oct  1 00:42:42 nativespace-cdp sshd[12731]: Received disconnect from 47.97.2.253 port 58500:11: Bye Bye [preauth]
Oct  1 00:42:42 nativespace-cdp sshd[12731]: Disconnected from 47.97.2.253 port 58500 [preauth]
Oct  1 00:43:21 nativespace-cdp sshd[12920]: Connection closed by 103.130.214.174 port 58250 [preauth]
Oct  1 00:43:35 nativespace-cdp sshd[12956]: Invalid user acer from 47.97.2.253 port 42754
Oct  1 00:43:35 nativespace-cdp sshd[12956]: input_userauth_request: invalid user acer [preauth]
Oct  1 00:43:35 nativespace-cdp sshd[12956]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:43:35 nativespace-cdp sshd[12956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:43:36 nativespace-cdp sshd[12956]: Failed password for invalid user acer from 47.97.2.253 port 42754 ssh2
Oct  1 00:43:37 nativespace-cdp sshd[12956]: Received disconnect from 47.97.2.253 port 42754:11: Bye Bye [preauth]
Oct  1 00:43:37 nativespace-cdp sshd[12956]: Disconnected from 47.97.2.253 port 42754 [preauth]
Oct  1 00:44:24 nativespace-cdp sshd[13084]: Invalid user ubuntu from 47.97.2.253 port 55236
Oct  1 00:44:24 nativespace-cdp sshd[13084]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:44:24 nativespace-cdp sshd[13084]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:44:24 nativespace-cdp sshd[13084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:44:26 nativespace-cdp sshd[13084]: Failed password for invalid user ubuntu from 47.97.2.253 port 55236 ssh2
Oct  1 00:44:26 nativespace-cdp sshd[13084]: Received disconnect from 47.97.2.253 port 55236:11: Bye Bye [preauth]
Oct  1 00:44:26 nativespace-cdp sshd[13084]: Disconnected from 47.97.2.253 port 55236 [preauth]
Oct  1 00:44:27 nativespace-cdp sshd[13104]: Invalid user admin from 103.130.214.174 port 33976
Oct  1 00:44:27 nativespace-cdp sshd[13104]: input_userauth_request: invalid user admin [preauth]
Oct  1 00:44:27 nativespace-cdp sshd[13104]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:44:27 nativespace-cdp sshd[13104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:44:29 nativespace-cdp sshd[13104]: Failed password for invalid user admin from 103.130.214.174 port 33976 ssh2
Oct  1 00:44:29 nativespace-cdp sshd[13104]: Received disconnect from 103.130.214.174 port 33976:11: Bye Bye [preauth]
Oct  1 00:44:29 nativespace-cdp sshd[13104]: Disconnected from 103.130.214.174 port 33976 [preauth]
Oct  1 00:45:19 nativespace-cdp sshd[13370]: Invalid user tommy from 47.97.2.253 port 39488
Oct  1 00:45:19 nativespace-cdp sshd[13370]: input_userauth_request: invalid user tommy [preauth]
Oct  1 00:45:19 nativespace-cdp sshd[13370]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:45:19 nativespace-cdp sshd[13370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:45:20 nativespace-cdp sshd[13370]: Failed password for invalid user tommy from 47.97.2.253 port 39488 ssh2
Oct  1 00:45:20 nativespace-cdp sshd[13370]: Received disconnect from 47.97.2.253 port 39488:11: Bye Bye [preauth]
Oct  1 00:45:20 nativespace-cdp sshd[13370]: Disconnected from 47.97.2.253 port 39488 [preauth]
Oct  1 00:45:33 nativespace-cdp sshd[13394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174  user=root
Oct  1 00:45:33 nativespace-cdp sshd[13394]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:45:35 nativespace-cdp sshd[13394]: Failed password for root from 103.130.214.174 port 37690 ssh2
Oct  1 00:45:42 nativespace-cdp sshd[13394]: Received disconnect from 103.130.214.174 port 37690:11: Bye Bye [preauth]
Oct  1 00:45:42 nativespace-cdp sshd[13394]: Disconnected from 103.130.214.174 port 37690 [preauth]
Oct  1 00:46:12 nativespace-cdp sshd[13519]: Invalid user test from 47.97.2.253 port 51978
Oct  1 00:46:12 nativespace-cdp sshd[13519]: input_userauth_request: invalid user test [preauth]
Oct  1 00:46:12 nativespace-cdp sshd[13519]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:46:12 nativespace-cdp sshd[13519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:46:15 nativespace-cdp sshd[13519]: Failed password for invalid user test from 47.97.2.253 port 51978 ssh2
Oct  1 00:46:15 nativespace-cdp sshd[13519]: Received disconnect from 47.97.2.253 port 51978:11: Bye Bye [preauth]
Oct  1 00:46:15 nativespace-cdp sshd[13519]: Disconnected from 47.97.2.253 port 51978 [preauth]
Oct  1 00:46:33 nativespace-cdp sshd[13565]: Connection closed by 159.100.136.21 port 34328 [preauth]
Oct  1 00:46:39 nativespace-cdp sshd[13581]: Invalid user chris from 103.130.214.174 port 59498
Oct  1 00:46:39 nativespace-cdp sshd[13581]: input_userauth_request: invalid user chris [preauth]
Oct  1 00:46:39 nativespace-cdp sshd[13581]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:46:39 nativespace-cdp sshd[13581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:46:41 nativespace-cdp sshd[13581]: Failed password for invalid user chris from 103.130.214.174 port 59498 ssh2
Oct  1 00:46:48 nativespace-cdp sshd[13581]: Received disconnect from 103.130.214.174 port 59498:11: Bye Bye [preauth]
Oct  1 00:46:48 nativespace-cdp sshd[13581]: Disconnected from 103.130.214.174 port 59498 [preauth]
Oct  1 00:47:11 nativespace-cdp sshd[13672]: Invalid user deploy from 47.97.2.253 port 36232
Oct  1 00:47:11 nativespace-cdp sshd[13672]: input_userauth_request: invalid user deploy [preauth]
Oct  1 00:47:11 nativespace-cdp sshd[13672]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:47:11 nativespace-cdp sshd[13672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:47:13 nativespace-cdp sshd[13672]: Failed password for invalid user deploy from 47.97.2.253 port 36232 ssh2
Oct  1 00:47:14 nativespace-cdp sshd[13672]: Received disconnect from 47.97.2.253 port 36232:11: Bye Bye [preauth]
Oct  1 00:47:14 nativespace-cdp sshd[13672]: Disconnected from 47.97.2.253 port 36232 [preauth]
Oct  1 00:47:49 nativespace-cdp sshd[13741]: Received disconnect from 103.130.214.174 port 52342:11: Bye Bye [preauth]
Oct  1 00:47:49 nativespace-cdp sshd[13741]: Disconnected from 103.130.214.174 port 52342 [preauth]
Oct  1 00:48:11 nativespace-cdp sshd[13788]: Invalid user thomas from 47.97.2.253 port 48720
Oct  1 00:48:11 nativespace-cdp sshd[13788]: input_userauth_request: invalid user thomas [preauth]
Oct  1 00:48:11 nativespace-cdp sshd[13788]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:48:11 nativespace-cdp sshd[13788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:48:13 nativespace-cdp sshd[13788]: Failed password for invalid user thomas from 47.97.2.253 port 48720 ssh2
Oct  1 00:48:13 nativespace-cdp sshd[13788]: Received disconnect from 47.97.2.253 port 48720:11: Bye Bye [preauth]
Oct  1 00:48:13 nativespace-cdp sshd[13788]: Disconnected from 47.97.2.253 port 48720 [preauth]
Oct  1 00:48:52 nativespace-cdp sshd[13950]: Invalid user bkp from 103.130.214.174 port 44366
Oct  1 00:48:52 nativespace-cdp sshd[13950]: input_userauth_request: invalid user bkp [preauth]
Oct  1 00:48:52 nativespace-cdp sshd[13950]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:48:52 nativespace-cdp sshd[13950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:48:55 nativespace-cdp sshd[13950]: Failed password for invalid user bkp from 103.130.214.174 port 44366 ssh2
Oct  1 00:49:00 nativespace-cdp sshd[13950]: Received disconnect from 103.130.214.174 port 44366:11: Bye Bye [preauth]
Oct  1 00:49:00 nativespace-cdp sshd[13950]: Disconnected from 103.130.214.174 port 44366 [preauth]
Oct  1 00:49:03 nativespace-cdp sshd[13980]: Invalid user ubuntu from 47.97.2.253 port 32972
Oct  1 00:49:03 nativespace-cdp sshd[13980]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:49:03 nativespace-cdp sshd[13980]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:49:03 nativespace-cdp sshd[13980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:49:05 nativespace-cdp sshd[13980]: Failed password for invalid user ubuntu from 47.97.2.253 port 32972 ssh2
Oct  1 00:49:07 nativespace-cdp sshd[13980]: Received disconnect from 47.97.2.253 port 32972:11: Bye Bye [preauth]
Oct  1 00:49:07 nativespace-cdp sshd[13980]: Disconnected from 47.97.2.253 port 32972 [preauth]
Oct  1 00:49:52 nativespace-cdp sshd[14127]: Invalid user local from 103.130.214.174 port 37706
Oct  1 00:49:52 nativespace-cdp sshd[14127]: input_userauth_request: invalid user local [preauth]
Oct  1 00:49:52 nativespace-cdp sshd[14127]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:49:52 nativespace-cdp sshd[14127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.214.174
Oct  1 00:49:54 nativespace-cdp sshd[14127]: Failed password for invalid user local from 103.130.214.174 port 37706 ssh2
Oct  1 00:49:55 nativespace-cdp sshd[14127]: Received disconnect from 103.130.214.174 port 37706:11: Bye Bye [preauth]
Oct  1 00:49:55 nativespace-cdp sshd[14127]: Disconnected from 103.130.214.174 port 37706 [preauth]
Oct  1 00:50:04 nativespace-cdp sshd[14316]: Invalid user username from 47.97.2.253 port 45458
Oct  1 00:50:04 nativespace-cdp sshd[14316]: input_userauth_request: invalid user username [preauth]
Oct  1 00:50:04 nativespace-cdp sshd[14316]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:50:04 nativespace-cdp sshd[14316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:50:05 nativespace-cdp sshd[14316]: Failed password for invalid user username from 47.97.2.253 port 45458 ssh2
Oct  1 00:50:05 nativespace-cdp sshd[14316]: Received disconnect from 47.97.2.253 port 45458:11: Bye Bye [preauth]
Oct  1 00:50:05 nativespace-cdp sshd[14316]: Disconnected from 47.97.2.253 port 45458 [preauth]
Oct  1 00:51:05 nativespace-cdp sshd[14645]: Connection closed by 47.97.2.253 port 57946 [preauth]
Oct  1 00:51:33 nativespace-cdp sshd[14705]: Connection closed by 159.100.136.21 port 43900 [preauth]
Oct  1 00:51:53 nativespace-cdp sshd[14743]: Invalid user user from 47.97.2.253 port 42200
Oct  1 00:51:53 nativespace-cdp sshd[14743]: input_userauth_request: invalid user user [preauth]
Oct  1 00:51:53 nativespace-cdp sshd[14743]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:51:53 nativespace-cdp sshd[14743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:51:55 nativespace-cdp sshd[14743]: Failed password for invalid user user from 47.97.2.253 port 42200 ssh2
Oct  1 00:51:55 nativespace-cdp sshd[14743]: Received disconnect from 47.97.2.253 port 42200:11: Bye Bye [preauth]
Oct  1 00:51:55 nativespace-cdp sshd[14743]: Disconnected from 47.97.2.253 port 42200 [preauth]
Oct  1 00:52:47 nativespace-cdp sshd[14867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253  user=root
Oct  1 00:52:47 nativespace-cdp sshd[14867]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 00:52:49 nativespace-cdp sshd[14867]: Failed password for root from 47.97.2.253 port 54688 ssh2
Oct  1 00:52:49 nativespace-cdp sshd[14867]: Received disconnect from 47.97.2.253 port 54688:11: Bye Bye [preauth]
Oct  1 00:52:49 nativespace-cdp sshd[14867]: Disconnected from 47.97.2.253 port 54688 [preauth]
Oct  1 00:53:45 nativespace-cdp sshd[15069]: Invalid user ubuntu from 47.97.2.253 port 38940
Oct  1 00:53:45 nativespace-cdp sshd[15069]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:53:45 nativespace-cdp sshd[15069]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:53:45 nativespace-cdp sshd[15069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:53:47 nativespace-cdp sshd[15069]: Failed password for invalid user ubuntu from 47.97.2.253 port 38940 ssh2
Oct  1 00:53:47 nativespace-cdp sshd[15069]: Received disconnect from 47.97.2.253 port 38940:11: Bye Bye [preauth]
Oct  1 00:53:47 nativespace-cdp sshd[15069]: Disconnected from 47.97.2.253 port 38940 [preauth]
Oct  1 00:54:47 nativespace-cdp sshd[15208]: Invalid user user from 47.97.2.253 port 51426
Oct  1 00:54:47 nativespace-cdp sshd[15208]: input_userauth_request: invalid user user [preauth]
Oct  1 00:54:47 nativespace-cdp sshd[15208]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:54:47 nativespace-cdp sshd[15208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:54:49 nativespace-cdp sshd[15208]: Failed password for invalid user user from 47.97.2.253 port 51426 ssh2
Oct  1 00:54:49 nativespace-cdp sshd[15208]: Received disconnect from 47.97.2.253 port 51426:11: Bye Bye [preauth]
Oct  1 00:54:49 nativespace-cdp sshd[15208]: Disconnected from 47.97.2.253 port 51426 [preauth]
Oct  1 00:55:44 nativespace-cdp sshd[15510]: Invalid user nexus from 47.97.2.253 port 35680
Oct  1 00:55:44 nativespace-cdp sshd[15510]: input_userauth_request: invalid user nexus [preauth]
Oct  1 00:55:44 nativespace-cdp sshd[15510]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:55:44 nativespace-cdp sshd[15510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:55:46 nativespace-cdp sshd[15510]: Failed password for invalid user nexus from 47.97.2.253 port 35680 ssh2
Oct  1 00:55:46 nativespace-cdp sshd[15510]: Received disconnect from 47.97.2.253 port 35680:11: Bye Bye [preauth]
Oct  1 00:55:46 nativespace-cdp sshd[15510]: Disconnected from 47.97.2.253 port 35680 [preauth]
Oct  1 00:56:33 nativespace-cdp sshd[15603]: Connection closed by 159.100.136.21 port 53416 [preauth]
Oct  1 00:56:38 nativespace-cdp sshd[15620]: Invalid user testuser from 47.97.2.253 port 48168
Oct  1 00:56:38 nativespace-cdp sshd[15620]: input_userauth_request: invalid user testuser [preauth]
Oct  1 00:56:38 nativespace-cdp sshd[15620]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:56:38 nativespace-cdp sshd[15620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:56:40 nativespace-cdp sshd[15620]: Failed password for invalid user testuser from 47.97.2.253 port 48168 ssh2
Oct  1 00:56:40 nativespace-cdp sshd[15620]: Received disconnect from 47.97.2.253 port 48168:11: Bye Bye [preauth]
Oct  1 00:56:40 nativespace-cdp sshd[15620]: Disconnected from 47.97.2.253 port 48168 [preauth]
Oct  1 00:57:34 nativespace-cdp sshd[15776]: Invalid user test from 47.97.2.253 port 60662
Oct  1 00:57:34 nativespace-cdp sshd[15776]: input_userauth_request: invalid user test [preauth]
Oct  1 00:57:34 nativespace-cdp sshd[15776]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:57:34 nativespace-cdp sshd[15776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:57:35 nativespace-cdp sshd[15776]: Failed password for invalid user test from 47.97.2.253 port 60662 ssh2
Oct  1 00:57:36 nativespace-cdp sshd[15776]: Received disconnect from 47.97.2.253 port 60662:11: Bye Bye [preauth]
Oct  1 00:57:36 nativespace-cdp sshd[15776]: Disconnected from 47.97.2.253 port 60662 [preauth]
Oct  1 00:58:28 nativespace-cdp sshd[16053]: Invalid user ubuntu from 47.97.2.253 port 44916
Oct  1 00:58:28 nativespace-cdp sshd[16053]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 00:58:28 nativespace-cdp sshd[16053]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 00:58:28 nativespace-cdp sshd[16053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.2.253
Oct  1 00:58:29 nativespace-cdp sshd[16053]: Failed password for invalid user ubuntu from 47.97.2.253 port 44916 ssh2
Oct  1 00:58:30 nativespace-cdp sshd[16053]: Received disconnect from 47.97.2.253 port 44916:11: Bye Bye [preauth]
Oct  1 00:58:30 nativespace-cdp sshd[16053]: Disconnected from 47.97.2.253 port 44916 [preauth]
Oct  1 01:01:33 nativespace-cdp sshd[16721]: Connection closed by 159.100.136.21 port 34806 [preauth]
Oct  1 01:06:36 nativespace-cdp sshd[17958]: Connection closed by 159.100.136.21 port 44348 [preauth]
Oct  1 01:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 01:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:09:58 nativespace-cdp sudo[18532]: pam_unix(sudo:session): session closed for user root
Oct  1 01:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 01:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:09:58 nativespace-cdp sudo[18535]: pam_unix(sudo:session): session closed for user root
Oct  1 01:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 01:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:09:59 nativespace-cdp sudo[18539]: pam_unix(sudo:session): session closed for user root
Oct  1 01:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 01:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:09:59 nativespace-cdp sudo[18545]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 01:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:04 nativespace-cdp sudo[18548]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 01:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:04 nativespace-cdp sudo[18682]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 01:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:04 nativespace-cdp sudo[18685]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 01:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:04 nativespace-cdp sudo[18688]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 01:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:04 nativespace-cdp sudo[18691]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 01:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:04 nativespace-cdp sudo[18694]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 01:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:04 nativespace-cdp sudo[18697]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 01:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:13 nativespace-cdp sudo[18775]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 01:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:14 nativespace-cdp sudo[18781]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=carsinyo user-2=fetch user-3=hubmaster user-4=elecleis user-5=milloyco user-6=gilpin user-7=thqkgnbz user-8=connectedshoppin user-9=ianrayne user-10=accooper user-11=coursemc user-12=opaiscyx user-13=firstres user-14=seftvta user-15=jonhartl user-16=ultbcrra user-17=southlon user-18=highlegh user-19=firstred user-20=costestimatorco user-21=firstrel user-22=clarkass user-23=skyfirec user-24=alexadmin user-25=nativene user-26=askhform user-27=stuartge user-28=innovat1 user-29=battlere user-30=oneoarco user-31=firstre2 user-32=vivienn1 user-33=brighto1 user-34=nstriton user-35=bemadonn user-36=ggaaorgu user-37=belle user-38=newstoda user-39=bedfords user-40=hodgesonweb user-41=theblack user-42=spectrum user-43=jarvisin user-44=leereyn1 user-45=stephani user-46=still user-47=agproduc
Oct  1 01:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=maflemin user-49=lbscrmod user-50=athenare user-51=connect9 user-52=vantagep user-53=markward user-54=booff user-55=foundation user-56=ulsukarm user-57=ptkxhsbt user-58=dickemery123 user-59=martsblo user-60=magichat user-61=lbhyisi user-62=hhdugcor user-63=sarafoundation user-64=atestord user-65=strathar user-66=brmrjxl user-67=lakesan1 user-68=musorguk user-69=megacards user-70=wilsonsw user-71=onlycont user-72=attlebor user-73=lucy user-74=romaldki user-75=branko user-76=hodgsonmail user-77=outdoorc user-78=ranxterc user-79=jennimil user-80=tomandle user-81=nbhavers user-82=careers user-83=david user-84=mcdermos user-85=chrisdal user-86=nvihkvu user-87=cath user-88=sketchy user-89=havantho user-90=what user-91=oubpgvbx user-92=tstardom user-93=design user-94=kategilpin user-95=ladburyp user-96=dancinggardener user-97=stagingerris user-98=boldover user-99=nove user-100=sosevalu user-101=crrtipdl
Oct  1 01:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bakery user-103=nsceres user-104=burydropin user-105=fawcettd user-106=dhyana user-107=eatspam user-108=darkstar user-109=beauty user-110=asandcoc user-111=sibtoncc user-112=steve user-113=zebrapho user-114=bwppodcast user-115=pugwash user-116=howardon user-117=paulmca1 user-118=cwsocial user-119=reliable user-120=ninejimm user-121=cathski user-122=cambria1 user-123=courseme user-124=eugincou user-125=hirefootballgame user-126=ctedorgu user-127=philmcph user-128=donnychicago user-129=steakbridieme user-130=firstre5 user-131=lkpier user-132=health2045 user-133=fortunaz user-134=leftie user-135=foods user-136=nscdp user-137=tigerlet user-138=barbersh user-139=hidden user-140=nomistakes user-141=smrszyqg user-142=isleofwi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 01:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 01:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:16 nativespace-cdp sudo[18789]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 01:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:17 nativespace-cdp sudo[18799]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EdGbnAk52FlncNgp.~
Oct  1 01:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:17 nativespace-cdp sudo[18802]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EdGbnAk52FlncNgp.~'
Oct  1 01:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:17 nativespace-cdp sudo[18805]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-EdGbnAk52FlncNgp.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 01:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:17 nativespace-cdp sudo[18809]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 01:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:17 nativespace-cdp sudo[18812]: pam_unix(sudo:session): session closed for user root
Oct  1 01:10:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 01:10:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 01:10:32 nativespace-cdp sudo[18852]: pam_unix(sudo:session): session closed for user root
Oct  1 01:11:33 nativespace-cdp sshd[19023]: Connection closed by 159.100.136.21 port 53784 [preauth]
Oct  1 01:16:34 nativespace-cdp sshd[19972]: Connection closed by 159.100.136.21 port 35486 [preauth]
Oct  1 01:21:33 nativespace-cdp sshd[21163]: Connection closed by 159.100.136.21 port 44852 [preauth]
Oct  1 01:26:33 nativespace-cdp sshd[22025]: Connection closed by 159.100.136.21 port 54520 [preauth]
Oct  1 01:31:33 nativespace-cdp sshd[22980]: Connection closed by 159.100.136.21 port 35840 [preauth]
Oct  1 01:36:34 nativespace-cdp sshd[24118]: Connection closed by 159.100.136.21 port 45840 [preauth]
Oct  1 01:41:35 nativespace-cdp sshd[25145]: Connection closed by 159.100.136.21 port 55532 [preauth]
Oct  1 01:46:34 nativespace-cdp sshd[26021]: Connection closed by 159.100.136.21 port 36816 [preauth]
Oct  1 01:51:33 nativespace-cdp sshd[27070]: Connection closed by 159.100.136.21 port 46444 [preauth]
Oct  1 01:56:33 nativespace-cdp sshd[28140]: Connection closed by 159.100.136.21 port 56366 [preauth]
Oct  1 01:57:42 nativespace-cdp sshd[28278]: Bad protocol version identification '\003' from 45.227.254.49 port 65520
Oct  1 02:01:24 nativespace-cdp sshd[29125]: Connection closed by 58.214.249.122 port 41702 [preauth]
Oct  1 02:01:36 nativespace-cdp sshd[29185]: Connection closed by 159.100.136.21 port 37562 [preauth]
Oct  1 02:06:35 nativespace-cdp sshd[30348]: Connection closed by 159.100.136.21 port 47414 [preauth]
Oct  1 02:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 02:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:53 nativespace-cdp sudo[30944]: pam_unix(sudo:session): session closed for user root
Oct  1 02:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 02:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:53 nativespace-cdp sudo[30948]: pam_unix(sudo:session): session closed for user root
Oct  1 02:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 02:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:54 nativespace-cdp sudo[30951]: pam_unix(sudo:session): session closed for user root
Oct  1 02:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 02:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:54 nativespace-cdp sudo[30956]: pam_unix(sudo:session): session closed for user root
Oct  1 02:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 02:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:56 nativespace-cdp sudo[30960]: pam_unix(sudo:session): session closed for user root
Oct  1 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:56 nativespace-cdp sudo[30969]: pam_unix(sudo:session): session closed for user root
Oct  1 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:56 nativespace-cdp sudo[30972]: pam_unix(sudo:session): session closed for user root
Oct  1 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:56 nativespace-cdp sudo[30975]: pam_unix(sudo:session): session closed for user root
Oct  1 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:56 nativespace-cdp sudo[30978]: pam_unix(sudo:session): session closed for user root
Oct  1 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:56 nativespace-cdp sudo[30982]: pam_unix(sudo:session): session closed for user root
Oct  1 02:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 02:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:09:56 nativespace-cdp sudo[30985]: pam_unix(sudo:session): session closed for user root
Oct  1 02:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 02:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:10:00 nativespace-cdp sudo[31014]: pam_unix(sudo:session): session closed for user root
Oct  1 02:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 02:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:10:00 nativespace-cdp sudo[31019]: pam_unix(sudo:session): session closed for user root
Oct  1 02:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=attlebor user-2=lucy user-3=onlycont user-4=branko user-5=outdoorc user-6=hodgsonmail user-7=ranxterc user-8=romaldki user-9=tomandle user-10=jennimil user-11=mcdermos user-12=chrisdal user-13=nbhavers user-14=careers user-15=david user-16=what user-17=tstardom user-18=oubpgvbx user-19=nvihkvu user-20=cath user-21=sketchy user-22=havantho user-23=kategilpin user-24=ladburyp user-25=dancinggardener user-26=stagingerris user-27=design user-28=nove user-29=boldover user-30=sosevalu user-31=crrtipdl user-32=bakery user-33=burydropin user-34=fawcettd user-35=nsceres user-36=eatspam user-37=darkstar user-38=beauty user-39=dhyana user-40=asandcoc user-41=sibtoncc user-42=zebrapho user-43=bwppodcast user-44=steve user-45=ninejimm user-46=reliable user-47=cathski user-48=cambria1 user-49=howardon
Oct  1 02:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=paulmca1 user-51=pugwash user-52=cwsocial user-53=hirefootballgame user-54=courseme user-55=eugincou user-56=fortunaz user-57=health2045 user-58=foods user-59=leftie user-60=nscdp user-61=ctedorgu user-62=philmcph user-63=steakbridieme user-64=firstre5 user-65=donnychicago user-66=lkpier user-67=isleofwi user-68=smrszyqg user-69=tigerlet user-70=barbersh user-71=hidden user-72=nomistakes user-73=elecleis user-74=milloyco user-75=gilpin user-76=carsinyo user-77=fetch user-78=hubmaster user-79=ianrayne user-80=accooper user-81=thqkgnbz user-82=connectedshoppin user-83=firstres user-84=jonhartl user-85=seftvta user-86=ultbcrra user-87=opaiscyx user-88=coursemc user-89=costestimatorco user-90=clarkass user-91=firstrel user-92=southlon user-93=highlegh user-94=firstred user-95=skyfirec user-96=alexadmin user-97=stuartge user-98=askhform user-99=innovat1 user-100=nativene user-101=brighto1 user-102=nstriton
Oct  1 02:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=battlere user-104=oneoarco user-105=firstre2 user-106=vivienn1 user-107=bedfords user-108=bemadonn user-109=belle user-110=ggaaorgu user-111=newstoda user-112=jarvisin user-113=hodgesonweb user-114=theblack user-115=spectrum user-116=still user-117=agproduc user-118=leereyn1 user-119=stephani user-120=booff user-121=markward user-122=foundation user-123=maflemin user-124=lbscrmod user-125=athenare user-126=connect9 user-127=vantagep user-128=ulsukarm user-129=martsblo user-130=ptkxhsbt user-131=dickemery123 user-132=lbhyisi user-133=hhdugcor user-134=magichat user-135=brmrjxl user-136=lakesan1 user-137=sarafoundation user-138=atestord user-139=strathar user-140=wilsonsw user-141=musorguk user-142=megacards feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 02:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 02:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:10:01 nativespace-cdp sudo[31027]: pam_unix(sudo:session): session closed for user root
Oct  1 02:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 02:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:10:01 nativespace-cdp sudo[31032]: pam_unix(sudo:session): session closed for user root
Oct  1 02:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sd3VcIUE0BP4BQxc.~
Oct  1 02:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:10:01 nativespace-cdp sudo[31035]: pam_unix(sudo:session): session closed for user root
Oct  1 02:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sd3VcIUE0BP4BQxc.~'
Oct  1 02:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:10:01 nativespace-cdp sudo[31038]: pam_unix(sudo:session): session closed for user root
Oct  1 02:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sd3VcIUE0BP4BQxc.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 02:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:10:01 nativespace-cdp sudo[31043]: pam_unix(sudo:session): session closed for user root
Oct  1 02:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 02:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:10:01 nativespace-cdp sudo[31046]: pam_unix(sudo:session): session closed for user root
Oct  1 02:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 02:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 02:10:04 nativespace-cdp sudo[31198]: pam_unix(sudo:session): session closed for user root
Oct  1 02:11:33 nativespace-cdp sshd[31473]: Connection closed by 159.100.136.21 port 56954 [preauth]
Oct  1 02:16:35 nativespace-cdp sshd[32617]: Connection closed by 159.100.136.21 port 38448 [preauth]
Oct  1 02:21:33 nativespace-cdp sshd[1604]: Connection closed by 159.100.136.21 port 47934 [preauth]
Oct  1 02:26:33 nativespace-cdp sshd[2752]: Connection closed by 159.100.136.21 port 56796 [preauth]
Oct  1 02:31:33 nativespace-cdp sshd[3800]: Connection closed by 159.100.136.21 port 37988 [preauth]
Oct  1 02:36:33 nativespace-cdp sshd[4897]: Connection closed by 159.100.136.21 port 47726 [preauth]
Oct  1 02:41:33 nativespace-cdp sshd[5875]: Connection closed by 159.100.136.21 port 57258 [preauth]
Oct  1 02:46:33 nativespace-cdp sshd[6734]: Connection closed by 159.100.136.21 port 39054 [preauth]
Oct  1 02:51:33 nativespace-cdp sshd[7995]: Connection closed by 159.100.136.21 port 48532 [preauth]
Oct  1 02:56:36 nativespace-cdp sshd[9061]: Connection closed by 159.100.136.21 port 58160 [preauth]
Oct  1 03:01:33 nativespace-cdp sshd[10092]: Connection closed by 159.100.136.21 port 38902 [preauth]
Oct  1 03:06:33 nativespace-cdp sshd[11176]: Connection closed by 159.100.136.21 port 48690 [preauth]
Oct  1 03:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 03:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:53 nativespace-cdp sudo[11730]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 03:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:53 nativespace-cdp sudo[11733]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 03:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:54 nativespace-cdp sudo[11736]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 03:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:54 nativespace-cdp sudo[11741]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 03:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:56 nativespace-cdp sudo[11744]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 03:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:56 nativespace-cdp sudo[11755]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:57 nativespace-cdp sudo[11758]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:57 nativespace-cdp sudo[11761]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:57 nativespace-cdp sudo[11764]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:57 nativespace-cdp sudo[11767]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 03:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:57 nativespace-cdp sudo[11771]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 03:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:58 nativespace-cdp sudo[11780]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 03:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:09:59 nativespace-cdp sudo[11785]: pam_unix(sudo:session): session closed for user root
Oct  1 03:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=wilsonsw user-2=megacards user-3=musorguk user-4=brmrjxl user-5=lakesan1 user-6=atestord user-7=sarafoundation user-8=strathar user-9=hhdugcor user-10=lbhyisi user-11=magichat user-12=martsblo user-13=ptkxhsbt user-14=dickemery123 user-15=ulsukarm user-16=booff user-17=markward user-18=foundation user-19=lbscrmod user-20=maflemin user-21=vantagep user-22=connect9 user-23=athenare user-24=agproduc user-25=still user-26=leereyn1 user-27=stephani user-28=jarvisin user-29=hodgesonweb user-30=theblack user-31=spectrum user-32=bedfords user-33=bemadonn user-34=newstoda user-35=ggaaorgu user-36=belle user-37=nstriton user-38=brighto1 user-39=oneoarco user-40=battlere user-41=vivienn1 user-42=firstre2 user-43=askhform user-44=stuartge user-45=innovat1 user-46=nativene user-47=skyfirec user-48=alexadmin
Oct  1 03:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=costestimatorco user-50=firstrel user-51=clarkass user-52=highlegh user-53=southlon user-54=firstred user-55=firstres user-56=ultbcrra user-57=seftvta user-58=jonhartl user-59=opaiscyx user-60=coursemc user-61=ianrayne user-62=accooper user-63=thqkgnbz user-64=connectedshoppin user-65=elecleis user-66=milloyco user-67=gilpin user-68=fetch user-69=carsinyo user-70=hubmaster user-71=isleofwi user-72=smrszyqg user-73=tigerlet user-74=barbersh user-75=nomistakes user-76=hidden user-77=leftie user-78=foods user-79=health2045 user-80=fortunaz user-81=nscdp user-82=donnychicago user-83=firstre5 user-84=steakbridieme user-85=philmcph user-86=ctedorgu user-87=lkpier user-88=hirefootballgame user-89=courseme user-90=eugincou user-91=reliable user-92=ninejimm user-93=cambria1 user-94=cathski user-95=cwsocial user-96=howardon user-97=paulmca1 user-98=pugwash user-99=zebrapho user-100=bwppodcast user-101=steve
Oct  1 03:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=asandcoc user-103=sibtoncc user-104=darkstar user-105=eatspam user-106=beauty user-107=dhyana user-108=fawcettd user-109=burydropin user-110=nsceres user-111=crrtipdl user-112=sosevalu user-113=bakery user-114=nove user-115=boldover user-116=kategilpin user-117=dancinggardener user-118=stagingerris user-119=ladburyp user-120=design user-121=what user-122=tstardom user-123=oubpgvbx user-124=nvihkvu user-125=havantho user-126=sketchy user-127=cath user-128=mcdermos user-129=chrisdal user-130=david user-131=careers user-132=nbhavers user-133=tomandle user-134=jennimil user-135=branko user-136=ranxterc user-137=hodgsonmail user-138=outdoorc user-139=romaldki user-140=lucy user-141=attlebor user-142=onlycont feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 03:09:59 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 03:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:10:00 nativespace-cdp sudo[11790]: pam_unix(sudo:session): session closed for user root
Oct  1 03:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 03:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:10:00 nativespace-cdp sudo[11795]: pam_unix(sudo:session): session closed for user root
Oct  1 03:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eygfgrZq80EydEcj.~
Oct  1 03:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:10:00 nativespace-cdp sudo[11798]: pam_unix(sudo:session): session closed for user root
Oct  1 03:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eygfgrZq80EydEcj.~'
Oct  1 03:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:10:00 nativespace-cdp sudo[11801]: pam_unix(sudo:session): session closed for user root
Oct  1 03:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-eygfgrZq80EydEcj.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 03:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:10:00 nativespace-cdp sudo[11805]: pam_unix(sudo:session): session closed for user root
Oct  1 03:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 03:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:10:00 nativespace-cdp sudo[11808]: pam_unix(sudo:session): session closed for user root
Oct  1 03:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 03:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 03:10:07 nativespace-cdp sudo[11954]: pam_unix(sudo:session): session closed for user root
Oct  1 03:11:36 nativespace-cdp sshd[12217]: Connection closed by 159.100.136.21 port 58064 [preauth]
Oct  1 03:16:35 nativespace-cdp sshd[13113]: Connection closed by 159.100.136.21 port 39690 [preauth]
Oct  1 03:21:33 nativespace-cdp sshd[14356]: Connection closed by 159.100.136.21 port 48994 [preauth]
Oct  1 03:26:34 nativespace-cdp sshd[15502]: Connection closed by 159.100.136.21 port 58704 [preauth]
Oct  1 03:31:33 nativespace-cdp sshd[16533]: Connection closed by 159.100.136.21 port 39974 [preauth]
Oct  1 03:36:33 nativespace-cdp sshd[17939]: Connection closed by 159.100.136.21 port 49776 [preauth]
Oct  1 03:41:33 nativespace-cdp sshd[19122]: Connection closed by 159.100.136.21 port 59416 [preauth]
Oct  1 03:46:35 nativespace-cdp sshd[20050]: Connection closed by 159.100.136.21 port 40994 [preauth]
Oct  1 03:51:33 nativespace-cdp sshd[21218]: Connection closed by 159.100.136.21 port 49556 [preauth]
Oct  1 03:56:34 nativespace-cdp sshd[22072]: Connection closed by 159.100.136.21 port 59446 [preauth]
Oct  1 04:01:36 nativespace-cdp sshd[23166]: Connection closed by 159.100.136.21 port 40778 [preauth]
Oct  1 04:06:33 nativespace-cdp sshd[24269]: Connection closed by 159.100.136.21 port 50690 [preauth]
Oct  1 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:09:59 nativespace-cdp sudo[25087]: pam_unix(sudo:session): session closed for user root
Oct  1 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:09:59 nativespace-cdp sudo[25090]: pam_unix(sudo:session): session closed for user root
Oct  1 04:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 04:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:00 nativespace-cdp sudo[25093]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 04:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:00 nativespace-cdp sudo[25133]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 04:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:06 nativespace-cdp sudo[25139]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 04:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:06 nativespace-cdp sudo[25378]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 04:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:06 nativespace-cdp sudo[25382]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 04:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:06 nativespace-cdp sudo[25385]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 04:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:06 nativespace-cdp sudo[25388]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 04:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:06 nativespace-cdp sudo[25391]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 04:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:06 nativespace-cdp sudo[25395]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 04:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:15 nativespace-cdp sudo[25421]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 04:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:15 nativespace-cdp sudo[25427]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bedfords user-2=bemadonn user-3=newstoda user-4=belle user-5=ggaaorgu user-6=nstriton user-7=brighto1 user-8=oneoarco user-9=battlere user-10=vivienn1 user-11=firstre2 user-12=askhform user-13=stuartge user-14=innovat1 user-15=nativene user-16=skyfirec user-17=alexadmin user-18=costestimatorco user-19=firstrel user-20=clarkass user-21=highlegh user-22=southlon user-23=firstred user-24=firstres user-25=ultbcrra user-26=seftvta user-27=jonhartl user-28=opaiscyx user-29=coursemc user-30=ianrayne user-31=accooper user-32=thqkgnbz user-33=connectedshoppin user-34=elecleis user-35=milloyco user-36=gilpin user-37=fetch user-38=carsinyo user-39=hubmaster user-40=wilsonsw user-41=megacards user-42=musorguk user-43=brmrjxl user-44=lakesan1 user-45=atestord user-46=sarafoundation user-47=strathar
Oct  1 04:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=hhdugcor user-49=lbhyisi user-50=magichat user-51=martsblo user-52=ptkxhsbt user-53=dickemery123 user-54=ulsukarm user-55=foundation user-56=booff user-57=markward user-58=lbscrmod user-59=maflemin user-60=vantagep user-61=athenare user-62=connect9 user-63=agproduc user-64=still user-65=leereyn1 user-66=stephani user-67=jarvisin user-68=theblack user-69=hodgesonweb user-70=spectrum user-71=crrtipdl user-72=sosevalu user-73=bakery user-74=nove user-75=boldover user-76=kategilpin user-77=stagingerris user-78=dancinggardener user-79=ladburyp user-80=design user-81=what user-82=tstardom user-83=oubpgvbx user-84=nvihkvu user-85=havantho user-86=cath user-87=sketchy user-88=mcdermos user-89=chrisdal user-90=david user-91=careers user-92=nbhavers user-93=tomandle user-94=jennimil user-95=branko user-96=outdoorc user-97=ranxterc user-98=hodgsonmail user-99=romaldki user-100=lucy user-101=attlebor
Oct  1 04:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=onlycont user-103=isleofwi user-104=smrszyqg user-105=tigerlet user-106=barbersh user-107=nomistakes user-108=hidden user-109=foods user-110=leftie user-111=fortunaz user-112=health2045 user-113=nscdp user-114=donnychicago user-115=firstre5 user-116=steakbridieme user-117=philmcph user-118=ctedorgu user-119=lkpier user-120=hirefootballgame user-121=courseme user-122=eugincou user-123=ninejimm user-124=reliable user-125=cambria1 user-126=cathski user-127=cwsocial user-128=paulmca1 user-129=pugwash user-130=howardon user-131=zebrapho user-132=bwppodcast user-133=steve user-134=asandcoc user-135=sibtoncc user-136=darkstar user-137=eatspam user-138=beauty user-139=dhyana user-140=fawcettd user-141=burydropin user-142=nsceres feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 04:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 04:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:17 nativespace-cdp sudo[25435]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 04:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:18 nativespace-cdp sudo[25445]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ingl9MP1ZR2em04V.~
Oct  1 04:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:19 nativespace-cdp sudo[25460]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ingl9MP1ZR2em04V.~'
Oct  1 04:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:19 nativespace-cdp sudo[25464]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Ingl9MP1ZR2em04V.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 04:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:19 nativespace-cdp sudo[25468]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 04:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:19 nativespace-cdp sudo[25471]: pam_unix(sudo:session): session closed for user root
Oct  1 04:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 04:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:10:21 nativespace-cdp sudo[25490]: pam_unix(sudo:session): session closed for user root
Oct  1 04:11:33 nativespace-cdp sshd[25766]: Connection closed by 159.100.136.21 port 60006 [preauth]
Oct  1 04:16:33 nativespace-cdp sshd[26801]: Connection closed by 159.100.136.21 port 41078 [preauth]
Oct  1 04:21:33 nativespace-cdp sshd[28121]: Connection closed by 159.100.136.21 port 49560 [preauth]
Oct  1 04:26:33 nativespace-cdp sshd[29050]: Connection closed by 159.100.136.21 port 59156 [preauth]
Oct  1 04:31:33 nativespace-cdp sshd[30074]: Connection closed by 159.100.136.21 port 40508 [preauth]
Oct  1 04:36:33 nativespace-cdp sshd[31473]: Connection closed by 159.100.136.21 port 50314 [preauth]
Oct  1 04:41:33 nativespace-cdp sshd[1385]: Connection closed by 159.100.136.21 port 59962 [preauth]
Oct  1 04:46:33 nativespace-cdp sshd[2856]: Connection closed by 159.100.136.21 port 41076 [preauth]
Oct  1 04:51:33 nativespace-cdp sshd[4057]: Connection closed by 159.100.136.21 port 50482 [preauth]
Oct  1 04:53:17 nativespace-cdp sshd[4346]: Invalid user ubuntu from 200.196.50.91 port 42139
Oct  1 04:53:17 nativespace-cdp sshd[4346]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 04:53:17 nativespace-cdp sshd[4346]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 04:53:17 nativespace-cdp sshd[4346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 04:53:19 nativespace-cdp sshd[4346]: Failed password for invalid user ubuntu from 200.196.50.91 port 42139 ssh2
Oct  1 04:53:19 nativespace-cdp sshd[4346]: Received disconnect from 200.196.50.91 port 42139:11: Bye Bye [preauth]
Oct  1 04:53:19 nativespace-cdp sshd[4346]: Disconnected from 200.196.50.91 port 42139 [preauth]
Oct  1 04:54:00 nativespace-cdp sshd[4452]: Invalid user acer from 45.11.93.205 port 58390
Oct  1 04:54:00 nativespace-cdp sshd[4452]: input_userauth_request: invalid user acer [preauth]
Oct  1 04:54:00 nativespace-cdp sshd[4452]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 04:54:00 nativespace-cdp sshd[4452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 04:54:02 nativespace-cdp sshd[4452]: Failed password for invalid user acer from 45.11.93.205 port 58390 ssh2
Oct  1 04:54:03 nativespace-cdp sshd[4452]: Received disconnect from 45.11.93.205 port 58390:11: Bye Bye [preauth]
Oct  1 04:54:03 nativespace-cdp sshd[4452]: Disconnected from 45.11.93.205 port 58390 [preauth]
Oct  1 04:56:33 nativespace-cdp sshd[5148]: Connection closed by 159.100.136.21 port 60328 [preauth]
Oct  1 04:56:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 04:56:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:56:58 nativespace-cdp sudo[5211]: pam_unix(sudo:session): session closed for user root
Oct  1 04:56:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 04:56:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:56:58 nativespace-cdp sudo[5231]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 04:57:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:02 nativespace-cdp sudo[5241]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sketchy user-2=cath user-3=havantho user-4=nvihkvu user-5=oubpgvbx user-6=tstardom user-7=what user-8=design user-9=ladburyp user-10=dancinggardener user-11=stagingerris user-12=kategilpin user-13=boldover user-14=nove user-15=bakery user-16=sosevalu user-17=crrtipdl user-18=onlycont user-19=attlebor user-20=lucy user-21=romaldki user-22=hodgsonmail user-23=outdoorc user-24=ranxterc user-25=branko user-26=jennimil user-27=tomandle user-28=careers user-29=nbhavers user-30=david user-31=chrisdal user-32=mcdermos user-33=howardon user-34=paulmca1 user-35=pugwash user-36=cwsocial user-37=cambria1 user-38=cathski user-39=reliable user-40=ninejimm user-41=eugincou user-42=courseme user-43=hirefootballgame user-44=lkpier user-45=philmcph user-46=ctedorgu user-47=steakbridieme user-48=donnychicago
Oct  1 04:57:02 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=firstre5 user-50=nscdp user-51=fortunaz user-52=health2045 user-53=leftie user-54=foods user-55=hidden user-56=nomistakes user-57=tigerlet user-58=barbersh user-59=smrszyqg user-60=isleofwi user-61=nsceres user-62=burydropin user-63=fawcettd user-64=dhyana user-65=beauty user-66=eatspam user-67=darkstar user-68=asandcoc user-69=sibtoncc user-70=steve user-71=bwppodcast user-72=zebrapho user-73=alexadmin user-74=skyfirec user-75=nativene user-76=innovat1 user-77=stuartge user-78=askhform user-79=firstre2 user-80=vivienn1 user-81=battlere user-82=oneoarco user-83=brighto1 user-84=nstriton user-85=ggaaorgu user-86=belle user-87=newstoda user-88=bemadonn user-89=bedfords user-90=hubmaster user-91=carsinyo user-92=fetch user-93=gilpin user-94=milloyco user-95=elecleis user-96=connectedshoppin user-97=thqkgnbz user-98=accooper user-99=ianrayne user-100=opaiscyx user-101=coursemc user-102=jonhartl
Oct  1 04:57:02 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=seftvta user-104=ultbcrra user-105=firstres user-106=firstred user-107=southlon user-108=highlegh user-109=clarkass user-110=firstrel user-111=costestimatorco user-112=dickemery123 user-113=ptkxhsbt user-114=martsblo user-115=magichat user-116=lbhyisi user-117=hhdugcor user-118=strathar user-119=sarafoundation user-120=atestord user-121=brmrjxl user-122=lakesan1 user-123=musorguk user-124=megacards user-125=wilsonsw user-126=spectrum user-127=hodgesonweb user-128=theblack user-129=jarvisin user-130=stephani user-131=leereyn1 user-132=still user-133=agproduc user-134=athenare user-135=connect9 user-136=vantagep user-137=maflemin user-138=lbscrmod user-139=booff user-140=foundation user-141=markward user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 04:57:02 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 04:57:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:03 nativespace-cdp sudo[5262]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Oct  1 04:57:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:04 nativespace-cdp sudo[5279]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Oct  1 04:57:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:05 nativespace-cdp sudo[5353]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:45 nativespace-cdp sshd[5476]: Invalid user thomas from 43.156.6.132 port 59190
Oct  1 04:57:45 nativespace-cdp sshd[5476]: input_userauth_request: invalid user thomas [preauth]
Oct  1 04:57:45 nativespace-cdp sshd[5476]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 04:57:45 nativespace-cdp sshd[5476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 04:57:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  1 04:57:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  1 04:57:45 nativespace-cdp sudo[5493]: pam_unix(sudo:session): session closed for user onlycont
Oct  1 04:57:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Oct  1 04:57:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:47 nativespace-cdp sudo[5501]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Oct  1 04:57:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:47 nativespace-cdp sshd[5476]: Failed password for invalid user thomas from 43.156.6.132 port 59190 ssh2
Oct  1 04:57:47 nativespace-cdp sshd[5476]: Received disconnect from 43.156.6.132 port 59190:11: Bye Bye [preauth]
Oct  1 04:57:47 nativespace-cdp sshd[5476]: Disconnected from 43.156.6.132 port 59190 [preauth]
Oct  1 04:57:48 nativespace-cdp sudo[5507]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Oct  1 04:57:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:50 nativespace-cdp sudo[5521]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  1 04:57:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:50 nativespace-cdp sudo[5530]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Oct  1 04:57:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:52 nativespace-cdp sudo[5543]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Oct  1 04:57:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:57 nativespace-cdp sudo[5550]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Oct  1 04:57:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:58 nativespace-cdp sudo[5562]: pam_unix(sudo:session): session closed for user root
Oct  1 04:57:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Oct  1 04:57:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:57:58 nativespace-cdp sudo[5568]: pam_unix(sudo:session): session closed for user root
Oct  1 04:58:08 nativespace-cdp sshd[5622]: Connection closed by 200.196.50.91 port 36817 [preauth]
Oct  1 04:58:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Oct  1 04:58:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:58:12 nativespace-cdp sudo[5664]: pam_unix(sudo:session): session closed for user root
Oct  1 04:58:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  1 04:58:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  1 04:58:15 nativespace-cdp sudo[5720]: pam_unix(sudo:session): session closed for user onlycont
Oct  1 04:58:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Oct  1 04:58:15 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Oct  1 04:58:15 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Oct  1 04:58:15 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 04:58:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  1 04:58:15 nativespace-cdp sudo[5728]: pam_unix(sudo:session): session closed for user onlycont
Oct  1 04:58:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Oct  1 04:58:15 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Oct  1 04:58:15 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Oct  1 04:58:15 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 04:58:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  1 04:58:17 nativespace-cdp sudo[5737]: pam_unix(sudo:session): session closed for user onlycont
Oct  1 04:58:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Oct  1 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Oct  1 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Oct  1 04:58:17 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 04:58:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  1 04:58:19 nativespace-cdp sudo[5748]: pam_unix(sudo:session): session closed for user onlycont
Oct  1 04:58:29 nativespace-cdp sshd[5832]: Invalid user abhishek from 45.11.93.205 port 40032
Oct  1 04:58:29 nativespace-cdp sshd[5832]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 04:58:29 nativespace-cdp sshd[5832]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 04:58:29 nativespace-cdp sshd[5832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  1 04:58:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  1 04:58:30 nativespace-cdp sudo[5869]: pam_unix(sudo:session): session closed for user onlycont
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 04:58:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  1 04:58:30 nativespace-cdp sudo[5876]: pam_unix(sudo:session): session closed for user onlycont
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 04:58:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  1 04:58:30 nativespace-cdp sudo[5882]: pam_unix(sudo:session): session closed for user onlycont
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Oct  1 04:58:30 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 04:58:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  1 04:58:30 nativespace-cdp sshd[5835]: Invalid user user from 43.156.6.132 port 59702
Oct  1 04:58:30 nativespace-cdp sshd[5835]: input_userauth_request: invalid user user [preauth]
Oct  1 04:58:30 nativespace-cdp sshd[5835]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 04:58:30 nativespace-cdp sshd[5835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 04:58:30 nativespace-cdp sudo[5888]: pam_unix(sudo:session): session closed for user onlycont
Oct  1 04:58:31 nativespace-cdp sshd[5832]: Failed password for invalid user abhishek from 45.11.93.205 port 40032 ssh2
Oct  1 04:58:31 nativespace-cdp sshd[5832]: Received disconnect from 45.11.93.205 port 40032:11: Bye Bye [preauth]
Oct  1 04:58:31 nativespace-cdp sshd[5832]: Disconnected from 45.11.93.205 port 40032 [preauth]
Oct  1 04:58:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Oct  1 04:58:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:58:32 nativespace-cdp sshd[5835]: Failed password for invalid user user from 43.156.6.132 port 59702 ssh2
Oct  1 04:58:32 nativespace-cdp sudo[5922]: pam_unix(sudo:session): session closed for user root
Oct  1 04:58:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Oct  1 04:58:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:58:33 nativespace-cdp sudo[5928]: pam_unix(sudo:session): session closed for user root
Oct  1 04:58:35 nativespace-cdp sshd[5835]: Received disconnect from 43.156.6.132 port 59702:11: Bye Bye [preauth]
Oct  1 04:58:35 nativespace-cdp sshd[5835]: Disconnected from 43.156.6.132 port 59702 [preauth]
Oct  1 04:58:51 nativespace-cdp sshd[6002]: Invalid user testuser from 200.196.50.91 port 43094
Oct  1 04:58:51 nativespace-cdp sshd[6002]: input_userauth_request: invalid user testuser [preauth]
Oct  1 04:58:51 nativespace-cdp sshd[6002]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 04:58:51 nativespace-cdp sshd[6002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 04:58:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  1 04:58:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 04:58:52 nativespace-cdp sudo[6011]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 04:58:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Oct  1 04:58:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:58:53 nativespace-cdp sudo[6017]: pam_unix(sudo:session): session closed for user root
Oct  1 04:58:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Oct  1 04:58:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:58:53 nativespace-cdp sudo[6022]: pam_unix(sudo:session): session closed for user root
Oct  1 04:58:53 nativespace-cdp sshd[6002]: Failed password for invalid user testuser from 200.196.50.91 port 43094 ssh2
Oct  1 04:58:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Oct  1 04:58:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:58:54 nativespace-cdp sshd[6002]: Received disconnect from 200.196.50.91 port 43094:11: Bye Bye [preauth]
Oct  1 04:58:54 nativespace-cdp sshd[6002]: Disconnected from 200.196.50.91 port 43094 [preauth]
Oct  1 04:58:55 nativespace-cdp sudo[6026]: pam_unix(sudo:session): session closed for user root
Oct  1 04:58:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  1 04:58:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:58:55 nativespace-cdp sudo[6034]: pam_unix(sudo:session): session closed for user root
Oct  1 04:58:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Oct  1 04:58:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:58:58 nativespace-cdp sudo[6049]: pam_unix(sudo:session): session closed for user root
Oct  1 04:58:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Oct  1 04:58:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:58:58 nativespace-cdp sudo[6055]: pam_unix(sudo:session): session closed for user root
Oct  1 04:59:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Oct  1 04:59:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:59:06 nativespace-cdp sudo[6143]: pam_unix(sudo:session): session closed for user root
Oct  1 04:59:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  1 04:59:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 04:59:08 nativespace-cdp sudo[6202]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 04:59:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Oct  1 04:59:09 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Oct  1 04:59:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Oct  1 04:59:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 04:59:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 04:59:09 nativespace-cdp sudo[6208]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 04:59:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Oct  1 04:59:09 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Oct  1 04:59:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Oct  1 04:59:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 04:59:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 04:59:14 nativespace-cdp sshd[6224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132  user=root
Oct  1 04:59:14 nativespace-cdp sshd[6224]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 04:59:16 nativespace-cdp sshd[6224]: Failed password for root from 43.156.6.132 port 53812 ssh2
Oct  1 04:59:16 nativespace-cdp sshd[6224]: Received disconnect from 43.156.6.132 port 53812:11: Bye Bye [preauth]
Oct  1 04:59:16 nativespace-cdp sshd[6224]: Disconnected from 43.156.6.132 port 53812 [preauth]
Oct  1 04:59:16 nativespace-cdp sshd[6238]: Invalid user user from 45.11.93.205 port 58666
Oct  1 04:59:16 nativespace-cdp sshd[6238]: input_userauth_request: invalid user user [preauth]
Oct  1 04:59:16 nativespace-cdp sshd[6238]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 04:59:16 nativespace-cdp sshd[6238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 04:59:18 nativespace-cdp sshd[6238]: Failed password for invalid user user from 45.11.93.205 port 58666 ssh2
Oct  1 04:59:18 nativespace-cdp sshd[6238]: Received disconnect from 45.11.93.205 port 58666:11: Bye Bye [preauth]
Oct  1 04:59:18 nativespace-cdp sshd[6238]: Disconnected from 45.11.93.205 port 58666 [preauth]
Oct  1 04:59:27 nativespace-cdp sudo[6215]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 04:59:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  1 04:59:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 04:59:36 nativespace-cdp sudo[6417]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 04:59:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Oct  1 04:59:36 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Oct  1 04:59:36 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Oct  1 04:59:36 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 04:59:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 04:59:37 nativespace-cdp sudo[6423]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 04:59:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Oct  1 04:59:37 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Oct  1 04:59:37 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Oct  1 04:59:37 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 04:59:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 04:59:37 nativespace-cdp sshd[6392]: Invalid user test from 200.196.50.91 port 49381
Oct  1 04:59:37 nativespace-cdp sshd[6392]: input_userauth_request: invalid user test [preauth]
Oct  1 04:59:37 nativespace-cdp sshd[6392]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 04:59:37 nativespace-cdp sshd[6392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 04:59:37 nativespace-cdp sudo[6430]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 04:59:38 nativespace-cdp sshd[6392]: Failed password for invalid user test from 200.196.50.91 port 49381 ssh2
Oct  1 04:59:39 nativespace-cdp sshd[6392]: Received disconnect from 200.196.50.91 port 49381:11: Bye Bye [preauth]
Oct  1 04:59:39 nativespace-cdp sshd[6392]: Disconnected from 200.196.50.91 port 49381 [preauth]
Oct  1 04:59:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Oct  1 04:59:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:59:39 nativespace-cdp sudo[6466]: pam_unix(sudo:session): session closed for user root
Oct  1 04:59:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Oct  1 04:59:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:59:39 nativespace-cdp sudo[6470]: pam_unix(sudo:session): session closed for user root
Oct  1 04:59:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  1 04:59:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  1 04:59:56 nativespace-cdp sudo[6622]: pam_unix(sudo:session): session closed for user lkpier
Oct  1 04:59:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Oct  1 04:59:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:59:57 nativespace-cdp sshd[6613]: Invalid user abhishek from 43.156.6.132 port 55126
Oct  1 04:59:57 nativespace-cdp sshd[6613]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 04:59:57 nativespace-cdp sshd[6613]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 04:59:57 nativespace-cdp sshd[6613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 04:59:57 nativespace-cdp sudo[6629]: pam_unix(sudo:session): session closed for user root
Oct  1 04:59:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Oct  1 04:59:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:59:57 nativespace-cdp sudo[6638]: pam_unix(sudo:session): session closed for user root
Oct  1 04:59:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  1 04:59:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:59:57 nativespace-cdp sudo[6643]: pam_unix(sudo:session): session closed for user root
Oct  1 04:59:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Oct  1 04:59:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:59:59 nativespace-cdp sudo[6661]: pam_unix(sudo:session): session closed for user root
Oct  1 04:59:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Oct  1 04:59:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 04:59:59 nativespace-cdp sshd[6613]: Failed password for invalid user abhishek from 43.156.6.132 port 55126 ssh2
Oct  1 04:59:59 nativespace-cdp sudo[6668]: pam_unix(sudo:session): session closed for user root
Oct  1 04:59:59 nativespace-cdp sshd[6613]: Received disconnect from 43.156.6.132 port 55126:11: Bye Bye [preauth]
Oct  1 04:59:59 nativespace-cdp sshd[6613]: Disconnected from 43.156.6.132 port 55126 [preauth]
Oct  1 05:00:08 nativespace-cdp sshd[6883]: Connection closed by 45.11.93.205 port 50654 [preauth]
Oct  1 05:00:21 nativespace-cdp sshd[6996]: Invalid user tomcat from 200.196.50.91 port 55668
Oct  1 05:00:21 nativespace-cdp sshd[6996]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 05:00:21 nativespace-cdp sshd[6996]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:00:21 nativespace-cdp sshd[6996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:00:23 nativespace-cdp sshd[6996]: Failed password for invalid user tomcat from 200.196.50.91 port 55668 ssh2
Oct  1 05:00:31 nativespace-cdp sshd[6996]: Received disconnect from 200.196.50.91 port 55668:11: Bye Bye [preauth]
Oct  1 05:00:31 nativespace-cdp sshd[6996]: Disconnected from 200.196.50.91 port 55668 [preauth]
Oct  1 05:00:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Oct  1 05:00:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:00:35 nativespace-cdp sudo[7084]: pam_unix(sudo:session): session closed for user root
Oct  1 05:00:38 nativespace-cdp sshd[7063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132  user=root
Oct  1 05:00:38 nativespace-cdp sshd[7063]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:00:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  1 05:00:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  1 05:00:40 nativespace-cdp sudo[7146]: pam_unix(sudo:session): session closed for user lkpier
Oct  1 05:00:40 nativespace-cdp sshd[7063]: Failed password for root from 43.156.6.132 port 47774 ssh2
Oct  1 05:00:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  1 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  1 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  1 05:00:40 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 05:00:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  1 05:00:41 nativespace-cdp sshd[7063]: Received disconnect from 43.156.6.132 port 47774:11: Bye Bye [preauth]
Oct  1 05:00:41 nativespace-cdp sshd[7063]: Disconnected from 43.156.6.132 port 47774 [preauth]
Oct  1 05:00:41 nativespace-cdp sudo[7152]: pam_unix(sudo:session): session closed for user lkpier
Oct  1 05:00:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  1 05:00:41 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  1 05:00:41 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  1 05:00:41 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 05:00:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  1 05:00:51 nativespace-cdp sshd[7240]: Invalid user sysadmin from 45.11.93.205 port 55542
Oct  1 05:00:51 nativespace-cdp sshd[7240]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 05:00:52 nativespace-cdp sshd[7240]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:00:52 nativespace-cdp sshd[7240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:00:53 nativespace-cdp sshd[7240]: Failed password for invalid user sysadmin from 45.11.93.205 port 55542 ssh2
Oct  1 05:00:54 nativespace-cdp sshd[7240]: Received disconnect from 45.11.93.205 port 55542:11: Bye Bye [preauth]
Oct  1 05:00:54 nativespace-cdp sshd[7240]: Disconnected from 45.11.93.205 port 55542 [preauth]
Oct  1 05:00:57 nativespace-cdp sudo[7159]: pam_unix(sudo:session): session closed for user lkpier
Oct  1 05:00:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  1 05:00:57 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  1 05:00:57 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  1 05:00:57 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 05:00:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  1 05:00:58 nativespace-cdp sudo[7319]: pam_unix(sudo:session): session closed for user lkpier
Oct  1 05:01:07 nativespace-cdp sshd[7428]: Invalid user ftpuser from 200.196.50.91 port 33729
Oct  1 05:01:07 nativespace-cdp sshd[7428]: input_userauth_request: invalid user ftpuser [preauth]
Oct  1 05:01:07 nativespace-cdp sshd[7428]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:01:07 nativespace-cdp sshd[7428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  1 05:01:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  1 05:01:08 nativespace-cdp sudo[7471]: pam_unix(sudo:session): session closed for user lkpier
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 05:01:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  1 05:01:08 nativespace-cdp sudo[7477]: pam_unix(sudo:session): session closed for user lkpier
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 05:01:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  1 05:01:08 nativespace-cdp sudo[7484]: pam_unix(sudo:session): session closed for user lkpier
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  1 05:01:08 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 05:01:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  1 05:01:08 nativespace-cdp sudo[7492]: pam_unix(sudo:session): session closed for user lkpier
Oct  1 05:01:09 nativespace-cdp sshd[7428]: Failed password for invalid user ftpuser from 200.196.50.91 port 33729 ssh2
Oct  1 05:01:09 nativespace-cdp sshd[7428]: Received disconnect from 200.196.50.91 port 33729:11: Bye Bye [preauth]
Oct  1 05:01:09 nativespace-cdp sshd[7428]: Disconnected from 200.196.50.91 port 33729 [preauth]
Oct  1 05:01:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Oct  1 05:01:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:11 nativespace-cdp sudo[7526]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Oct  1 05:01:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:12 nativespace-cdp sudo[7532]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Oct  1 05:01:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:14 nativespace-cdp sudo[7550]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Oct  1 05:01:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:14 nativespace-cdp sudo[7556]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  1 05:01:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Oct  1 05:01:15 nativespace-cdp sudo[7566]: pam_unix(sudo:session): session closed for user bwppodcast
Oct  1 05:01:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Oct  1 05:01:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:16 nativespace-cdp sudo[7573]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Oct  1 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:16 nativespace-cdp sudo[7578]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  1 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:16 nativespace-cdp sudo[7582]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:20 nativespace-cdp sshd[7599]: Invalid user superman from 43.156.6.132 port 45580
Oct  1 05:01:20 nativespace-cdp sshd[7599]: input_userauth_request: invalid user superman [preauth]
Oct  1 05:01:20 nativespace-cdp sshd[7599]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:01:20 nativespace-cdp sshd[7599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:01:22 nativespace-cdp sshd[7599]: Failed password for invalid user superman from 43.156.6.132 port 45580 ssh2
Oct  1 05:01:22 nativespace-cdp sshd[7599]: Received disconnect from 43.156.6.132 port 45580:11: Bye Bye [preauth]
Oct  1 05:01:22 nativespace-cdp sshd[7599]: Disconnected from 43.156.6.132 port 45580 [preauth]
Oct  1 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  1 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 05:01:32 nativespace-cdp sudo[7668]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Oct  1 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:32 nativespace-cdp sudo[7675]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  1 05:01:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:32 nativespace-cdp sudo[7681]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:33 nativespace-cdp sshd[7694]: Connection closed by 159.100.136.21 port 41526 [preauth]
Oct  1 05:01:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Oct  1 05:01:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:34 nativespace-cdp sudo[7697]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:40 nativespace-cdp sshd[7725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205  user=root
Oct  1 05:01:40 nativespace-cdp sshd[7725]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:01:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Oct  1 05:01:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:01:41 nativespace-cdp sudo[7768]: pam_unix(sudo:session): session closed for user root
Oct  1 05:01:43 nativespace-cdp sshd[7725]: Failed password for root from 45.11.93.205 port 53838 ssh2
Oct  1 05:01:43 nativespace-cdp sshd[7725]: Received disconnect from 45.11.93.205 port 53838:11: Bye Bye [preauth]
Oct  1 05:01:43 nativespace-cdp sshd[7725]: Disconnected from 45.11.93.205 port 53838 [preauth]
Oct  1 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  1 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 05:01:44 nativespace-cdp sudo[7834]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 05:01:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Oct  1 05:01:44 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Oct  1 05:01:44 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Oct  1 05:01:44 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 05:01:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 05:01:45 nativespace-cdp sudo[7840]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Oct  1 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Oct  1 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Oct  1 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 05:01:49 nativespace-cdp sshd[7853]: Invalid user test_user from 200.196.50.91 port 40017
Oct  1 05:01:49 nativespace-cdp sshd[7853]: input_userauth_request: invalid user test_user [preauth]
Oct  1 05:01:49 nativespace-cdp sshd[7853]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:01:49 nativespace-cdp sshd[7853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:01:51 nativespace-cdp sshd[7853]: Failed password for invalid user test_user from 200.196.50.91 port 40017 ssh2
Oct  1 05:01:51 nativespace-cdp sshd[7853]: Received disconnect from 200.196.50.91 port 40017:11: Bye Bye [preauth]
Oct  1 05:01:51 nativespace-cdp sshd[7853]: Disconnected from 200.196.50.91 port 40017 [preauth]
Oct  1 05:02:01 nativespace-cdp sshd[7873]: Invalid user test from 43.156.6.132 port 39108
Oct  1 05:02:01 nativespace-cdp sshd[7873]: input_userauth_request: invalid user test [preauth]
Oct  1 05:02:01 nativespace-cdp sshd[7873]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:02:01 nativespace-cdp sshd[7873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:02:03 nativespace-cdp sudo[7845]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 05:02:03 nativespace-cdp sshd[7873]: Failed password for invalid user test from 43.156.6.132 port 39108 ssh2
Oct  1 05:02:04 nativespace-cdp sshd[7873]: Received disconnect from 43.156.6.132 port 39108:11: Bye Bye [preauth]
Oct  1 05:02:04 nativespace-cdp sshd[7873]: Disconnected from 43.156.6.132 port 39108 [preauth]
Oct  1 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  1 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 05:02:09 nativespace-cdp sudo[8003]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Oct  1 05:02:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Oct  1 05:02:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Oct  1 05:02:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 05:02:09 nativespace-cdp sudo[8010]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 05:02:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Oct  1 05:02:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Oct  1 05:02:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Oct  1 05:02:09 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  1 05:02:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 05:02:09 nativespace-cdp sudo[8016]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 05:02:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Oct  1 05:02:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:02:12 nativespace-cdp sudo[8053]: pam_unix(sudo:session): session closed for user root
Oct  1 05:02:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Oct  1 05:02:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:02:12 nativespace-cdp sudo[8059]: pam_unix(sudo:session): session closed for user root
Oct  1 05:02:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  1 05:02:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Oct  1 05:02:30 nativespace-cdp sudo[8143]: pam_unix(sudo:session): session closed for user fortunaz
Oct  1 05:02:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Oct  1 05:02:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:02:31 nativespace-cdp sshd[8141]: Invalid user user from 45.11.93.205 port 55442
Oct  1 05:02:31 nativespace-cdp sshd[8141]: input_userauth_request: invalid user user [preauth]
Oct  1 05:02:31 nativespace-cdp sshd[8141]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:02:31 nativespace-cdp sshd[8141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:02:32 nativespace-cdp sudo[8150]: pam_unix(sudo:session): session closed for user root
Oct  1 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Oct  1 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:02:32 nativespace-cdp sudo[8158]: pam_unix(sudo:session): session closed for user root
Oct  1 05:02:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  1 05:02:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:02:32 nativespace-cdp sudo[8162]: pam_unix(sudo:session): session closed for user root
Oct  1 05:02:33 nativespace-cdp sshd[8141]: Failed password for invalid user user from 45.11.93.205 port 55442 ssh2
Oct  1 05:02:33 nativespace-cdp sshd[8141]: Received disconnect from 45.11.93.205 port 55442:11: Bye Bye [preauth]
Oct  1 05:02:33 nativespace-cdp sshd[8141]: Disconnected from 45.11.93.205 port 55442 [preauth]
Oct  1 05:02:34 nativespace-cdp sshd[8177]: Invalid user user from 200.196.50.91 port 46308
Oct  1 05:02:34 nativespace-cdp sshd[8177]: input_userauth_request: invalid user user [preauth]
Oct  1 05:02:34 nativespace-cdp sshd[8177]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:02:34 nativespace-cdp sshd[8177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Oct  1 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:02:35 nativespace-cdp sudo[8181]: pam_unix(sudo:session): session closed for user root
Oct  1 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Oct  1 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:02:35 nativespace-cdp sudo[8186]: pam_unix(sudo:session): session closed for user root
Oct  1 05:02:36 nativespace-cdp sshd[8177]: Failed password for invalid user user from 200.196.50.91 port 46308 ssh2
Oct  1 05:02:39 nativespace-cdp sshd[8177]: Received disconnect from 200.196.50.91 port 46308:11: Bye Bye [preauth]
Oct  1 05:02:39 nativespace-cdp sshd[8177]: Disconnected from 200.196.50.91 port 46308 [preauth]
Oct  1 05:02:44 nativespace-cdp sshd[8220]: Connection closed by 43.156.6.132 port 60120 [preauth]
Oct  1 05:02:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Oct  1 05:02:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:02:47 nativespace-cdp sudo[8335]: pam_unix(sudo:session): session closed for user root
Oct  1 05:02:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=sketchy WpToolkitNotification send_admin_auto_updates_notification 'available_updates_text=<br/><br/>Updates are available for the following items:<br/><br/>' 'available_updates_list=1. Plugin "Advanced Form Integration" on ONE | OAR (https://oneoar.co.uk). Installed version: 1.64.0. Available version: 1.91.1.<br/><br/>2. Plugin "Fluent Forms" on ONE | OAR (https://oneoar.co.uk). Installed version: 4.3.22. Available version: 5.2.3.<br/><br/>' installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass
Oct  1 05:02:59 nativespace-cdp sudo: wp-toolkit : (command continued) --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Oct  1 05:02:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:02:59 nativespace-cdp sudo[8534]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:16 nativespace-cdp sshd[8677]: Invalid user test from 45.11.93.205 port 48724
Oct  1 05:03:16 nativespace-cdp sshd[8677]: input_userauth_request: invalid user test [preauth]
Oct  1 05:03:16 nativespace-cdp sshd[8677]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:03:16 nativespace-cdp sshd[8677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:03:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Oct  1 05:03:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:17 nativespace-cdp sudo[8695]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8699]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8702]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sshd[8677]: Failed password for invalid user test from 45.11.93.205 port 48724 ssh2
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8705]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8708]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8711]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8714]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8717]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8721]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8724]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8728]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8731]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8734]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8737]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8741]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8744]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8747]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8750]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8753]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8756]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8759]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:18 nativespace-cdp sudo[8762]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8765]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8768]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8771]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8774]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8777]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8780]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8783]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8786]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8789]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8792]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8795]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8798]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8801]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8804]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8808]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8811]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8814]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8817]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8820]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8823]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8826]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8829]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8832]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8835]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:19 nativespace-cdp sudo[8838]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8841]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8844]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8847]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8850]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8853]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8856]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8859]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8862]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8865]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8868]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8871]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8874]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8877]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8880]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8884]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8887]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8890]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8893]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8896]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sshd[8677]: Received disconnect from 45.11.93.205 port 48724:11: Bye Bye [preauth]
Oct  1 05:03:20 nativespace-cdp sshd[8677]: Disconnected from 45.11.93.205 port 48724 [preauth]
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8899]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8902]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8905]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8908]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8911]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8914]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:20 nativespace-cdp sudo[8917]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8920]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8923]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8926]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8929]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8932]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8935]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8939]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8943]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8946]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8949]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8952]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8955]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8958]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8961]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8967]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8970]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8973]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8976]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8979]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8982]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8985]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8988]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8991]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8995]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:21 nativespace-cdp sudo[8998]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9001]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9004]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9007]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9010]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9017]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9020]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9025]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9028]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sshd[8936]: Invalid user steam from 200.196.50.91 port 52591
Oct  1 05:03:22 nativespace-cdp sshd[8936]: input_userauth_request: invalid user steam [preauth]
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sshd[8936]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:03:22 nativespace-cdp sshd[8936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9031]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9034]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9037]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9040]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9043]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9046]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9049]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9052]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9057]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9060]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9063]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9066]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9069]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9073]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9076]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9079]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9082]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9085]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9088]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9091]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  1 05:03:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:22 nativespace-cdp sudo[9094]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9097]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9100]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9103]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9106]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9109]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9112]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9115]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sshd[8962]: Invalid user ubuntu from 43.156.6.132 port 50004
Oct  1 05:03:23 nativespace-cdp sshd[8962]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:03:23 nativespace-cdp sshd[8962]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:03:23 nativespace-cdp sshd[8962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9118]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9122]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9125]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9128]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9131]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9134]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9137]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9140]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9143]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9146]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9150]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9153]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9156]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9160]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9163]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9166]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9169]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9172]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9175]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9178]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9181]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:23 nativespace-cdp sudo[9184]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9187]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9190]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9193]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9196]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9199]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9202]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9205]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9208]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9211]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9214]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9217]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9220]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9223]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9227]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9230]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9233]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9236]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sshd[8936]: Failed password for invalid user steam from 200.196.50.91 port 52591 ssh2
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9240]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9243]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9246]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9249]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9253]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sshd[8936]: Received disconnect from 200.196.50.91 port 52591:11: Bye Bye [preauth]
Oct  1 05:03:24 nativespace-cdp sshd[8936]: Disconnected from 200.196.50.91 port 52591 [preauth]
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9256]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9259]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9262]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9265]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9268]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:24 nativespace-cdp sudo[9271]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9274]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9277]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9280]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9283]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9286]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9289]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9292]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9295]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9298]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9301]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9304]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9307]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9310]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9313]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9316]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9319]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9322]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9326]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9330]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sshd[8962]: Failed password for invalid user ubuntu from 43.156.6.132 port 50004 ssh2
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9333]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9336]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9339]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9342]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9345]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9348]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9351]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9354]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:25 nativespace-cdp sudo[9357]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:25 nativespace-cdp sshd[8962]: Received disconnect from 43.156.6.132 port 50004:11: Bye Bye [preauth]
Oct  1 05:03:25 nativespace-cdp sshd[8962]: Disconnected from 43.156.6.132 port 50004 [preauth]
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9360]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9363]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9367]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9370]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9373]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9376]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9379]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9382]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9385]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9388]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9391]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9394]: pam_unix(sudo:session): session closed for user root
Oct  1 05:03:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Oct  1 05:03:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:03:26 nativespace-cdp sudo[9397]: pam_unix(sudo:session): session closed for user root
Oct  1 05:04:04 nativespace-cdp sshd[9498]: Invalid user deploy from 200.196.50.91 port 58886
Oct  1 05:04:04 nativespace-cdp sshd[9498]: input_userauth_request: invalid user deploy [preauth]
Oct  1 05:04:04 nativespace-cdp sshd[9498]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:04:04 nativespace-cdp sshd[9498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:04:05 nativespace-cdp sshd[9501]: Invalid user steam from 43.156.6.132 port 44470
Oct  1 05:04:05 nativespace-cdp sshd[9501]: input_userauth_request: invalid user steam [preauth]
Oct  1 05:04:05 nativespace-cdp sshd[9501]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:04:05 nativespace-cdp sshd[9501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:04:05 nativespace-cdp sshd[9504]: Invalid user ftpuser from 45.11.93.205 port 55086
Oct  1 05:04:05 nativespace-cdp sshd[9504]: input_userauth_request: invalid user ftpuser [preauth]
Oct  1 05:04:05 nativespace-cdp sshd[9504]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:04:05 nativespace-cdp sshd[9504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:04:06 nativespace-cdp sshd[9498]: Failed password for invalid user deploy from 200.196.50.91 port 58886 ssh2
Oct  1 05:04:06 nativespace-cdp sshd[9498]: Received disconnect from 200.196.50.91 port 58886:11: Bye Bye [preauth]
Oct  1 05:04:06 nativespace-cdp sshd[9498]: Disconnected from 200.196.50.91 port 58886 [preauth]
Oct  1 05:04:08 nativespace-cdp sshd[9501]: Failed password for invalid user steam from 43.156.6.132 port 44470 ssh2
Oct  1 05:04:08 nativespace-cdp sshd[9504]: Failed password for invalid user ftpuser from 45.11.93.205 port 55086 ssh2
Oct  1 05:04:08 nativespace-cdp sshd[9501]: Received disconnect from 43.156.6.132 port 44470:11: Bye Bye [preauth]
Oct  1 05:04:08 nativespace-cdp sshd[9501]: Disconnected from 43.156.6.132 port 44470 [preauth]
Oct  1 05:04:08 nativespace-cdp sshd[9504]: Received disconnect from 45.11.93.205 port 55086:11: Bye Bye [preauth]
Oct  1 05:04:08 nativespace-cdp sshd[9504]: Disconnected from 45.11.93.205 port 55086 [preauth]
Oct  1 05:04:47 nativespace-cdp sshd[9614]: Invalid user tg from 43.156.6.132 port 52964
Oct  1 05:04:47 nativespace-cdp sshd[9614]: input_userauth_request: invalid user tg [preauth]
Oct  1 05:04:47 nativespace-cdp sshd[9614]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:04:47 nativespace-cdp sshd[9614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:04:49 nativespace-cdp sshd[9614]: Failed password for invalid user tg from 43.156.6.132 port 52964 ssh2
Oct  1 05:04:52 nativespace-cdp sshd[9614]: Received disconnect from 43.156.6.132 port 52964:11: Bye Bye [preauth]
Oct  1 05:04:52 nativespace-cdp sshd[9614]: Disconnected from 43.156.6.132 port 52964 [preauth]
Oct  1 05:04:54 nativespace-cdp sshd[9662]: Invalid user superman from 45.11.93.205 port 54508
Oct  1 05:04:54 nativespace-cdp sshd[9662]: input_userauth_request: invalid user superman [preauth]
Oct  1 05:04:54 nativespace-cdp sshd[9662]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:04:54 nativespace-cdp sshd[9662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:04:54 nativespace-cdp sshd[9636]: Received disconnect from 200.196.50.91 port 36942:11: Bye Bye [preauth]
Oct  1 05:04:54 nativespace-cdp sshd[9636]: Disconnected from 200.196.50.91 port 36942 [preauth]
Oct  1 05:04:57 nativespace-cdp sshd[9662]: Failed password for invalid user superman from 45.11.93.205 port 54508 ssh2
Oct  1 05:04:57 nativespace-cdp sshd[9662]: Received disconnect from 45.11.93.205 port 54508:11: Bye Bye [preauth]
Oct  1 05:04:57 nativespace-cdp sshd[9662]: Disconnected from 45.11.93.205 port 54508 [preauth]
Oct  1 05:05:28 nativespace-cdp sshd[9946]: Invalid user acer from 43.156.6.132 port 36520
Oct  1 05:05:28 nativespace-cdp sshd[9946]: input_userauth_request: invalid user acer [preauth]
Oct  1 05:05:28 nativespace-cdp sshd[9946]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:05:28 nativespace-cdp sshd[9946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:05:30 nativespace-cdp sshd[9946]: Failed password for invalid user acer from 43.156.6.132 port 36520 ssh2
Oct  1 05:05:33 nativespace-cdp sshd[9946]: Received disconnect from 43.156.6.132 port 36520:11: Bye Bye [preauth]
Oct  1 05:05:33 nativespace-cdp sshd[9946]: Disconnected from 43.156.6.132 port 36520 [preauth]
Oct  1 05:05:34 nativespace-cdp sshd[9965]: Invalid user acer from 200.196.50.91 port 43233
Oct  1 05:05:34 nativespace-cdp sshd[9965]: input_userauth_request: invalid user acer [preauth]
Oct  1 05:05:34 nativespace-cdp sshd[9965]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:05:34 nativespace-cdp sshd[9965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:05:36 nativespace-cdp sshd[9965]: Failed password for invalid user acer from 200.196.50.91 port 43233 ssh2
Oct  1 05:05:36 nativespace-cdp sshd[9965]: Received disconnect from 200.196.50.91 port 43233:11: Bye Bye [preauth]
Oct  1 05:05:36 nativespace-cdp sshd[9965]: Disconnected from 200.196.50.91 port 43233 [preauth]
Oct  1 05:06:08 nativespace-cdp sshd[10131]: Invalid user username from 43.156.6.132 port 53838
Oct  1 05:06:08 nativespace-cdp sshd[10131]: input_userauth_request: invalid user username [preauth]
Oct  1 05:06:08 nativespace-cdp sshd[10131]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:06:08 nativespace-cdp sshd[10131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:06:10 nativespace-cdp sshd[10131]: Failed password for invalid user username from 43.156.6.132 port 53838 ssh2
Oct  1 05:06:11 nativespace-cdp sshd[10131]: Received disconnect from 43.156.6.132 port 53838:11: Bye Bye [preauth]
Oct  1 05:06:11 nativespace-cdp sshd[10131]: Disconnected from 43.156.6.132 port 53838 [preauth]
Oct  1 05:06:17 nativespace-cdp sshd[10150]: Invalid user test from 200.196.50.91 port 49520
Oct  1 05:06:17 nativespace-cdp sshd[10150]: input_userauth_request: invalid user test [preauth]
Oct  1 05:06:17 nativespace-cdp sshd[10150]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:06:17 nativespace-cdp sshd[10150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:06:19 nativespace-cdp sshd[10150]: Failed password for invalid user test from 200.196.50.91 port 49520 ssh2
Oct  1 05:06:19 nativespace-cdp sshd[10150]: Received disconnect from 200.196.50.91 port 49520:11: Bye Bye [preauth]
Oct  1 05:06:19 nativespace-cdp sshd[10150]: Disconnected from 200.196.50.91 port 49520 [preauth]
Oct  1 05:06:27 nativespace-cdp sshd[10164]: Invalid user test01 from 45.11.93.205 port 56386
Oct  1 05:06:27 nativespace-cdp sshd[10164]: input_userauth_request: invalid user test01 [preauth]
Oct  1 05:06:27 nativespace-cdp sshd[10164]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:06:27 nativespace-cdp sshd[10164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:06:28 nativespace-cdp sshd[10164]: Failed password for invalid user test01 from 45.11.93.205 port 56386 ssh2
Oct  1 05:06:29 nativespace-cdp sshd[10164]: Received disconnect from 45.11.93.205 port 56386:11: Bye Bye [preauth]
Oct  1 05:06:29 nativespace-cdp sshd[10164]: Disconnected from 45.11.93.205 port 56386 [preauth]
Oct  1 05:06:33 nativespace-cdp sshd[10180]: Connection closed by 159.100.136.21 port 51450 [preauth]
Oct  1 05:06:48 nativespace-cdp sshd[10213]: Invalid user sysadmin from 43.156.6.132 port 41798
Oct  1 05:06:48 nativespace-cdp sshd[10213]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 05:06:48 nativespace-cdp sshd[10213]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:06:48 nativespace-cdp sshd[10213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:06:50 nativespace-cdp sshd[10213]: Failed password for invalid user sysadmin from 43.156.6.132 port 41798 ssh2
Oct  1 05:06:51 nativespace-cdp sshd[10213]: Received disconnect from 43.156.6.132 port 41798:11: Bye Bye [preauth]
Oct  1 05:06:51 nativespace-cdp sshd[10213]: Disconnected from 43.156.6.132 port 41798 [preauth]
Oct  1 05:07:02 nativespace-cdp sshd[10264]: Invalid user support from 200.196.50.91 port 55813
Oct  1 05:07:02 nativespace-cdp sshd[10264]: input_userauth_request: invalid user support [preauth]
Oct  1 05:07:02 nativespace-cdp sshd[10264]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:07:02 nativespace-cdp sshd[10264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:07:05 nativespace-cdp sshd[10264]: Failed password for invalid user support from 200.196.50.91 port 55813 ssh2
Oct  1 05:07:05 nativespace-cdp sshd[10264]: Received disconnect from 200.196.50.91 port 55813:11: Bye Bye [preauth]
Oct  1 05:07:05 nativespace-cdp sshd[10264]: Disconnected from 200.196.50.91 port 55813 [preauth]
Oct  1 05:07:13 nativespace-cdp sshd[10367]: Invalid user ubuntu from 45.11.93.205 port 50152
Oct  1 05:07:13 nativespace-cdp sshd[10367]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:07:13 nativespace-cdp sshd[10367]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:07:13 nativespace-cdp sshd[10367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:07:14 nativespace-cdp sshd[9987]: Connection closed by 45.11.93.205 port 44078 [preauth]
Oct  1 05:07:15 nativespace-cdp sshd[10367]: Failed password for invalid user ubuntu from 45.11.93.205 port 50152 ssh2
Oct  1 05:07:15 nativespace-cdp sshd[10367]: Received disconnect from 45.11.93.205 port 50152:11: Bye Bye [preauth]
Oct  1 05:07:15 nativespace-cdp sshd[10367]: Disconnected from 45.11.93.205 port 50152 [preauth]
Oct  1 05:07:30 nativespace-cdp sshd[10416]: Invalid user ubuntu from 43.156.6.132 port 35972
Oct  1 05:07:30 nativespace-cdp sshd[10416]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:07:30 nativespace-cdp sshd[10416]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:07:30 nativespace-cdp sshd[10416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:07:32 nativespace-cdp sshd[10416]: Failed password for invalid user ubuntu from 43.156.6.132 port 35972 ssh2
Oct  1 05:07:35 nativespace-cdp sshd[10416]: Received disconnect from 43.156.6.132 port 35972:11: Bye Bye [preauth]
Oct  1 05:07:35 nativespace-cdp sshd[10416]: Disconnected from 43.156.6.132 port 35972 [preauth]
Oct  1 05:07:46 nativespace-cdp sshd[10464]: Invalid user test from 200.196.50.91 port 33877
Oct  1 05:07:46 nativespace-cdp sshd[10464]: input_userauth_request: invalid user test [preauth]
Oct  1 05:07:46 nativespace-cdp sshd[10464]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:07:46 nativespace-cdp sshd[10464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:07:48 nativespace-cdp sshd[10464]: Failed password for invalid user test from 200.196.50.91 port 33877 ssh2
Oct  1 05:07:48 nativespace-cdp sshd[10464]: Received disconnect from 200.196.50.91 port 33877:11: Bye Bye [preauth]
Oct  1 05:07:48 nativespace-cdp sshd[10464]: Disconnected from 200.196.50.91 port 33877 [preauth]
Oct  1 05:08:03 nativespace-cdp sshd[10531]: Invalid user username from 45.11.93.205 port 57446
Oct  1 05:08:03 nativespace-cdp sshd[10531]: input_userauth_request: invalid user username [preauth]
Oct  1 05:08:03 nativespace-cdp sshd[10531]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:08:03 nativespace-cdp sshd[10531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:08:05 nativespace-cdp sshd[10531]: Failed password for invalid user username from 45.11.93.205 port 57446 ssh2
Oct  1 05:08:06 nativespace-cdp sshd[10531]: Received disconnect from 45.11.93.205 port 57446:11: Bye Bye [preauth]
Oct  1 05:08:06 nativespace-cdp sshd[10531]: Disconnected from 45.11.93.205 port 57446 [preauth]
Oct  1 05:08:11 nativespace-cdp sshd[10623]: Invalid user support from 43.156.6.132 port 38016
Oct  1 05:08:11 nativespace-cdp sshd[10623]: input_userauth_request: invalid user support [preauth]
Oct  1 05:08:11 nativespace-cdp sshd[10623]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:08:11 nativespace-cdp sshd[10623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:08:13 nativespace-cdp sshd[10623]: Failed password for invalid user support from 43.156.6.132 port 38016 ssh2
Oct  1 05:08:19 nativespace-cdp sshd[10623]: Received disconnect from 43.156.6.132 port 38016:11: Bye Bye [preauth]
Oct  1 05:08:19 nativespace-cdp sshd[10623]: Disconnected from 43.156.6.132 port 38016 [preauth]
Oct  1 05:08:32 nativespace-cdp sshd[10716]: Invalid user ubuntu from 200.196.50.91 port 40173
Oct  1 05:08:32 nativespace-cdp sshd[10716]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:08:32 nativespace-cdp sshd[10716]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:08:32 nativespace-cdp sshd[10716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:08:34 nativespace-cdp sshd[10716]: Failed password for invalid user ubuntu from 200.196.50.91 port 40173 ssh2
Oct  1 05:08:37 nativespace-cdp sshd[10716]: Received disconnect from 200.196.50.91 port 40173:11: Bye Bye [preauth]
Oct  1 05:08:37 nativespace-cdp sshd[10716]: Disconnected from 200.196.50.91 port 40173 [preauth]
Oct  1 05:08:53 nativespace-cdp sshd[10761]: Invalid user test from 43.156.6.132 port 39854
Oct  1 05:08:53 nativespace-cdp sshd[10761]: input_userauth_request: invalid user test [preauth]
Oct  1 05:08:53 nativespace-cdp sshd[10761]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:08:53 nativespace-cdp sshd[10761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:08:55 nativespace-cdp sshd[10761]: Failed password for invalid user test from 43.156.6.132 port 39854 ssh2
Oct  1 05:08:58 nativespace-cdp sshd[10761]: Received disconnect from 43.156.6.132 port 39854:11: Bye Bye [preauth]
Oct  1 05:08:58 nativespace-cdp sshd[10761]: Disconnected from 43.156.6.132 port 39854 [preauth]
Oct  1 05:08:59 nativespace-cdp sshd[10772]: Invalid user tomcat from 45.11.93.205 port 58264
Oct  1 05:08:59 nativespace-cdp sshd[10772]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 05:08:59 nativespace-cdp sshd[10772]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:08:59 nativespace-cdp sshd[10772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:09:01 nativespace-cdp sshd[10772]: Failed password for invalid user tomcat from 45.11.93.205 port 58264 ssh2
Oct  1 05:09:02 nativespace-cdp sshd[10772]: Received disconnect from 45.11.93.205 port 58264:11: Bye Bye [preauth]
Oct  1 05:09:02 nativespace-cdp sshd[10772]: Disconnected from 45.11.93.205 port 58264 [preauth]
Oct  1 05:09:16 nativespace-cdp sshd[10822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91  user=root
Oct  1 05:09:16 nativespace-cdp sshd[10822]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:09:18 nativespace-cdp sshd[10822]: Failed password for root from 200.196.50.91 port 46469 ssh2
Oct  1 05:09:21 nativespace-cdp sshd[10822]: Received disconnect from 200.196.50.91 port 46469:11: Bye Bye [preauth]
Oct  1 05:09:21 nativespace-cdp sshd[10822]: Disconnected from 200.196.50.91 port 46469 [preauth]
Oct  1 05:09:38 nativespace-cdp sshd[10865]: Invalid user ubuntu from 43.156.6.132 port 53906
Oct  1 05:09:38 nativespace-cdp sshd[10865]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:09:38 nativespace-cdp sshd[10865]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:09:38 nativespace-cdp sshd[10865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:09:40 nativespace-cdp sshd[10865]: Failed password for invalid user ubuntu from 43.156.6.132 port 53906 ssh2
Oct  1 05:09:46 nativespace-cdp sshd[10865]: Received disconnect from 43.156.6.132 port 53906:11: Bye Bye [preauth]
Oct  1 05:09:46 nativespace-cdp sshd[10865]: Disconnected from 43.156.6.132 port 53906 [preauth]
Oct  1 05:09:46 nativespace-cdp sshd[10894]: Invalid user test from 45.11.93.205 port 43510
Oct  1 05:09:46 nativespace-cdp sshd[10894]: input_userauth_request: invalid user test [preauth]
Oct  1 05:09:46 nativespace-cdp sshd[10894]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:09:46 nativespace-cdp sshd[10894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:09:49 nativespace-cdp sshd[10894]: Failed password for invalid user test from 45.11.93.205 port 43510 ssh2
Oct  1 05:09:50 nativespace-cdp sshd[10894]: Received disconnect from 45.11.93.205 port 43510:11: Bye Bye [preauth]
Oct  1 05:09:50 nativespace-cdp sshd[10894]: Disconnected from 45.11.93.205 port 43510 [preauth]
Oct  1 05:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 05:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:09:56 nativespace-cdp sudo[10926]: pam_unix(sudo:session): session closed for user root
Oct  1 05:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 05:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:09:56 nativespace-cdp sudo[10929]: pam_unix(sudo:session): session closed for user root
Oct  1 05:09:56 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 05:09:56 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:09:57 nativespace-cdp sudo[10933]: pam_unix(sudo:session): session closed for user root
Oct  1 05:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 05:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:09:57 nativespace-cdp sudo[10940]: pam_unix(sudo:session): session closed for user root
Oct  1 05:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 05:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:01 nativespace-cdp sudo[10944]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 05:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:01 nativespace-cdp sudo[10957]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 05:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:01 nativespace-cdp sudo[10981]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 05:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:01 nativespace-cdp sudo[11031]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 05:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:01 nativespace-cdp sudo[11037]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 05:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:01 nativespace-cdp sudo[11045]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 05:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:01 nativespace-cdp sudo[11051]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:03 nativespace-cdp sshd[11088]: Invalid user username from 200.196.50.91 port 52766
Oct  1 05:10:03 nativespace-cdp sshd[11088]: input_userauth_request: invalid user username [preauth]
Oct  1 05:10:03 nativespace-cdp sshd[11088]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:10:03 nativespace-cdp sshd[11088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:10:04 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 05:10:04 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:05 nativespace-cdp sudo[11104]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 05:10:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:05 nativespace-cdp sshd[11088]: Failed password for invalid user username from 200.196.50.91 port 52766 ssh2
Oct  1 05:10:06 nativespace-cdp sshd[11088]: Received disconnect from 200.196.50.91 port 52766:11: Bye Bye [preauth]
Oct  1 05:10:06 nativespace-cdp sshd[11088]: Disconnected from 200.196.50.91 port 52766 [preauth]
Oct  1 05:10:06 nativespace-cdp sudo[11110]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=tomandle user-2=jennimil user-3=chrisdal user-4=mcdermos user-5=nbhavers user-6=careers user-7=david user-8=attlebor user-9=lucy user-10=onlycont user-11=ranxterc user-12=hodgsonmail user-13=outdoorc user-14=branko user-15=romaldki user-16=nove user-17=boldover user-18=bakery user-19=sosevalu user-20=crrtipdl user-21=oubpgvbx user-22=tstardom user-23=what user-24=sketchy user-25=cath user-26=havantho user-27=nvihkvu user-28=ladburyp user-29=stagingerris user-30=dancinggardener user-31=kategilpin user-32=design user-33=sibtoncc user-34=asandcoc user-35=bwppodcast user-36=zebrapho user-37=steve user-38=burydropin user-39=fawcettd user-40=nsceres user-41=beauty user-42=eatspam user-43=darkstar user-44=dhyana user-45=nscdp user-46=health2045 user-47=fortunaz user-48=leftie user-49=foods
Oct  1 05:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=lkpier user-51=philmcph user-52=ctedorgu user-53=firstre5 user-54=donnychicago user-55=steakbridieme user-56=smrszyqg user-57=isleofwi user-58=hidden user-59=nomistakes user-60=barbersh user-61=tigerlet user-62=cathski user-63=cambria1 user-64=ninejimm user-65=reliable user-66=howardon user-67=paulmca1 user-68=pugwash user-69=cwsocial user-70=hirefootballgame user-71=eugincou user-72=courseme user-73=jonhartl user-74=seftvta user-75=ultbcrra user-76=firstres user-77=opaiscyx user-78=coursemc user-79=firstrel user-80=clarkass user-81=costestimatorco user-82=firstred user-83=southlon user-84=highlegh user-85=gilpin user-86=milloyco user-87=elecleis user-88=hubmaster user-89=carsinyo user-90=fetch user-91=accooper user-92=ianrayne user-93=connectedshoppin user-94=thqkgnbz user-95=brighto1 user-96=nstriton user-97=firstre2 user-98=vivienn1 user-99=battlere user-100=oneoarco user-101=bedfords user-102=belle
Oct  1 05:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ggaaorgu user-104=newstoda user-105=bemadonn user-106=alexadmin user-107=skyfirec user-108=innovat1 user-109=stuartge user-110=askhform user-111=nativene user-112=booff user-113=markward user-114=foundation user-115=athenare user-116=connect9 user-117=vantagep user-118=maflemin user-119=lbscrmod user-120=ulsukarm user-121=jarvisin user-122=spectrum user-123=hodgesonweb user-124=theblack user-125=still user-126=agproduc user-127=stephani user-128=leereyn1 user-129=lakesan1 user-130=brmrjxl user-131=strathar user-132=sarafoundation user-133=atestord user-134=wilsonsw user-135=musorguk user-136=megacards user-137=martsblo user-138=dickemery123 user-139=ptkxhsbt user-140=lbhyisi user-141=hhdugcor user-142=magichat feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 05:10:06 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 05:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:07 nativespace-cdp sudo[11120]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 05:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:08 nativespace-cdp sudo[11128]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Bn3UXnzoIdZNIL8x.~
Oct  1 05:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:08 nativespace-cdp sudo[11131]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Bn3UXnzoIdZNIL8x.~'
Oct  1 05:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:08 nativespace-cdp sudo[11134]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Bn3UXnzoIdZNIL8x.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 05:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:08 nativespace-cdp sudo[11138]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 05:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:08 nativespace-cdp sudo[11141]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:25 nativespace-cdp sshd[11267]: Connection closed by 43.156.6.132 port 60640 [preauth]
Oct  1 05:10:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 05:10:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:10:26 nativespace-cdp sudo[11287]: pam_unix(sudo:session): session closed for user root
Oct  1 05:10:38 nativespace-cdp sshd[11320]: Invalid user ubuntu from 45.11.93.205 port 58176
Oct  1 05:10:38 nativespace-cdp sshd[11320]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:10:38 nativespace-cdp sshd[11320]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:10:38 nativespace-cdp sshd[11320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:10:40 nativespace-cdp sshd[11320]: Failed password for invalid user ubuntu from 45.11.93.205 port 58176 ssh2
Oct  1 05:10:43 nativespace-cdp sshd[11320]: Received disconnect from 45.11.93.205 port 58176:11: Bye Bye [preauth]
Oct  1 05:10:43 nativespace-cdp sshd[11320]: Disconnected from 45.11.93.205 port 58176 [preauth]
Oct  1 05:10:50 nativespace-cdp sshd[11393]: Invalid user test01 from 200.196.50.91 port 59054
Oct  1 05:10:50 nativespace-cdp sshd[11393]: input_userauth_request: invalid user test01 [preauth]
Oct  1 05:10:50 nativespace-cdp sshd[11393]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:10:50 nativespace-cdp sshd[11393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:10:52 nativespace-cdp sshd[11393]: Failed password for invalid user test01 from 200.196.50.91 port 59054 ssh2
Oct  1 05:10:55 nativespace-cdp sshd[11393]: Received disconnect from 200.196.50.91 port 59054:11: Bye Bye [preauth]
Oct  1 05:10:55 nativespace-cdp sshd[11393]: Disconnected from 200.196.50.91 port 59054 [preauth]
Oct  1 05:11:07 nativespace-cdp sshd[11442]: Invalid user sopuser from 43.156.6.132 port 59278
Oct  1 05:11:07 nativespace-cdp sshd[11442]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 05:11:07 nativespace-cdp sshd[11442]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:11:07 nativespace-cdp sshd[11442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:11:10 nativespace-cdp sshd[11442]: Failed password for invalid user sopuser from 43.156.6.132 port 59278 ssh2
Oct  1 05:11:10 nativespace-cdp sshd[11442]: Received disconnect from 43.156.6.132 port 59278:11: Bye Bye [preauth]
Oct  1 05:11:10 nativespace-cdp sshd[11442]: Disconnected from 43.156.6.132 port 59278 [preauth]
Oct  1 05:11:26 nativespace-cdp sshd[11486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205  user=root
Oct  1 05:11:26 nativespace-cdp sshd[11486]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:11:28 nativespace-cdp sshd[11486]: Failed password for root from 45.11.93.205 port 60804 ssh2
Oct  1 05:11:28 nativespace-cdp sshd[11486]: Received disconnect from 45.11.93.205 port 60804:11: Bye Bye [preauth]
Oct  1 05:11:28 nativespace-cdp sshd[11486]: Disconnected from 45.11.93.205 port 60804 [preauth]
Oct  1 05:11:33 nativespace-cdp sshd[11512]: Connection closed by 159.100.136.21 port 32862 [preauth]
Oct  1 05:11:40 nativespace-cdp sshd[11522]: Connection closed by 200.196.50.91 port 37118 [preauth]
Oct  1 05:12:15 nativespace-cdp sshd[11622]: Invalid user zx from 45.11.93.205 port 41646
Oct  1 05:12:15 nativespace-cdp sshd[11622]: input_userauth_request: invalid user zx [preauth]
Oct  1 05:12:15 nativespace-cdp sshd[11622]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:12:15 nativespace-cdp sshd[11622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:12:17 nativespace-cdp sshd[11622]: Failed password for invalid user zx from 45.11.93.205 port 41646 ssh2
Oct  1 05:12:20 nativespace-cdp sshd[11622]: Received disconnect from 45.11.93.205 port 41646:11: Bye Bye [preauth]
Oct  1 05:12:20 nativespace-cdp sshd[11622]: Disconnected from 45.11.93.205 port 41646 [preauth]
Oct  1 05:12:31 nativespace-cdp sshd[11652]: Invalid user user from 43.156.6.132 port 32858
Oct  1 05:12:31 nativespace-cdp sshd[11652]: input_userauth_request: invalid user user [preauth]
Oct  1 05:12:31 nativespace-cdp sshd[11652]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:12:31 nativespace-cdp sshd[11652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:12:33 nativespace-cdp sshd[11652]: Failed password for invalid user user from 43.156.6.132 port 32858 ssh2
Oct  1 05:12:33 nativespace-cdp sshd[11652]: Received disconnect from 43.156.6.132 port 32858:11: Bye Bye [preauth]
Oct  1 05:12:33 nativespace-cdp sshd[11652]: Disconnected from 43.156.6.132 port 32858 [preauth]
Oct  1 05:13:02 nativespace-cdp sshd[11740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91  user=root
Oct  1 05:13:02 nativespace-cdp sshd[11740]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:13:04 nativespace-cdp sshd[11740]: Failed password for root from 200.196.50.91 port 49697 ssh2
Oct  1 05:13:04 nativespace-cdp sshd[11740]: Received disconnect from 200.196.50.91 port 49697:11: Bye Bye [preauth]
Oct  1 05:13:04 nativespace-cdp sshd[11740]: Disconnected from 200.196.50.91 port 49697 [preauth]
Oct  1 05:13:05 nativespace-cdp sshd[11763]: Invalid user deploy from 45.11.93.205 port 39366
Oct  1 05:13:05 nativespace-cdp sshd[11763]: input_userauth_request: invalid user deploy [preauth]
Oct  1 05:13:05 nativespace-cdp sshd[11763]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:13:05 nativespace-cdp sshd[11763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:13:07 nativespace-cdp sshd[11763]: Failed password for invalid user deploy from 45.11.93.205 port 39366 ssh2
Oct  1 05:13:07 nativespace-cdp sshd[11763]: Received disconnect from 45.11.93.205 port 39366:11: Bye Bye [preauth]
Oct  1 05:13:07 nativespace-cdp sshd[11763]: Disconnected from 45.11.93.205 port 39366 [preauth]
Oct  1 05:13:09 nativespace-cdp sshd[11775]: Invalid user deploy from 43.156.6.132 port 38782
Oct  1 05:13:09 nativespace-cdp sshd[11775]: input_userauth_request: invalid user deploy [preauth]
Oct  1 05:13:09 nativespace-cdp sshd[11775]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:13:09 nativespace-cdp sshd[11775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:13:11 nativespace-cdp sshd[11775]: Failed password for invalid user deploy from 43.156.6.132 port 38782 ssh2
Oct  1 05:13:14 nativespace-cdp sshd[11775]: Received disconnect from 43.156.6.132 port 38782:11: Bye Bye [preauth]
Oct  1 05:13:14 nativespace-cdp sshd[11775]: Disconnected from 43.156.6.132 port 38782 [preauth]
Oct  1 05:13:47 nativespace-cdp sshd[11876]: Invalid user support from 200.196.50.91 port 55986
Oct  1 05:13:47 nativespace-cdp sshd[11876]: input_userauth_request: invalid user support [preauth]
Oct  1 05:13:47 nativespace-cdp sshd[11876]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:13:47 nativespace-cdp sshd[11876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:13:49 nativespace-cdp sshd[11876]: Failed password for invalid user support from 200.196.50.91 port 55986 ssh2
Oct  1 05:13:49 nativespace-cdp sshd[11876]: Received disconnect from 200.196.50.91 port 55986:11: Bye Bye [preauth]
Oct  1 05:13:49 nativespace-cdp sshd[11876]: Disconnected from 200.196.50.91 port 55986 [preauth]
Oct  1 05:13:50 nativespace-cdp sshd[11881]: Invalid user ubuntu from 43.156.6.132 port 55788
Oct  1 05:13:50 nativespace-cdp sshd[11881]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:13:50 nativespace-cdp sshd[11881]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:13:50 nativespace-cdp sshd[11881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:13:52 nativespace-cdp sshd[11881]: Failed password for invalid user ubuntu from 43.156.6.132 port 55788 ssh2
Oct  1 05:13:58 nativespace-cdp sshd[11881]: Received disconnect from 43.156.6.132 port 55788:11: Bye Bye [preauth]
Oct  1 05:13:58 nativespace-cdp sshd[11881]: Disconnected from 43.156.6.132 port 55788 [preauth]
Oct  1 05:14:13 nativespace-cdp sshd[11886]: Connection closed by 45.11.93.205 port 39294 [preauth]
Oct  1 05:14:31 nativespace-cdp sshd[11982]: Invalid user abhishek from 200.196.50.91 port 34049
Oct  1 05:14:31 nativespace-cdp sshd[11982]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 05:14:31 nativespace-cdp sshd[11982]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:14:31 nativespace-cdp sshd[11982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:14:33 nativespace-cdp sshd[11982]: Failed password for invalid user abhishek from 200.196.50.91 port 34049 ssh2
Oct  1 05:14:34 nativespace-cdp sshd[11982]: Received disconnect from 200.196.50.91 port 34049:11: Bye Bye [preauth]
Oct  1 05:14:34 nativespace-cdp sshd[11982]: Disconnected from 200.196.50.91 port 34049 [preauth]
Oct  1 05:14:35 nativespace-cdp sshd[11985]: Invalid user support from 43.156.6.132 port 59554
Oct  1 05:14:35 nativespace-cdp sshd[11985]: input_userauth_request: invalid user support [preauth]
Oct  1 05:14:35 nativespace-cdp sshd[11985]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:14:35 nativespace-cdp sshd[11985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:14:37 nativespace-cdp sshd[11985]: Failed password for invalid user support from 43.156.6.132 port 59554 ssh2
Oct  1 05:14:37 nativespace-cdp sshd[11985]: Received disconnect from 43.156.6.132 port 59554:11: Bye Bye [preauth]
Oct  1 05:14:37 nativespace-cdp sshd[11985]: Disconnected from 43.156.6.132 port 59554 [preauth]
Oct  1 05:14:40 nativespace-cdp sshd[12002]: Invalid user ubuntu from 45.11.93.205 port 33468
Oct  1 05:14:40 nativespace-cdp sshd[12002]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:14:40 nativespace-cdp sshd[12002]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:14:40 nativespace-cdp sshd[12002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:14:42 nativespace-cdp sshd[12002]: Failed password for invalid user ubuntu from 45.11.93.205 port 33468 ssh2
Oct  1 05:14:42 nativespace-cdp sshd[12002]: Received disconnect from 45.11.93.205 port 33468:11: Bye Bye [preauth]
Oct  1 05:14:42 nativespace-cdp sshd[12002]: Disconnected from 45.11.93.205 port 33468 [preauth]
Oct  1 05:15:15 nativespace-cdp sshd[12240]: Invalid user superman from 200.196.50.91 port 40352
Oct  1 05:15:15 nativespace-cdp sshd[12240]: input_userauth_request: invalid user superman [preauth]
Oct  1 05:15:15 nativespace-cdp sshd[12240]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:15:15 nativespace-cdp sshd[12240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:15:15 nativespace-cdp sshd[12242]: Invalid user test from 43.156.6.132 port 60148
Oct  1 05:15:15 nativespace-cdp sshd[12242]: input_userauth_request: invalid user test [preauth]
Oct  1 05:15:15 nativespace-cdp sshd[12242]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:15:15 nativespace-cdp sshd[12242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:15:17 nativespace-cdp sshd[12240]: Failed password for invalid user superman from 200.196.50.91 port 40352 ssh2
Oct  1 05:15:18 nativespace-cdp sshd[12242]: Failed password for invalid user test from 43.156.6.132 port 60148 ssh2
Oct  1 05:15:19 nativespace-cdp sshd[12240]: Received disconnect from 200.196.50.91 port 40352:11: Bye Bye [preauth]
Oct  1 05:15:19 nativespace-cdp sshd[12240]: Disconnected from 200.196.50.91 port 40352 [preauth]
Oct  1 05:15:19 nativespace-cdp sshd[12242]: Received disconnect from 43.156.6.132 port 60148:11: Bye Bye [preauth]
Oct  1 05:15:19 nativespace-cdp sshd[12242]: Disconnected from 43.156.6.132 port 60148 [preauth]
Oct  1 05:15:29 nativespace-cdp sshd[12318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205  user=root
Oct  1 05:15:29 nativespace-cdp sshd[12318]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:15:31 nativespace-cdp sshd[12318]: Failed password for root from 45.11.93.205 port 49136 ssh2
Oct  1 05:15:33 nativespace-cdp sshd[12318]: Received disconnect from 45.11.93.205 port 49136:11: Bye Bye [preauth]
Oct  1 05:15:33 nativespace-cdp sshd[12318]: Disconnected from 45.11.93.205 port 49136 [preauth]
Oct  1 05:15:59 nativespace-cdp sshd[12426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132  user=root
Oct  1 05:15:59 nativespace-cdp sshd[12426]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:16:00 nativespace-cdp sshd[12431]: Invalid user zx from 200.196.50.91 port 46656
Oct  1 05:16:00 nativespace-cdp sshd[12431]: input_userauth_request: invalid user zx [preauth]
Oct  1 05:16:00 nativespace-cdp sshd[12431]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:16:00 nativespace-cdp sshd[12431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:16:01 nativespace-cdp sshd[12426]: Failed password for root from 43.156.6.132 port 60792 ssh2
Oct  1 05:16:02 nativespace-cdp sshd[12426]: Received disconnect from 43.156.6.132 port 60792:11: Bye Bye [preauth]
Oct  1 05:16:02 nativespace-cdp sshd[12426]: Disconnected from 43.156.6.132 port 60792 [preauth]
Oct  1 05:16:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 05:16:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 05:16:02 nativespace-cdp sudo[12461]: pam_unix(sudo:session): session closed for user root
Oct  1 05:16:03 nativespace-cdp sshd[12431]: Failed password for invalid user zx from 200.196.50.91 port 46656 ssh2
Oct  1 05:16:03 nativespace-cdp sshd[12431]: Received disconnect from 200.196.50.91 port 46656:11: Bye Bye [preauth]
Oct  1 05:16:03 nativespace-cdp sshd[12431]: Disconnected from 200.196.50.91 port 46656 [preauth]
Oct  1 05:16:19 nativespace-cdp sshd[12502]: Invalid user test_user from 45.11.93.205 port 59856
Oct  1 05:16:19 nativespace-cdp sshd[12502]: input_userauth_request: invalid user test_user [preauth]
Oct  1 05:16:19 nativespace-cdp sshd[12502]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:16:19 nativespace-cdp sshd[12502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:16:21 nativespace-cdp sshd[12502]: Failed password for invalid user test_user from 45.11.93.205 port 59856 ssh2
Oct  1 05:16:22 nativespace-cdp sshd[12502]: Received disconnect from 45.11.93.205 port 59856:11: Bye Bye [preauth]
Oct  1 05:16:22 nativespace-cdp sshd[12502]: Disconnected from 45.11.93.205 port 59856 [preauth]
Oct  1 05:16:33 nativespace-cdp sshd[12535]: Connection closed by 159.100.136.21 port 42750 [preauth]
Oct  1 05:16:42 nativespace-cdp sshd[12558]: Invalid user sysadmin from 43.156.6.132 port 57740
Oct  1 05:16:42 nativespace-cdp sshd[12558]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 05:16:42 nativespace-cdp sshd[12558]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:16:42 nativespace-cdp sshd[12558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:16:43 nativespace-cdp sshd[12558]: Failed password for invalid user sysadmin from 43.156.6.132 port 57740 ssh2
Oct  1 05:16:44 nativespace-cdp sshd[12558]: Received disconnect from 43.156.6.132 port 57740:11: Bye Bye [preauth]
Oct  1 05:16:44 nativespace-cdp sshd[12558]: Disconnected from 43.156.6.132 port 57740 [preauth]
Oct  1 05:16:45 nativespace-cdp sshd[12574]: Invalid user odoo from 200.196.50.91 port 52955
Oct  1 05:16:45 nativespace-cdp sshd[12574]: input_userauth_request: invalid user odoo [preauth]
Oct  1 05:16:45 nativespace-cdp sshd[12574]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:16:45 nativespace-cdp sshd[12574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:16:47 nativespace-cdp sshd[12574]: Failed password for invalid user odoo from 200.196.50.91 port 52955 ssh2
Oct  1 05:16:47 nativespace-cdp sshd[12574]: Received disconnect from 200.196.50.91 port 52955:11: Bye Bye [preauth]
Oct  1 05:16:47 nativespace-cdp sshd[12574]: Disconnected from 200.196.50.91 port 52955 [preauth]
Oct  1 05:17:10 nativespace-cdp sshd[12644]: Invalid user sopuser from 45.11.93.205 port 55190
Oct  1 05:17:10 nativespace-cdp sshd[12644]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 05:17:10 nativespace-cdp sshd[12644]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:17:10 nativespace-cdp sshd[12644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:17:12 nativespace-cdp sshd[12644]: Failed password for invalid user sopuser from 45.11.93.205 port 55190 ssh2
Oct  1 05:17:12 nativespace-cdp sshd[12644]: Received disconnect from 45.11.93.205 port 55190:11: Bye Bye [preauth]
Oct  1 05:17:12 nativespace-cdp sshd[12644]: Disconnected from 45.11.93.205 port 55190 [preauth]
Oct  1 05:17:27 nativespace-cdp sshd[12674]: Invalid user tomcat from 43.156.6.132 port 55002
Oct  1 05:17:27 nativespace-cdp sshd[12674]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 05:17:28 nativespace-cdp sshd[12674]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:17:28 nativespace-cdp sshd[12674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:17:29 nativespace-cdp sshd[12674]: Failed password for invalid user tomcat from 43.156.6.132 port 55002 ssh2
Oct  1 05:17:29 nativespace-cdp sshd[12674]: Received disconnect from 43.156.6.132 port 55002:11: Bye Bye [preauth]
Oct  1 05:17:29 nativespace-cdp sshd[12674]: Disconnected from 43.156.6.132 port 55002 [preauth]
Oct  1 05:17:30 nativespace-cdp sshd[12696]: Invalid user ubuntu from 200.196.50.91 port 59259
Oct  1 05:17:30 nativespace-cdp sshd[12696]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:17:30 nativespace-cdp sshd[12696]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:17:30 nativespace-cdp sshd[12696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:17:32 nativespace-cdp sshd[12696]: Failed password for invalid user ubuntu from 200.196.50.91 port 59259 ssh2
Oct  1 05:17:32 nativespace-cdp sshd[12696]: Received disconnect from 200.196.50.91 port 59259:11: Bye Bye [preauth]
Oct  1 05:17:32 nativespace-cdp sshd[12696]: Disconnected from 200.196.50.91 port 59259 [preauth]
Oct  1 05:17:54 nativespace-cdp sshd[12757]: Invalid user test from 45.11.93.205 port 47650
Oct  1 05:17:54 nativespace-cdp sshd[12757]: input_userauth_request: invalid user test [preauth]
Oct  1 05:17:54 nativespace-cdp sshd[12757]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:17:54 nativespace-cdp sshd[12757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:17:56 nativespace-cdp sshd[12757]: Failed password for invalid user test from 45.11.93.205 port 47650 ssh2
Oct  1 05:17:56 nativespace-cdp sshd[12757]: Received disconnect from 45.11.93.205 port 47650:11: Bye Bye [preauth]
Oct  1 05:17:56 nativespace-cdp sshd[12757]: Disconnected from 45.11.93.205 port 47650 [preauth]
Oct  1 05:18:07 nativespace-cdp sshd[12784]: Invalid user kong from 43.156.6.132 port 54446
Oct  1 05:18:07 nativespace-cdp sshd[12784]: input_userauth_request: invalid user kong [preauth]
Oct  1 05:18:07 nativespace-cdp sshd[12784]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:18:07 nativespace-cdp sshd[12784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:18:09 nativespace-cdp sshd[12784]: Failed password for invalid user kong from 43.156.6.132 port 54446 ssh2
Oct  1 05:18:09 nativespace-cdp sshd[12784]: Received disconnect from 43.156.6.132 port 54446:11: Bye Bye [preauth]
Oct  1 05:18:09 nativespace-cdp sshd[12784]: Disconnected from 43.156.6.132 port 54446 [preauth]
Oct  1 05:18:45 nativespace-cdp sshd[12882]: Connection closed by 45.11.93.205 port 48494 [preauth]
Oct  1 05:18:48 nativespace-cdp sshd[12884]: Invalid user testuser from 43.156.6.132 port 35670
Oct  1 05:18:48 nativespace-cdp sshd[12884]: input_userauth_request: invalid user testuser [preauth]
Oct  1 05:18:48 nativespace-cdp sshd[12884]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:18:48 nativespace-cdp sshd[12884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:18:50 nativespace-cdp sshd[12884]: Failed password for invalid user testuser from 43.156.6.132 port 35670 ssh2
Oct  1 05:18:50 nativespace-cdp sshd[12884]: Received disconnect from 43.156.6.132 port 35670:11: Bye Bye [preauth]
Oct  1 05:18:50 nativespace-cdp sshd[12884]: Disconnected from 43.156.6.132 port 35670 [preauth]
Oct  1 05:18:55 nativespace-cdp sshd[12907]: Invalid user sysadmin from 200.196.50.91 port 43633
Oct  1 05:18:55 nativespace-cdp sshd[12907]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 05:18:55 nativespace-cdp sshd[12907]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:18:55 nativespace-cdp sshd[12907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:18:57 nativespace-cdp sshd[12907]: Failed password for invalid user sysadmin from 200.196.50.91 port 43633 ssh2
Oct  1 05:18:59 nativespace-cdp sshd[12907]: Received disconnect from 200.196.50.91 port 43633:11: Bye Bye [preauth]
Oct  1 05:18:59 nativespace-cdp sshd[12907]: Disconnected from 200.196.50.91 port 43633 [preauth]
Oct  1 05:19:26 nativespace-cdp sshd[12992]: Invalid user user from 43.156.6.132 port 34028
Oct  1 05:19:26 nativespace-cdp sshd[12992]: input_userauth_request: invalid user user [preauth]
Oct  1 05:19:26 nativespace-cdp sshd[12992]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:19:26 nativespace-cdp sshd[12992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:19:27 nativespace-cdp sshd[12992]: Failed password for invalid user user from 43.156.6.132 port 34028 ssh2
Oct  1 05:19:28 nativespace-cdp sshd[12992]: Received disconnect from 43.156.6.132 port 34028:11: Bye Bye [preauth]
Oct  1 05:19:28 nativespace-cdp sshd[12992]: Disconnected from 43.156.6.132 port 34028 [preauth]
Oct  1 05:19:29 nativespace-cdp sshd[12999]: Invalid user ubuntu from 45.11.93.205 port 42270
Oct  1 05:19:29 nativespace-cdp sshd[12999]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:19:29 nativespace-cdp sshd[12999]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:19:29 nativespace-cdp sshd[12999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:19:31 nativespace-cdp sshd[12999]: Failed password for invalid user ubuntu from 45.11.93.205 port 42270 ssh2
Oct  1 05:19:31 nativespace-cdp sshd[12999]: Received disconnect from 45.11.93.205 port 42270:11: Bye Bye [preauth]
Oct  1 05:19:31 nativespace-cdp sshd[12999]: Disconnected from 45.11.93.205 port 42270 [preauth]
Oct  1 05:19:37 nativespace-cdp sshd[13029]: Invalid user ubuntu from 200.196.50.91 port 49933
Oct  1 05:19:37 nativespace-cdp sshd[13029]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:19:37 nativespace-cdp sshd[13029]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:19:37 nativespace-cdp sshd[13029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:19:39 nativespace-cdp sshd[13029]: Failed password for invalid user ubuntu from 200.196.50.91 port 49933 ssh2
Oct  1 05:19:39 nativespace-cdp sshd[13029]: Received disconnect from 200.196.50.91 port 49933:11: Bye Bye [preauth]
Oct  1 05:19:39 nativespace-cdp sshd[13029]: Disconnected from 200.196.50.91 port 49933 [preauth]
Oct  1 05:20:06 nativespace-cdp sshd[13407]: Invalid user ubuntu from 43.156.6.132 port 33578
Oct  1 05:20:06 nativespace-cdp sshd[13407]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:20:06 nativespace-cdp sshd[13407]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:20:06 nativespace-cdp sshd[13407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:20:08 nativespace-cdp sshd[13407]: Failed password for invalid user ubuntu from 43.156.6.132 port 33578 ssh2
Oct  1 05:20:12 nativespace-cdp sshd[13407]: Received disconnect from 43.156.6.132 port 33578:11: Bye Bye [preauth]
Oct  1 05:20:12 nativespace-cdp sshd[13407]: Disconnected from 43.156.6.132 port 33578 [preauth]
Oct  1 05:20:16 nativespace-cdp sshd[13472]: Invalid user user from 45.11.93.205 port 48980
Oct  1 05:20:16 nativespace-cdp sshd[13472]: input_userauth_request: invalid user user [preauth]
Oct  1 05:20:16 nativespace-cdp sshd[13472]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:20:16 nativespace-cdp sshd[13472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:20:17 nativespace-cdp sshd[13472]: Failed password for invalid user user from 45.11.93.205 port 48980 ssh2
Oct  1 05:20:18 nativespace-cdp sshd[13472]: Received disconnect from 45.11.93.205 port 48980:11: Bye Bye [preauth]
Oct  1 05:20:18 nativespace-cdp sshd[13472]: Disconnected from 45.11.93.205 port 48980 [preauth]
Oct  1 05:20:21 nativespace-cdp sshd[13494]: Invalid user user from 200.196.50.91 port 56242
Oct  1 05:20:21 nativespace-cdp sshd[13494]: input_userauth_request: invalid user user [preauth]
Oct  1 05:20:21 nativespace-cdp sshd[13494]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:20:21 nativespace-cdp sshd[13494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:20:23 nativespace-cdp sshd[13494]: Failed password for invalid user user from 200.196.50.91 port 56242 ssh2
Oct  1 05:20:23 nativespace-cdp sshd[13494]: Received disconnect from 200.196.50.91 port 56242:11: Bye Bye [preauth]
Oct  1 05:20:23 nativespace-cdp sshd[13494]: Disconnected from 200.196.50.91 port 56242 [preauth]
Oct  1 05:20:31 nativespace-cdp sshd[13608]: Invalid user nexus from 129.222.203.89 port 42885
Oct  1 05:20:31 nativespace-cdp sshd[13608]: input_userauth_request: invalid user nexus [preauth]
Oct  1 05:20:31 nativespace-cdp sshd[13608]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:20:31 nativespace-cdp sshd[13608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:20:33 nativespace-cdp sshd[13608]: Failed password for invalid user nexus from 129.222.203.89 port 42885 ssh2
Oct  1 05:20:34 nativespace-cdp sshd[13608]: Received disconnect from 129.222.203.89 port 42885:11: Bye Bye [preauth]
Oct  1 05:20:34 nativespace-cdp sshd[13608]: Disconnected from 129.222.203.89 port 42885 [preauth]
Oct  1 05:21:04 nativespace-cdp sshd[13738]: Invalid user tuan from 45.11.93.205 port 47736
Oct  1 05:21:04 nativespace-cdp sshd[13738]: input_userauth_request: invalid user tuan [preauth]
Oct  1 05:21:04 nativespace-cdp sshd[13738]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:21:04 nativespace-cdp sshd[13738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:21:06 nativespace-cdp sshd[13738]: Failed password for invalid user tuan from 45.11.93.205 port 47736 ssh2
Oct  1 05:21:08 nativespace-cdp sshd[13738]: Received disconnect from 45.11.93.205 port 47736:11: Bye Bye [preauth]
Oct  1 05:21:08 nativespace-cdp sshd[13738]: Disconnected from 45.11.93.205 port 47736 [preauth]
Oct  1 05:21:10 nativespace-cdp sshd[13742]: Invalid user sopuser from 200.196.50.91 port 34308
Oct  1 05:21:10 nativespace-cdp sshd[13742]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 05:21:10 nativespace-cdp sshd[13742]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:21:10 nativespace-cdp sshd[13742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:21:12 nativespace-cdp sshd[13752]: Invalid user deploy from 64.227.133.133 port 56606
Oct  1 05:21:12 nativespace-cdp sshd[13752]: input_userauth_request: invalid user deploy [preauth]
Oct  1 05:21:12 nativespace-cdp sshd[13752]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:21:12 nativespace-cdp sshd[13752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:21:12 nativespace-cdp sshd[13742]: Failed password for invalid user sopuser from 200.196.50.91 port 34308 ssh2
Oct  1 05:21:12 nativespace-cdp sshd[13742]: Received disconnect from 200.196.50.91 port 34308:11: Bye Bye [preauth]
Oct  1 05:21:12 nativespace-cdp sshd[13742]: Disconnected from 200.196.50.91 port 34308 [preauth]
Oct  1 05:21:14 nativespace-cdp sshd[13752]: Failed password for invalid user deploy from 64.227.133.133 port 56606 ssh2
Oct  1 05:21:14 nativespace-cdp sshd[13752]: Received disconnect from 64.227.133.133 port 56606:11: Bye Bye [preauth]
Oct  1 05:21:14 nativespace-cdp sshd[13752]: Disconnected from 64.227.133.133 port 56606 [preauth]
Oct  1 05:21:24 nativespace-cdp sshd[13777]: Invalid user test01 from 36.133.57.132 port 53664
Oct  1 05:21:24 nativespace-cdp sshd[13777]: input_userauth_request: invalid user test01 [preauth]
Oct  1 05:21:24 nativespace-cdp sshd[13777]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:21:24 nativespace-cdp sshd[13777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:21:26 nativespace-cdp sshd[13777]: Failed password for invalid user test01 from 36.133.57.132 port 53664 ssh2
Oct  1 05:21:26 nativespace-cdp sshd[13777]: Received disconnect from 36.133.57.132 port 53664:11: Bye Bye [preauth]
Oct  1 05:21:26 nativespace-cdp sshd[13777]: Disconnected from 36.133.57.132 port 53664 [preauth]
Oct  1 05:21:33 nativespace-cdp sshd[13806]: Connection closed by 159.100.136.21 port 52150 [preauth]
Oct  1 05:21:34 nativespace-cdp sshd[13799]: Connection closed by 43.156.6.132 port 58616 [preauth]
Oct  1 05:21:42 nativespace-cdp sshd[13831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113  user=root
Oct  1 05:21:42 nativespace-cdp sshd[13831]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:21:44 nativespace-cdp sshd[13831]: Failed password for root from 78.51.129.113 port 57694 ssh2
Oct  1 05:21:46 nativespace-cdp sshd[13831]: Received disconnect from 78.51.129.113 port 57694:11: Bye Bye [preauth]
Oct  1 05:21:46 nativespace-cdp sshd[13831]: Disconnected from 78.51.129.113 port 57694 [preauth]
Oct  1 05:21:50 nativespace-cdp sshd[13846]: Invalid user ubuntu from 45.11.93.205 port 52806
Oct  1 05:21:50 nativespace-cdp sshd[13846]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:21:50 nativespace-cdp sshd[13846]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:21:50 nativespace-cdp sshd[13846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:21:53 nativespace-cdp sshd[13846]: Failed password for invalid user ubuntu from 45.11.93.205 port 52806 ssh2
Oct  1 05:21:55 nativespace-cdp sshd[13846]: Received disconnect from 45.11.93.205 port 52806:11: Bye Bye [preauth]
Oct  1 05:21:55 nativespace-cdp sshd[13846]: Disconnected from 45.11.93.205 port 52806 [preauth]
Oct  1 05:21:56 nativespace-cdp sshd[13857]: Invalid user ubuntu from 200.196.50.91 port 40612
Oct  1 05:21:56 nativespace-cdp sshd[13857]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:21:56 nativespace-cdp sshd[13857]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:21:56 nativespace-cdp sshd[13857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:21:58 nativespace-cdp sshd[13857]: Failed password for invalid user ubuntu from 200.196.50.91 port 40612 ssh2
Oct  1 05:21:58 nativespace-cdp sshd[13857]: Received disconnect from 200.196.50.91 port 40612:11: Bye Bye [preauth]
Oct  1 05:21:58 nativespace-cdp sshd[13857]: Disconnected from 200.196.50.91 port 40612 [preauth]
Oct  1 05:22:16 nativespace-cdp sshd[13919]: Invalid user test from 43.156.6.132 port 56234
Oct  1 05:22:16 nativespace-cdp sshd[13919]: input_userauth_request: invalid user test [preauth]
Oct  1 05:22:16 nativespace-cdp sshd[13919]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:22:16 nativespace-cdp sshd[13919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:22:18 nativespace-cdp sshd[13919]: Failed password for invalid user test from 43.156.6.132 port 56234 ssh2
Oct  1 05:22:18 nativespace-cdp sshd[13919]: Received disconnect from 43.156.6.132 port 56234:11: Bye Bye [preauth]
Oct  1 05:22:18 nativespace-cdp sshd[13919]: Disconnected from 43.156.6.132 port 56234 [preauth]
Oct  1 05:22:32 nativespace-cdp sshd[13956]: Invalid user ubuntu from 68.183.142.21 port 41148
Oct  1 05:22:32 nativespace-cdp sshd[13956]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:22:32 nativespace-cdp sshd[13956]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:22:32 nativespace-cdp sshd[13956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 05:22:35 nativespace-cdp sshd[13956]: Failed password for invalid user ubuntu from 68.183.142.21 port 41148 ssh2
Oct  1 05:22:40 nativespace-cdp sshd[13956]: Received disconnect from 68.183.142.21 port 41148:11: Bye Bye [preauth]
Oct  1 05:22:40 nativespace-cdp sshd[13956]: Disconnected from 68.183.142.21 port 41148 [preauth]
Oct  1 05:22:41 nativespace-cdp sshd[13974]: Invalid user steam from 45.11.93.205 port 33464
Oct  1 05:22:41 nativespace-cdp sshd[13974]: input_userauth_request: invalid user steam [preauth]
Oct  1 05:22:41 nativespace-cdp sshd[13974]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:22:41 nativespace-cdp sshd[13974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:22:43 nativespace-cdp sshd[13985]: Invalid user test from 200.196.50.91 port 46918
Oct  1 05:22:43 nativespace-cdp sshd[13985]: input_userauth_request: invalid user test [preauth]
Oct  1 05:22:43 nativespace-cdp sshd[13985]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:22:43 nativespace-cdp sshd[13985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:22:43 nativespace-cdp sshd[13974]: Failed password for invalid user steam from 45.11.93.205 port 33464 ssh2
Oct  1 05:22:43 nativespace-cdp sshd[13974]: Received disconnect from 45.11.93.205 port 33464:11: Bye Bye [preauth]
Oct  1 05:22:43 nativespace-cdp sshd[13974]: Disconnected from 45.11.93.205 port 33464 [preauth]
Oct  1 05:22:45 nativespace-cdp sshd[13985]: Failed password for invalid user test from 200.196.50.91 port 46918 ssh2
Oct  1 05:22:46 nativespace-cdp sshd[13985]: Received disconnect from 200.196.50.91 port 46918:11: Bye Bye [preauth]
Oct  1 05:22:46 nativespace-cdp sshd[13985]: Disconnected from 200.196.50.91 port 46918 [preauth]
Oct  1 05:23:00 nativespace-cdp sshd[14017]: Invalid user ubuntu from 43.156.6.132 port 37156
Oct  1 05:23:00 nativespace-cdp sshd[14017]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:23:00 nativespace-cdp sshd[14017]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:23:00 nativespace-cdp sshd[14017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:23:02 nativespace-cdp sshd[14017]: Failed password for invalid user ubuntu from 43.156.6.132 port 37156 ssh2
Oct  1 05:23:08 nativespace-cdp sshd[14017]: Received disconnect from 43.156.6.132 port 37156:11: Bye Bye [preauth]
Oct  1 05:23:08 nativespace-cdp sshd[14017]: Disconnected from 43.156.6.132 port 37156 [preauth]
Oct  1 05:23:10 nativespace-cdp sshd[14049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.25.211.164  user=root
Oct  1 05:23:10 nativespace-cdp sshd[14049]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:23:11 nativespace-cdp sshd[14049]: Failed password for root from 203.25.211.164 port 56446 ssh2
Oct  1 05:23:11 nativespace-cdp sshd[14049]: Received disconnect from 203.25.211.164 port 56446:11: Bye Bye [preauth]
Oct  1 05:23:11 nativespace-cdp sshd[14049]: Disconnected from 203.25.211.164 port 56446 [preauth]
Oct  1 05:23:31 nativespace-cdp sshd[14096]: Invalid user usuario from 45.11.93.205 port 50198
Oct  1 05:23:31 nativespace-cdp sshd[14096]: input_userauth_request: invalid user usuario [preauth]
Oct  1 05:23:31 nativespace-cdp sshd[14096]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:23:31 nativespace-cdp sshd[14096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:23:32 nativespace-cdp sshd[14098]: Invalid user tg from 200.196.50.91 port 53221
Oct  1 05:23:32 nativespace-cdp sshd[14098]: input_userauth_request: invalid user tg [preauth]
Oct  1 05:23:32 nativespace-cdp sshd[14098]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:23:32 nativespace-cdp sshd[14098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:23:33 nativespace-cdp sshd[14096]: Failed password for invalid user usuario from 45.11.93.205 port 50198 ssh2
Oct  1 05:23:33 nativespace-cdp sshd[14096]: Received disconnect from 45.11.93.205 port 50198:11: Bye Bye [preauth]
Oct  1 05:23:33 nativespace-cdp sshd[14096]: Disconnected from 45.11.93.205 port 50198 [preauth]
Oct  1 05:23:33 nativespace-cdp sshd[14098]: Failed password for invalid user tg from 200.196.50.91 port 53221 ssh2
Oct  1 05:23:33 nativespace-cdp sshd[14098]: Received disconnect from 200.196.50.91 port 53221:11: Bye Bye [preauth]
Oct  1 05:23:33 nativespace-cdp sshd[14098]: Disconnected from 200.196.50.91 port 53221 [preauth]
Oct  1 05:23:44 nativespace-cdp sshd[14123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132  user=root
Oct  1 05:23:44 nativespace-cdp sshd[14123]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:23:45 nativespace-cdp sshd[14123]: Failed password for root from 43.156.6.132 port 49622 ssh2
Oct  1 05:23:45 nativespace-cdp sshd[14123]: Received disconnect from 43.156.6.132 port 49622:11: Bye Bye [preauth]
Oct  1 05:23:45 nativespace-cdp sshd[14123]: Disconnected from 43.156.6.132 port 49622 [preauth]
Oct  1 05:24:16 nativespace-cdp sshd[14201]: Invalid user usuario from 200.196.50.91 port 59520
Oct  1 05:24:16 nativespace-cdp sshd[14201]: input_userauth_request: invalid user usuario [preauth]
Oct  1 05:24:16 nativespace-cdp sshd[14201]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:24:16 nativespace-cdp sshd[14201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:24:18 nativespace-cdp sshd[14201]: Failed password for invalid user usuario from 200.196.50.91 port 59520 ssh2
Oct  1 05:24:21 nativespace-cdp sshd[14201]: Received disconnect from 200.196.50.91 port 59520:11: Bye Bye [preauth]
Oct  1 05:24:21 nativespace-cdp sshd[14201]: Disconnected from 200.196.50.91 port 59520 [preauth]
Oct  1 05:24:22 nativespace-cdp sshd[14206]: Connection closed by 45.11.93.205 port 46254 [preauth]
Oct  1 05:24:23 nativespace-cdp sshd[14213]: Invalid user test01 from 43.156.6.132 port 35998
Oct  1 05:24:23 nativespace-cdp sshd[14213]: input_userauth_request: invalid user test01 [preauth]
Oct  1 05:24:23 nativespace-cdp sshd[14213]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:24:23 nativespace-cdp sshd[14213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:24:24 nativespace-cdp sshd[14213]: Failed password for invalid user test01 from 43.156.6.132 port 35998 ssh2
Oct  1 05:24:25 nativespace-cdp sshd[14213]: Received disconnect from 43.156.6.132 port 35998:11: Bye Bye [preauth]
Oct  1 05:24:25 nativespace-cdp sshd[14213]: Disconnected from 43.156.6.132 port 35998 [preauth]
Oct  1 05:24:56 nativespace-cdp sshd[14282]: Invalid user ubuntu from 200.196.50.91 port 37590
Oct  1 05:24:56 nativespace-cdp sshd[14282]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:24:56 nativespace-cdp sshd[14282]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:24:56 nativespace-cdp sshd[14282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:24:59 nativespace-cdp sshd[14282]: Failed password for invalid user ubuntu from 200.196.50.91 port 37590 ssh2
Oct  1 05:24:59 nativespace-cdp sshd[14282]: Received disconnect from 200.196.50.91 port 37590:11: Bye Bye [preauth]
Oct  1 05:24:59 nativespace-cdp sshd[14282]: Disconnected from 200.196.50.91 port 37590 [preauth]
Oct  1 05:25:05 nativespace-cdp sshd[14389]: Invalid user nexus from 43.156.6.132 port 54384
Oct  1 05:25:05 nativespace-cdp sshd[14389]: input_userauth_request: invalid user nexus [preauth]
Oct  1 05:25:05 nativespace-cdp sshd[14389]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:25:05 nativespace-cdp sshd[14389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:25:05 nativespace-cdp sshd[14393]: Invalid user test from 45.11.93.205 port 47630
Oct  1 05:25:05 nativespace-cdp sshd[14393]: input_userauth_request: invalid user test [preauth]
Oct  1 05:25:05 nativespace-cdp sshd[14393]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:25:05 nativespace-cdp sshd[14393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:25:07 nativespace-cdp sshd[14389]: Failed password for invalid user nexus from 43.156.6.132 port 54384 ssh2
Oct  1 05:25:07 nativespace-cdp sshd[14393]: Failed password for invalid user test from 45.11.93.205 port 47630 ssh2
Oct  1 05:25:07 nativespace-cdp sshd[14393]: Received disconnect from 45.11.93.205 port 47630:11: Bye Bye [preauth]
Oct  1 05:25:07 nativespace-cdp sshd[14393]: Disconnected from 45.11.93.205 port 47630 [preauth]
Oct  1 05:25:07 nativespace-cdp sshd[14389]: Received disconnect from 43.156.6.132 port 54384:11: Bye Bye [preauth]
Oct  1 05:25:07 nativespace-cdp sshd[14389]: Disconnected from 43.156.6.132 port 54384 [preauth]
Oct  1 05:25:39 nativespace-cdp sshd[14618]: Invalid user test from 200.196.50.91 port 43893
Oct  1 05:25:39 nativespace-cdp sshd[14618]: input_userauth_request: invalid user test [preauth]
Oct  1 05:25:39 nativespace-cdp sshd[14618]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:25:39 nativespace-cdp sshd[14618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:25:41 nativespace-cdp sshd[14618]: Failed password for invalid user test from 200.196.50.91 port 43893 ssh2
Oct  1 05:25:45 nativespace-cdp sshd[14618]: Received disconnect from 200.196.50.91 port 43893:11: Bye Bye [preauth]
Oct  1 05:25:45 nativespace-cdp sshd[14618]: Disconnected from 200.196.50.91 port 43893 [preauth]
Oct  1 05:25:47 nativespace-cdp sshd[14637]: Invalid user svn from 43.156.6.132 port 49088
Oct  1 05:25:47 nativespace-cdp sshd[14637]: input_userauth_request: invalid user svn [preauth]
Oct  1 05:25:47 nativespace-cdp sshd[14637]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:25:47 nativespace-cdp sshd[14637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:25:49 nativespace-cdp sshd[14637]: Failed password for invalid user svn from 43.156.6.132 port 49088 ssh2
Oct  1 05:25:49 nativespace-cdp sshd[14637]: Received disconnect from 43.156.6.132 port 49088:11: Bye Bye [preauth]
Oct  1 05:25:49 nativespace-cdp sshd[14637]: Disconnected from 43.156.6.132 port 49088 [preauth]
Oct  1 05:25:57 nativespace-cdp sshd[14651]: Connection closed by 45.11.93.205 port 41106 [preauth]
Oct  1 05:26:18 nativespace-cdp sshd[14713]: Connection closed by 64.227.133.133 port 54402 [preauth]
Oct  1 05:26:26 nativespace-cdp sshd[14732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91  user=root
Oct  1 05:26:26 nativespace-cdp sshd[14732]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:26:27 nativespace-cdp sshd[14730]: Invalid user samba from 43.156.6.132 port 59878
Oct  1 05:26:27 nativespace-cdp sshd[14730]: input_userauth_request: invalid user samba [preauth]
Oct  1 05:26:27 nativespace-cdp sshd[14730]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:26:27 nativespace-cdp sshd[14730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:26:28 nativespace-cdp sshd[14732]: Failed password for root from 200.196.50.91 port 50193 ssh2
Oct  1 05:26:29 nativespace-cdp sshd[14732]: Received disconnect from 200.196.50.91 port 50193:11: Bye Bye [preauth]
Oct  1 05:26:29 nativespace-cdp sshd[14732]: Disconnected from 200.196.50.91 port 50193 [preauth]
Oct  1 05:26:29 nativespace-cdp sshd[14730]: Failed password for invalid user samba from 43.156.6.132 port 59878 ssh2
Oct  1 05:26:30 nativespace-cdp sshd[14730]: Received disconnect from 43.156.6.132 port 59878:11: Bye Bye [preauth]
Oct  1 05:26:30 nativespace-cdp sshd[14730]: Disconnected from 43.156.6.132 port 59878 [preauth]
Oct  1 05:26:32 nativespace-cdp sshd[14752]: Invalid user user from 78.51.129.113 port 53822
Oct  1 05:26:32 nativespace-cdp sshd[14752]: input_userauth_request: invalid user user [preauth]
Oct  1 05:26:32 nativespace-cdp sshd[14752]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:26:32 nativespace-cdp sshd[14752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:26:34 nativespace-cdp sshd[14752]: Failed password for invalid user user from 78.51.129.113 port 53822 ssh2
Oct  1 05:26:36 nativespace-cdp sshd[14761]: Connection closed by 159.100.136.21 port 33696 [preauth]
Oct  1 05:26:37 nativespace-cdp sshd[14752]: Received disconnect from 78.51.129.113 port 53822:11: Bye Bye [preauth]
Oct  1 05:26:37 nativespace-cdp sshd[14752]: Disconnected from 78.51.129.113 port 53822 [preauth]
Oct  1 05:26:41 nativespace-cdp sshd[14770]: Invalid user thomas from 45.11.93.205 port 35038
Oct  1 05:26:41 nativespace-cdp sshd[14770]: input_userauth_request: invalid user thomas [preauth]
Oct  1 05:26:41 nativespace-cdp sshd[14770]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:26:41 nativespace-cdp sshd[14770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:26:43 nativespace-cdp sshd[14770]: Failed password for invalid user thomas from 45.11.93.205 port 35038 ssh2
Oct  1 05:26:43 nativespace-cdp sshd[14770]: Received disconnect from 45.11.93.205 port 35038:11: Bye Bye [preauth]
Oct  1 05:26:43 nativespace-cdp sshd[14770]: Disconnected from 45.11.93.205 port 35038 [preauth]
Oct  1 05:27:03 nativespace-cdp sshd[14838]: Invalid user user from 64.227.133.133 port 51856
Oct  1 05:27:03 nativespace-cdp sshd[14838]: input_userauth_request: invalid user user [preauth]
Oct  1 05:27:03 nativespace-cdp sshd[14838]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:27:03 nativespace-cdp sshd[14838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:27:05 nativespace-cdp sshd[14838]: Failed password for invalid user user from 64.227.133.133 port 51856 ssh2
Oct  1 05:27:08 nativespace-cdp sshd[14838]: Received disconnect from 64.227.133.133 port 51856:11: Bye Bye [preauth]
Oct  1 05:27:08 nativespace-cdp sshd[14838]: Disconnected from 64.227.133.133 port 51856 [preauth]
Oct  1 05:27:09 nativespace-cdp sshd[14848]: Invalid user odoo from 43.156.6.132 port 47556
Oct  1 05:27:09 nativespace-cdp sshd[14848]: input_userauth_request: invalid user odoo [preauth]
Oct  1 05:27:09 nativespace-cdp sshd[14848]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:27:09 nativespace-cdp sshd[14848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.156.6.132
Oct  1 05:27:12 nativespace-cdp sshd[14848]: Failed password for invalid user odoo from 43.156.6.132 port 47556 ssh2
Oct  1 05:27:12 nativespace-cdp sshd[14848]: Received disconnect from 43.156.6.132 port 47556:11: Bye Bye [preauth]
Oct  1 05:27:12 nativespace-cdp sshd[14848]: Disconnected from 43.156.6.132 port 47556 [preauth]
Oct  1 05:27:14 nativespace-cdp sshd[14868]: Invalid user r from 78.51.129.113 port 57902
Oct  1 05:27:14 nativespace-cdp sshd[14868]: input_userauth_request: invalid user r [preauth]
Oct  1 05:27:14 nativespace-cdp sshd[14868]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:27:14 nativespace-cdp sshd[14868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:27:14 nativespace-cdp sshd[14865]: Invalid user ubuntu from 200.196.50.91 port 56497
Oct  1 05:27:14 nativespace-cdp sshd[14865]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:27:14 nativespace-cdp sshd[14865]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:27:14 nativespace-cdp sshd[14865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:27:16 nativespace-cdp sshd[14868]: Failed password for invalid user r from 78.51.129.113 port 57902 ssh2
Oct  1 05:27:16 nativespace-cdp sshd[14868]: Received disconnect from 78.51.129.113 port 57902:11: Bye Bye [preauth]
Oct  1 05:27:16 nativespace-cdp sshd[14868]: Disconnected from 78.51.129.113 port 57902 [preauth]
Oct  1 05:27:16 nativespace-cdp sshd[14865]: Failed password for invalid user ubuntu from 200.196.50.91 port 56497 ssh2
Oct  1 05:27:16 nativespace-cdp sshd[14865]: Received disconnect from 200.196.50.91 port 56497:11: Bye Bye [preauth]
Oct  1 05:27:16 nativespace-cdp sshd[14865]: Disconnected from 200.196.50.91 port 56497 [preauth]
Oct  1 05:27:32 nativespace-cdp sshd[14923]: Connection closed by 68.183.142.21 port 58588 [preauth]
Oct  1 05:27:35 nativespace-cdp sshd[14935]: Connection closed by 45.11.93.205 port 51958 [preauth]
Oct  1 05:27:55 nativespace-cdp sshd[14978]: Connection closed by 64.227.133.133 port 33756 [preauth]
Oct  1 05:27:58 nativespace-cdp sshd[14986]: Invalid user odoo from 78.51.129.113 port 56098
Oct  1 05:27:58 nativespace-cdp sshd[14986]: input_userauth_request: invalid user odoo [preauth]
Oct  1 05:27:58 nativespace-cdp sshd[14986]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:27:58 nativespace-cdp sshd[14986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:28:00 nativespace-cdp sshd[14986]: Failed password for invalid user odoo from 78.51.129.113 port 56098 ssh2
Oct  1 05:28:00 nativespace-cdp sshd[14986]: Received disconnect from 78.51.129.113 port 56098:11: Bye Bye [preauth]
Oct  1 05:28:00 nativespace-cdp sshd[14986]: Disconnected from 78.51.129.113 port 56098 [preauth]
Oct  1 05:28:01 nativespace-cdp sshd[14990]: Invalid user tuan from 200.196.50.91 port 34568
Oct  1 05:28:01 nativespace-cdp sshd[14990]: input_userauth_request: invalid user tuan [preauth]
Oct  1 05:28:01 nativespace-cdp sshd[14990]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:28:01 nativespace-cdp sshd[14990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:28:03 nativespace-cdp sshd[14990]: Failed password for invalid user tuan from 200.196.50.91 port 34568 ssh2
Oct  1 05:28:03 nativespace-cdp sshd[14990]: Received disconnect from 200.196.50.91 port 34568:11: Bye Bye [preauth]
Oct  1 05:28:03 nativespace-cdp sshd[14990]: Disconnected from 200.196.50.91 port 34568 [preauth]
Oct  1 05:28:19 nativespace-cdp sshd[15046]: Invalid user ubuntu from 45.11.93.205 port 46704
Oct  1 05:28:19 nativespace-cdp sshd[15046]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:28:19 nativespace-cdp sshd[15046]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:28:19 nativespace-cdp sshd[15046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:28:21 nativespace-cdp sshd[15046]: Failed password for invalid user ubuntu from 45.11.93.205 port 46704 ssh2
Oct  1 05:28:22 nativespace-cdp sshd[15046]: Received disconnect from 45.11.93.205 port 46704:11: Bye Bye [preauth]
Oct  1 05:28:22 nativespace-cdp sshd[15046]: Disconnected from 45.11.93.205 port 46704 [preauth]
Oct  1 05:28:30 nativespace-cdp sshd[15056]: Invalid user user from 129.222.203.89 port 35764
Oct  1 05:28:30 nativespace-cdp sshd[15056]: input_userauth_request: invalid user user [preauth]
Oct  1 05:28:30 nativespace-cdp sshd[15056]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:28:30 nativespace-cdp sshd[15056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:28:33 nativespace-cdp sshd[15056]: Failed password for invalid user user from 129.222.203.89 port 35764 ssh2
Oct  1 05:28:33 nativespace-cdp sshd[15056]: Received disconnect from 129.222.203.89 port 35764:11: Bye Bye [preauth]
Oct  1 05:28:33 nativespace-cdp sshd[15056]: Disconnected from 129.222.203.89 port 35764 [preauth]
Oct  1 05:28:39 nativespace-cdp sshd[15095]: Invalid user ubuntu from 64.227.133.133 port 56538
Oct  1 05:28:39 nativespace-cdp sshd[15095]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:28:39 nativespace-cdp sshd[15095]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:28:39 nativespace-cdp sshd[15095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:28:42 nativespace-cdp sshd[15095]: Failed password for invalid user ubuntu from 64.227.133.133 port 56538 ssh2
Oct  1 05:28:42 nativespace-cdp sshd[15095]: Received disconnect from 64.227.133.133 port 56538:11: Bye Bye [preauth]
Oct  1 05:28:42 nativespace-cdp sshd[15095]: Disconnected from 64.227.133.133 port 56538 [preauth]
Oct  1 05:28:43 nativespace-cdp sshd[15121]: Invalid user sysadmin from 78.51.129.113 port 50446
Oct  1 05:28:43 nativespace-cdp sshd[15121]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 05:28:43 nativespace-cdp sshd[15121]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:28:43 nativespace-cdp sshd[15121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:28:46 nativespace-cdp sshd[15121]: Failed password for invalid user sysadmin from 78.51.129.113 port 50446 ssh2
Oct  1 05:28:48 nativespace-cdp sshd[15121]: Received disconnect from 78.51.129.113 port 50446:11: Bye Bye [preauth]
Oct  1 05:28:48 nativespace-cdp sshd[15121]: Disconnected from 78.51.129.113 port 50446 [preauth]
Oct  1 05:28:49 nativespace-cdp sshd[15142]: Invalid user ubuntu from 200.196.50.91 port 40868
Oct  1 05:28:49 nativespace-cdp sshd[15142]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:28:49 nativespace-cdp sshd[15142]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:28:49 nativespace-cdp sshd[15142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:28:51 nativespace-cdp sshd[15142]: Failed password for invalid user ubuntu from 200.196.50.91 port 40868 ssh2
Oct  1 05:28:51 nativespace-cdp sshd[15142]: Received disconnect from 200.196.50.91 port 40868:11: Bye Bye [preauth]
Oct  1 05:28:51 nativespace-cdp sshd[15142]: Disconnected from 200.196.50.91 port 40868 [preauth]
Oct  1 05:29:11 nativespace-cdp sshd[15213]: Invalid user ubuntu from 45.11.93.205 port 56344
Oct  1 05:29:11 nativespace-cdp sshd[15213]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:29:11 nativespace-cdp sshd[15213]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:29:11 nativespace-cdp sshd[15213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:29:12 nativespace-cdp sshd[15213]: Failed password for invalid user ubuntu from 45.11.93.205 port 56344 ssh2
Oct  1 05:29:13 nativespace-cdp sshd[15213]: Received disconnect from 45.11.93.205 port 56344:11: Bye Bye [preauth]
Oct  1 05:29:13 nativespace-cdp sshd[15213]: Disconnected from 45.11.93.205 port 56344 [preauth]
Oct  1 05:29:24 nativespace-cdp sshd[15241]: Invalid user superman from 129.222.203.89 port 28771
Oct  1 05:29:24 nativespace-cdp sshd[15241]: input_userauth_request: invalid user superman [preauth]
Oct  1 05:29:24 nativespace-cdp sshd[15241]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:29:24 nativespace-cdp sshd[15241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:29:24 nativespace-cdp sshd[15248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113  user=root
Oct  1 05:29:24 nativespace-cdp sshd[15248]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:29:25 nativespace-cdp sshd[15246]: Invalid user usuario from 64.227.133.133 port 43678
Oct  1 05:29:25 nativespace-cdp sshd[15246]: input_userauth_request: invalid user usuario [preauth]
Oct  1 05:29:25 nativespace-cdp sshd[15246]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:29:25 nativespace-cdp sshd[15246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:29:26 nativespace-cdp sshd[15241]: Failed password for invalid user superman from 129.222.203.89 port 28771 ssh2
Oct  1 05:29:26 nativespace-cdp sshd[15248]: Failed password for root from 78.51.129.113 port 54950 ssh2
Oct  1 05:29:27 nativespace-cdp sshd[15246]: Failed password for invalid user usuario from 64.227.133.133 port 43678 ssh2
Oct  1 05:29:30 nativespace-cdp sshd[15241]: Received disconnect from 129.222.203.89 port 28771:11: Bye Bye [preauth]
Oct  1 05:29:30 nativespace-cdp sshd[15241]: Disconnected from 129.222.203.89 port 28771 [preauth]
Oct  1 05:29:30 nativespace-cdp sshd[15246]: Received disconnect from 64.227.133.133 port 43678:11: Bye Bye [preauth]
Oct  1 05:29:30 nativespace-cdp sshd[15246]: Disconnected from 64.227.133.133 port 43678 [preauth]
Oct  1 05:29:30 nativespace-cdp sshd[15248]: Received disconnect from 78.51.129.113 port 54950:11: Bye Bye [preauth]
Oct  1 05:29:30 nativespace-cdp sshd[15248]: Disconnected from 78.51.129.113 port 54950 [preauth]
Oct  1 05:29:31 nativespace-cdp sshd[15288]: Invalid user user from 200.196.50.91 port 47170
Oct  1 05:29:31 nativespace-cdp sshd[15288]: input_userauth_request: invalid user user [preauth]
Oct  1 05:29:31 nativespace-cdp sshd[15288]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:29:31 nativespace-cdp sshd[15288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:29:34 nativespace-cdp sshd[15288]: Failed password for invalid user user from 200.196.50.91 port 47170 ssh2
Oct  1 05:29:34 nativespace-cdp sshd[15288]: Received disconnect from 200.196.50.91 port 47170:11: Bye Bye [preauth]
Oct  1 05:29:34 nativespace-cdp sshd[15288]: Disconnected from 200.196.50.91 port 47170 [preauth]
Oct  1 05:29:53 nativespace-cdp sshd[15342]: Invalid user support from 45.11.93.205 port 59216
Oct  1 05:29:53 nativespace-cdp sshd[15342]: input_userauth_request: invalid user support [preauth]
Oct  1 05:29:53 nativespace-cdp sshd[15342]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:29:53 nativespace-cdp sshd[15342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:29:54 nativespace-cdp sshd[15348]: Invalid user support from 68.183.142.21 port 50528
Oct  1 05:29:54 nativespace-cdp sshd[15348]: input_userauth_request: invalid user support [preauth]
Oct  1 05:29:54 nativespace-cdp sshd[15348]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:29:54 nativespace-cdp sshd[15348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 05:29:55 nativespace-cdp sshd[15342]: Failed password for invalid user support from 45.11.93.205 port 59216 ssh2
Oct  1 05:29:55 nativespace-cdp sshd[15342]: Received disconnect from 45.11.93.205 port 59216:11: Bye Bye [preauth]
Oct  1 05:29:55 nativespace-cdp sshd[15342]: Disconnected from 45.11.93.205 port 59216 [preauth]
Oct  1 05:29:56 nativespace-cdp sshd[15348]: Failed password for invalid user support from 68.183.142.21 port 50528 ssh2
Oct  1 05:29:56 nativespace-cdp sshd[15348]: Received disconnect from 68.183.142.21 port 50528:11: Bye Bye [preauth]
Oct  1 05:29:56 nativespace-cdp sshd[15348]: Disconnected from 68.183.142.21 port 50528 [preauth]
Oct  1 05:30:04 nativespace-cdp sshd[15538]: Invalid user test from 78.51.129.113 port 51032
Oct  1 05:30:04 nativespace-cdp sshd[15538]: input_userauth_request: invalid user test [preauth]
Oct  1 05:30:04 nativespace-cdp sshd[15538]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:30:04 nativespace-cdp sshd[15538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:30:06 nativespace-cdp sshd[15538]: Failed password for invalid user test from 78.51.129.113 port 51032 ssh2
Oct  1 05:30:06 nativespace-cdp sshd[15538]: Received disconnect from 78.51.129.113 port 51032:11: Bye Bye [preauth]
Oct  1 05:30:06 nativespace-cdp sshd[15538]: Disconnected from 78.51.129.113 port 51032 [preauth]
Oct  1 05:30:09 nativespace-cdp sshd[15552]: Invalid user acer from 64.227.133.133 port 37844
Oct  1 05:30:09 nativespace-cdp sshd[15552]: input_userauth_request: invalid user acer [preauth]
Oct  1 05:30:09 nativespace-cdp sshd[15552]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:30:09 nativespace-cdp sshd[15552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:30:12 nativespace-cdp sshd[15552]: Failed password for invalid user acer from 64.227.133.133 port 37844 ssh2
Oct  1 05:30:12 nativespace-cdp sshd[15552]: Received disconnect from 64.227.133.133 port 37844:11: Bye Bye [preauth]
Oct  1 05:30:12 nativespace-cdp sshd[15552]: Disconnected from 64.227.133.133 port 37844 [preauth]
Oct  1 05:30:17 nativespace-cdp sshd[15564]: Invalid user test from 200.196.50.91 port 53474
Oct  1 05:30:17 nativespace-cdp sshd[15564]: input_userauth_request: invalid user test [preauth]
Oct  1 05:30:17 nativespace-cdp sshd[15564]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:30:17 nativespace-cdp sshd[15564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:30:19 nativespace-cdp sshd[15564]: Failed password for invalid user test from 200.196.50.91 port 53474 ssh2
Oct  1 05:30:21 nativespace-cdp sshd[15564]: Received disconnect from 200.196.50.91 port 53474:11: Bye Bye [preauth]
Oct  1 05:30:21 nativespace-cdp sshd[15564]: Disconnected from 200.196.50.91 port 53474 [preauth]
Oct  1 05:30:22 nativespace-cdp sshd[15577]: Invalid user support from 129.222.203.89 port 18500
Oct  1 05:30:22 nativespace-cdp sshd[15577]: input_userauth_request: invalid user support [preauth]
Oct  1 05:30:22 nativespace-cdp sshd[15577]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:30:22 nativespace-cdp sshd[15577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:30:24 nativespace-cdp sshd[15577]: Failed password for invalid user support from 129.222.203.89 port 18500 ssh2
Oct  1 05:30:24 nativespace-cdp sshd[15577]: Received disconnect from 129.222.203.89 port 18500:11: Bye Bye [preauth]
Oct  1 05:30:24 nativespace-cdp sshd[15577]: Disconnected from 129.222.203.89 port 18500 [preauth]
Oct  1 05:30:41 nativespace-cdp sshd[15331]: Connection closed by 203.25.211.164 port 38260 [preauth]
Oct  1 05:30:42 nativespace-cdp sshd[15713]: Invalid user user from 78.51.129.113 port 50122
Oct  1 05:30:42 nativespace-cdp sshd[15713]: input_userauth_request: invalid user user [preauth]
Oct  1 05:30:42 nativespace-cdp sshd[15713]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:30:42 nativespace-cdp sshd[15713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:30:43 nativespace-cdp sshd[15715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205  user=root
Oct  1 05:30:43 nativespace-cdp sshd[15715]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:30:44 nativespace-cdp sshd[15713]: Failed password for invalid user user from 78.51.129.113 port 50122 ssh2
Oct  1 05:30:44 nativespace-cdp sshd[15713]: Received disconnect from 78.51.129.113 port 50122:11: Bye Bye [preauth]
Oct  1 05:30:44 nativespace-cdp sshd[15713]: Disconnected from 78.51.129.113 port 50122 [preauth]
Oct  1 05:30:45 nativespace-cdp sshd[15715]: Failed password for root from 45.11.93.205 port 48638 ssh2
Oct  1 05:30:45 nativespace-cdp sshd[15715]: Received disconnect from 45.11.93.205 port 48638:11: Bye Bye [preauth]
Oct  1 05:30:45 nativespace-cdp sshd[15715]: Disconnected from 45.11.93.205 port 48638 [preauth]
Oct  1 05:31:00 nativespace-cdp sshd[15805]: Invalid user ubuntu from 200.196.50.91 port 59775
Oct  1 05:31:00 nativespace-cdp sshd[15805]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:31:00 nativespace-cdp sshd[15805]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:31:00 nativespace-cdp sshd[15805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:31:01 nativespace-cdp sshd[15810]: Invalid user ubuntu from 64.227.133.133 port 41562
Oct  1 05:31:01 nativespace-cdp sshd[15810]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:31:01 nativespace-cdp sshd[15810]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:31:01 nativespace-cdp sshd[15810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:31:02 nativespace-cdp sshd[15805]: Failed password for invalid user ubuntu from 200.196.50.91 port 59775 ssh2
Oct  1 05:31:02 nativespace-cdp sshd[15805]: Received disconnect from 200.196.50.91 port 59775:11: Bye Bye [preauth]
Oct  1 05:31:02 nativespace-cdp sshd[15805]: Disconnected from 200.196.50.91 port 59775 [preauth]
Oct  1 05:31:03 nativespace-cdp sshd[15810]: Failed password for invalid user ubuntu from 64.227.133.133 port 41562 ssh2
Oct  1 05:31:03 nativespace-cdp sshd[15810]: Received disconnect from 64.227.133.133 port 41562:11: Bye Bye [preauth]
Oct  1 05:31:03 nativespace-cdp sshd[15810]: Disconnected from 64.227.133.133 port 41562 [preauth]
Oct  1 05:31:12 nativespace-cdp sshd[15846]: Invalid user odoo from 129.222.203.89 port 44317
Oct  1 05:31:12 nativespace-cdp sshd[15846]: input_userauth_request: invalid user odoo [preauth]
Oct  1 05:31:12 nativespace-cdp sshd[15846]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:31:12 nativespace-cdp sshd[15846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:31:14 nativespace-cdp sshd[15846]: Failed password for invalid user odoo from 129.222.203.89 port 44317 ssh2
Oct  1 05:31:14 nativespace-cdp sshd[15846]: Received disconnect from 129.222.203.89 port 44317:11: Bye Bye [preauth]
Oct  1 05:31:14 nativespace-cdp sshd[15846]: Disconnected from 129.222.203.89 port 44317 [preauth]
Oct  1 05:31:19 nativespace-cdp sshd[15866]: Invalid user thomas from 78.51.129.113 port 50836
Oct  1 05:31:19 nativespace-cdp sshd[15866]: input_userauth_request: invalid user thomas [preauth]
Oct  1 05:31:19 nativespace-cdp sshd[15866]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:31:19 nativespace-cdp sshd[15866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:31:21 nativespace-cdp sshd[15866]: Failed password for invalid user thomas from 78.51.129.113 port 50836 ssh2
Oct  1 05:31:21 nativespace-cdp sshd[15866]: Received disconnect from 78.51.129.113 port 50836:11: Bye Bye [preauth]
Oct  1 05:31:21 nativespace-cdp sshd[15866]: Disconnected from 78.51.129.113 port 50836 [preauth]
Oct  1 05:31:36 nativespace-cdp sshd[15901]: Connection closed by 159.100.136.21 port 43252 [preauth]
Oct  1 05:31:43 nativespace-cdp sshd[15929]: Invalid user username from 64.227.133.133 port 55134
Oct  1 05:31:43 nativespace-cdp sshd[15929]: input_userauth_request: invalid user username [preauth]
Oct  1 05:31:43 nativespace-cdp sshd[15929]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:31:43 nativespace-cdp sshd[15929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:31:43 nativespace-cdp sshd[15928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91  user=root
Oct  1 05:31:43 nativespace-cdp sshd[15928]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:31:45 nativespace-cdp sshd[15929]: Failed password for invalid user username from 64.227.133.133 port 55134 ssh2
Oct  1 05:31:45 nativespace-cdp sshd[15929]: Received disconnect from 64.227.133.133 port 55134:11: Bye Bye [preauth]
Oct  1 05:31:45 nativespace-cdp sshd[15929]: Disconnected from 64.227.133.133 port 55134 [preauth]
Oct  1 05:31:45 nativespace-cdp sshd[15928]: Failed password for root from 200.196.50.91 port 37845 ssh2
Oct  1 05:31:45 nativespace-cdp sshd[15928]: Received disconnect from 200.196.50.91 port 37845:11: Bye Bye [preauth]
Oct  1 05:31:45 nativespace-cdp sshd[15928]: Disconnected from 200.196.50.91 port 37845 [preauth]
Oct  1 05:31:50 nativespace-cdp sshd[15881]: Received disconnect from 45.11.93.205 port 47158:11: Bye Bye [preauth]
Oct  1 05:31:50 nativespace-cdp sshd[15881]: Disconnected from 45.11.93.205 port 47158 [preauth]
Oct  1 05:32:01 nativespace-cdp sshd[15983]: Invalid user ubuntu from 78.51.129.113 port 49538
Oct  1 05:32:01 nativespace-cdp sshd[15983]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:32:01 nativespace-cdp sshd[15983]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:32:01 nativespace-cdp sshd[15983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:32:02 nativespace-cdp sshd[15991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89  user=root
Oct  1 05:32:02 nativespace-cdp sshd[15991]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:32:03 nativespace-cdp sshd[15983]: Failed password for invalid user ubuntu from 78.51.129.113 port 49538 ssh2
Oct  1 05:32:03 nativespace-cdp sshd[15983]: Received disconnect from 78.51.129.113 port 49538:11: Bye Bye [preauth]
Oct  1 05:32:03 nativespace-cdp sshd[15983]: Disconnected from 78.51.129.113 port 49538 [preauth]
Oct  1 05:32:04 nativespace-cdp sshd[15991]: Failed password for root from 129.222.203.89 port 6419 ssh2
Oct  1 05:32:05 nativespace-cdp sshd[15991]: Received disconnect from 129.222.203.89 port 6419:11: Bye Bye [preauth]
Oct  1 05:32:05 nativespace-cdp sshd[15991]: Disconnected from 129.222.203.89 port 6419 [preauth]
Oct  1 05:32:15 nativespace-cdp sshd[16025]: Invalid user user from 45.11.93.205 port 33656
Oct  1 05:32:15 nativespace-cdp sshd[16025]: input_userauth_request: invalid user user [preauth]
Oct  1 05:32:15 nativespace-cdp sshd[16025]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:32:15 nativespace-cdp sshd[16025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:32:17 nativespace-cdp sshd[16036]: Invalid user tg from 68.183.142.21 port 35652
Oct  1 05:32:17 nativespace-cdp sshd[16036]: input_userauth_request: invalid user tg [preauth]
Oct  1 05:32:17 nativespace-cdp sshd[16036]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:32:17 nativespace-cdp sshd[16036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 05:32:17 nativespace-cdp sshd[16025]: Failed password for invalid user user from 45.11.93.205 port 33656 ssh2
Oct  1 05:32:17 nativespace-cdp sshd[16025]: Received disconnect from 45.11.93.205 port 33656:11: Bye Bye [preauth]
Oct  1 05:32:17 nativespace-cdp sshd[16025]: Disconnected from 45.11.93.205 port 33656 [preauth]
Oct  1 05:32:18 nativespace-cdp sshd[16036]: Failed password for invalid user tg from 68.183.142.21 port 35652 ssh2
Oct  1 05:32:26 nativespace-cdp sshd[16036]: Received disconnect from 68.183.142.21 port 35652:11: Bye Bye [preauth]
Oct  1 05:32:26 nativespace-cdp sshd[16036]: Disconnected from 68.183.142.21 port 35652 [preauth]
Oct  1 05:32:26 nativespace-cdp sshd[16081]: Invalid user prod from 200.196.50.91 port 44146
Oct  1 05:32:26 nativespace-cdp sshd[16081]: input_userauth_request: invalid user prod [preauth]
Oct  1 05:32:26 nativespace-cdp sshd[16081]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:32:26 nativespace-cdp sshd[16081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91
Oct  1 05:32:27 nativespace-cdp sshd[16087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133  user=root
Oct  1 05:32:27 nativespace-cdp sshd[16087]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:32:28 nativespace-cdp sshd[16081]: Failed password for invalid user prod from 200.196.50.91 port 44146 ssh2
Oct  1 05:32:28 nativespace-cdp sshd[16081]: Received disconnect from 200.196.50.91 port 44146:11: Bye Bye [preauth]
Oct  1 05:32:28 nativespace-cdp sshd[16081]: Disconnected from 200.196.50.91 port 44146 [preauth]
Oct  1 05:32:29 nativespace-cdp sshd[16087]: Failed password for root from 64.227.133.133 port 57570 ssh2
Oct  1 05:32:29 nativespace-cdp sshd[16087]: Received disconnect from 64.227.133.133 port 57570:11: Bye Bye [preauth]
Oct  1 05:32:29 nativespace-cdp sshd[16087]: Disconnected from 64.227.133.133 port 57570 [preauth]
Oct  1 05:32:41 nativespace-cdp sshd[16114]: Connection closed by 78.51.129.113 port 60882 [preauth]
Oct  1 05:32:51 nativespace-cdp sshd[16145]: Invalid user user from 129.222.203.89 port 43968
Oct  1 05:32:51 nativespace-cdp sshd[16145]: input_userauth_request: invalid user user [preauth]
Oct  1 05:32:51 nativespace-cdp sshd[16145]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:32:51 nativespace-cdp sshd[16145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:32:53 nativespace-cdp sshd[16145]: Failed password for invalid user user from 129.222.203.89 port 43968 ssh2
Oct  1 05:32:53 nativespace-cdp sshd[16145]: Received disconnect from 129.222.203.89 port 43968:11: Bye Bye [preauth]
Oct  1 05:32:53 nativespace-cdp sshd[16145]: Disconnected from 129.222.203.89 port 43968 [preauth]
Oct  1 05:33:05 nativespace-cdp sshd[16186]: Invalid user ubuntu from 45.11.93.205 port 46388
Oct  1 05:33:05 nativespace-cdp sshd[16186]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:33:05 nativespace-cdp sshd[16186]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:33:05 nativespace-cdp sshd[16186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:33:07 nativespace-cdp sshd[16186]: Failed password for invalid user ubuntu from 45.11.93.205 port 46388 ssh2
Oct  1 05:33:07 nativespace-cdp sshd[16186]: Received disconnect from 45.11.93.205 port 46388:11: Bye Bye [preauth]
Oct  1 05:33:07 nativespace-cdp sshd[16186]: Disconnected from 45.11.93.205 port 46388 [preauth]
Oct  1 05:33:12 nativespace-cdp sshd[16200]: Invalid user username from 78.51.129.113 port 36538
Oct  1 05:33:12 nativespace-cdp sshd[16200]: input_userauth_request: invalid user username [preauth]
Oct  1 05:33:12 nativespace-cdp sshd[16200]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:33:12 nativespace-cdp sshd[16200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:33:13 nativespace-cdp sshd[16203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.50.91  user=root
Oct  1 05:33:13 nativespace-cdp sshd[16203]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:33:13 nativespace-cdp sshd[16207]: Invalid user tomcat from 64.227.133.133 port 52644
Oct  1 05:33:13 nativespace-cdp sshd[16207]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 05:33:13 nativespace-cdp sshd[16207]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:33:13 nativespace-cdp sshd[16207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:33:13 nativespace-cdp sshd[16200]: Failed password for invalid user username from 78.51.129.113 port 36538 ssh2
Oct  1 05:33:13 nativespace-cdp sshd[16200]: Received disconnect from 78.51.129.113 port 36538:11: Bye Bye [preauth]
Oct  1 05:33:13 nativespace-cdp sshd[16200]: Disconnected from 78.51.129.113 port 36538 [preauth]
Oct  1 05:33:14 nativespace-cdp sshd[16203]: Failed password for root from 200.196.50.91 port 50446 ssh2
Oct  1 05:33:14 nativespace-cdp sshd[16203]: Received disconnect from 200.196.50.91 port 50446:11: Bye Bye [preauth]
Oct  1 05:33:14 nativespace-cdp sshd[16203]: Disconnected from 200.196.50.91 port 50446 [preauth]
Oct  1 05:33:15 nativespace-cdp sshd[16207]: Failed password for invalid user tomcat from 64.227.133.133 port 52644 ssh2
Oct  1 05:33:15 nativespace-cdp sshd[16207]: Received disconnect from 64.227.133.133 port 52644:11: Bye Bye [preauth]
Oct  1 05:33:15 nativespace-cdp sshd[16207]: Disconnected from 64.227.133.133 port 52644 [preauth]
Oct  1 05:33:41 nativespace-cdp sshd[16267]: Invalid user test from 129.222.203.89 port 41252
Oct  1 05:33:41 nativespace-cdp sshd[16267]: input_userauth_request: invalid user test [preauth]
Oct  1 05:33:41 nativespace-cdp sshd[16267]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:33:41 nativespace-cdp sshd[16267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:33:43 nativespace-cdp sshd[16267]: Failed password for invalid user test from 129.222.203.89 port 41252 ssh2
Oct  1 05:33:43 nativespace-cdp sshd[16267]: Received disconnect from 129.222.203.89 port 41252:11: Bye Bye [preauth]
Oct  1 05:33:43 nativespace-cdp sshd[16267]: Disconnected from 129.222.203.89 port 41252 [preauth]
Oct  1 05:33:52 nativespace-cdp sshd[16290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113  user=root
Oct  1 05:33:52 nativespace-cdp sshd[16290]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:33:54 nativespace-cdp sshd[16295]: Invalid user test from 45.11.93.205 port 44386
Oct  1 05:33:54 nativespace-cdp sshd[16295]: input_userauth_request: invalid user test [preauth]
Oct  1 05:33:54 nativespace-cdp sshd[16295]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:33:54 nativespace-cdp sshd[16295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:33:54 nativespace-cdp sshd[16300]: Invalid user odoo from 64.227.133.133 port 53000
Oct  1 05:33:54 nativespace-cdp sshd[16300]: input_userauth_request: invalid user odoo [preauth]
Oct  1 05:33:54 nativespace-cdp sshd[16300]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:33:54 nativespace-cdp sshd[16300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:33:54 nativespace-cdp sshd[16290]: Failed password for root from 78.51.129.113 port 58166 ssh2
Oct  1 05:33:54 nativespace-cdp sshd[16290]: Received disconnect from 78.51.129.113 port 58166:11: Bye Bye [preauth]
Oct  1 05:33:54 nativespace-cdp sshd[16290]: Disconnected from 78.51.129.113 port 58166 [preauth]
Oct  1 05:33:56 nativespace-cdp sshd[16295]: Failed password for invalid user test from 45.11.93.205 port 44386 ssh2
Oct  1 05:33:56 nativespace-cdp sshd[16300]: Failed password for invalid user odoo from 64.227.133.133 port 53000 ssh2
Oct  1 05:33:59 nativespace-cdp sshd[16300]: Received disconnect from 64.227.133.133 port 53000:11: Bye Bye [preauth]
Oct  1 05:33:59 nativespace-cdp sshd[16300]: Disconnected from 64.227.133.133 port 53000 [preauth]
Oct  1 05:34:00 nativespace-cdp sshd[16295]: Received disconnect from 45.11.93.205 port 44386:11: Bye Bye [preauth]
Oct  1 05:34:00 nativespace-cdp sshd[16295]: Disconnected from 45.11.93.205 port 44386 [preauth]
Oct  1 05:34:34 nativespace-cdp sshd[16402]: Invalid user steam from 78.51.129.113 port 52834
Oct  1 05:34:34 nativespace-cdp sshd[16402]: input_userauth_request: invalid user steam [preauth]
Oct  1 05:34:34 nativespace-cdp sshd[16402]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:34:34 nativespace-cdp sshd[16402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:34:34 nativespace-cdp sshd[16397]: Invalid user ubuntu from 129.222.203.89 port 16283
Oct  1 05:34:34 nativespace-cdp sshd[16397]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:34:34 nativespace-cdp sshd[16397]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:34:34 nativespace-cdp sshd[16397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:34:34 nativespace-cdp sshd[16380]: Connection closed by 36.133.57.132 port 33338 [preauth]
Oct  1 05:34:36 nativespace-cdp sshd[16402]: Failed password for invalid user steam from 78.51.129.113 port 52834 ssh2
Oct  1 05:34:36 nativespace-cdp sshd[16397]: Failed password for invalid user ubuntu from 129.222.203.89 port 16283 ssh2
Oct  1 05:34:36 nativespace-cdp sshd[16402]: Received disconnect from 78.51.129.113 port 52834:11: Bye Bye [preauth]
Oct  1 05:34:36 nativespace-cdp sshd[16402]: Disconnected from 78.51.129.113 port 52834 [preauth]
Oct  1 05:34:36 nativespace-cdp sshd[16397]: Received disconnect from 129.222.203.89 port 16283:11: Bye Bye [preauth]
Oct  1 05:34:36 nativespace-cdp sshd[16397]: Disconnected from 129.222.203.89 port 16283 [preauth]
Oct  1 05:34:40 nativespace-cdp sshd[16423]: Invalid user user from 68.183.142.21 port 42014
Oct  1 05:34:40 nativespace-cdp sshd[16423]: input_userauth_request: invalid user user [preauth]
Oct  1 05:34:40 nativespace-cdp sshd[16423]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:34:40 nativespace-cdp sshd[16423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 05:34:41 nativespace-cdp sshd[16429]: Invalid user thomas from 64.227.133.133 port 37602
Oct  1 05:34:41 nativespace-cdp sshd[16429]: input_userauth_request: invalid user thomas [preauth]
Oct  1 05:34:41 nativespace-cdp sshd[16429]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:34:41 nativespace-cdp sshd[16429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:34:42 nativespace-cdp sshd[16423]: Failed password for invalid user user from 68.183.142.21 port 42014 ssh2
Oct  1 05:34:42 nativespace-cdp sshd[16423]: Received disconnect from 68.183.142.21 port 42014:11: Bye Bye [preauth]
Oct  1 05:34:42 nativespace-cdp sshd[16423]: Disconnected from 68.183.142.21 port 42014 [preauth]
Oct  1 05:34:42 nativespace-cdp sshd[16429]: Failed password for invalid user thomas from 64.227.133.133 port 37602 ssh2
Oct  1 05:34:42 nativespace-cdp sshd[16429]: Received disconnect from 64.227.133.133 port 37602:11: Bye Bye [preauth]
Oct  1 05:34:42 nativespace-cdp sshd[16429]: Disconnected from 64.227.133.133 port 37602 [preauth]
Oct  1 05:34:43 nativespace-cdp sshd[16437]: Invalid user ubuntu from 45.11.93.205 port 48184
Oct  1 05:34:43 nativespace-cdp sshd[16437]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:34:43 nativespace-cdp sshd[16437]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:34:43 nativespace-cdp sshd[16437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205
Oct  1 05:34:45 nativespace-cdp sshd[16437]: Failed password for invalid user ubuntu from 45.11.93.205 port 48184 ssh2
Oct  1 05:34:46 nativespace-cdp sshd[16437]: Received disconnect from 45.11.93.205 port 48184:11: Bye Bye [preauth]
Oct  1 05:34:46 nativespace-cdp sshd[16437]: Disconnected from 45.11.93.205 port 48184 [preauth]
Oct  1 05:35:09 nativespace-cdp su: pam_unix(su:session): session opened for user ianrayne by (uid=0)
Oct  1 05:35:10 nativespace-cdp su[16789]: pam_unix(su:session): session closed for user ianrayne
Oct  1 05:35:11 nativespace-cdp sshd[16805]: Invalid user deploy from 78.51.129.113 port 38528
Oct  1 05:35:11 nativespace-cdp sshd[16805]: input_userauth_request: invalid user deploy [preauth]
Oct  1 05:35:11 nativespace-cdp sshd[16805]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:35:11 nativespace-cdp sshd[16805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:35:11 nativespace-cdp sshd[16780]: Invalid user ubuntu from 36.133.57.132 port 41522
Oct  1 05:35:11 nativespace-cdp sshd[16780]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:35:11 nativespace-cdp sshd[16780]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:35:11 nativespace-cdp sshd[16780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:35:12 nativespace-cdp sshd[16805]: Failed password for invalid user deploy from 78.51.129.113 port 38528 ssh2
Oct  1 05:35:12 nativespace-cdp sshd[16805]: Received disconnect from 78.51.129.113 port 38528:11: Bye Bye [preauth]
Oct  1 05:35:12 nativespace-cdp sshd[16805]: Disconnected from 78.51.129.113 port 38528 [preauth]
Oct  1 05:35:13 nativespace-cdp sshd[16780]: Failed password for invalid user ubuntu from 36.133.57.132 port 41522 ssh2
Oct  1 05:35:13 nativespace-cdp sshd[16780]: Received disconnect from 36.133.57.132 port 41522:11: Bye Bye [preauth]
Oct  1 05:35:13 nativespace-cdp sshd[16780]: Disconnected from 36.133.57.132 port 41522 [preauth]
Oct  1 05:35:18 nativespace-cdp sshd[16238]: Connection reset by 36.133.57.132 port 53378 [preauth]
Oct  1 05:35:31 nativespace-cdp sshd[16858]: Invalid user support from 64.227.133.133 port 43774
Oct  1 05:35:31 nativespace-cdp sshd[16858]: input_userauth_request: invalid user support [preauth]
Oct  1 05:35:31 nativespace-cdp sshd[16858]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:35:31 nativespace-cdp sshd[16858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:35:32 nativespace-cdp sshd[16861]: Invalid user user from 129.222.203.89 port 21219
Oct  1 05:35:32 nativespace-cdp sshd[16861]: input_userauth_request: invalid user user [preauth]
Oct  1 05:35:32 nativespace-cdp sshd[16861]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:35:32 nativespace-cdp sshd[16861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:35:33 nativespace-cdp sshd[16858]: Failed password for invalid user support from 64.227.133.133 port 43774 ssh2
Oct  1 05:35:33 nativespace-cdp sshd[16858]: Received disconnect from 64.227.133.133 port 43774:11: Bye Bye [preauth]
Oct  1 05:35:33 nativespace-cdp sshd[16858]: Disconnected from 64.227.133.133 port 43774 [preauth]
Oct  1 05:35:33 nativespace-cdp sshd[16861]: Failed password for invalid user user from 129.222.203.89 port 21219 ssh2
Oct  1 05:35:34 nativespace-cdp sshd[16861]: Received disconnect from 129.222.203.89 port 21219:11: Bye Bye [preauth]
Oct  1 05:35:34 nativespace-cdp sshd[16861]: Disconnected from 129.222.203.89 port 21219 [preauth]
Oct  1 05:35:44 nativespace-cdp sshd[16995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132  user=root
Oct  1 05:35:44 nativespace-cdp sshd[16995]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:35:46 nativespace-cdp sshd[16882]: Received disconnect from 45.11.93.205 port 52966:11: Bye Bye [preauth]
Oct  1 05:35:46 nativespace-cdp sshd[16882]: Disconnected from 45.11.93.205 port 52966 [preauth]
Oct  1 05:35:46 nativespace-cdp sshd[17009]: Invalid user superman from 68.183.142.21 port 40884
Oct  1 05:35:46 nativespace-cdp sshd[17009]: input_userauth_request: invalid user superman [preauth]
Oct  1 05:35:46 nativespace-cdp sshd[17009]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:35:46 nativespace-cdp sshd[17009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 05:35:46 nativespace-cdp sshd[16995]: Failed password for root from 36.133.57.132 port 49696 ssh2
Oct  1 05:35:47 nativespace-cdp sshd[16995]: Received disconnect from 36.133.57.132 port 49696:11: Bye Bye [preauth]
Oct  1 05:35:47 nativespace-cdp sshd[16995]: Disconnected from 36.133.57.132 port 49696 [preauth]
Oct  1 05:35:49 nativespace-cdp sshd[17009]: Failed password for invalid user superman from 68.183.142.21 port 40884 ssh2
Oct  1 05:35:49 nativespace-cdp sshd[17009]: Received disconnect from 68.183.142.21 port 40884:11: Bye Bye [preauth]
Oct  1 05:35:49 nativespace-cdp sshd[17009]: Disconnected from 68.183.142.21 port 40884 [preauth]
Oct  1 05:35:49 nativespace-cdp sshd[17081]: Invalid user test from 78.51.129.113 port 37208
Oct  1 05:35:49 nativespace-cdp sshd[17081]: input_userauth_request: invalid user test [preauth]
Oct  1 05:35:49 nativespace-cdp sshd[17081]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:35:49 nativespace-cdp sshd[17081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:35:51 nativespace-cdp sshd[17081]: Failed password for invalid user test from 78.51.129.113 port 37208 ssh2
Oct  1 05:35:51 nativespace-cdp sshd[17081]: Received disconnect from 78.51.129.113 port 37208:11: Bye Bye [preauth]
Oct  1 05:35:51 nativespace-cdp sshd[17081]: Disconnected from 78.51.129.113 port 37208 [preauth]
Oct  1 05:36:18 nativespace-cdp sshd[17152]: Invalid user user from 64.227.133.133 port 33872
Oct  1 05:36:18 nativespace-cdp sshd[17152]: input_userauth_request: invalid user user [preauth]
Oct  1 05:36:18 nativespace-cdp sshd[17152]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:36:18 nativespace-cdp sshd[17152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:36:21 nativespace-cdp sshd[17152]: Failed password for invalid user user from 64.227.133.133 port 33872 ssh2
Oct  1 05:36:21 nativespace-cdp sshd[17152]: Received disconnect from 64.227.133.133 port 33872:11: Bye Bye [preauth]
Oct  1 05:36:21 nativespace-cdp sshd[17152]: Disconnected from 64.227.133.133 port 33872 [preauth]
Oct  1 05:36:21 nativespace-cdp sshd[17162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89  user=root
Oct  1 05:36:21 nativespace-cdp sshd[17162]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:36:23 nativespace-cdp sshd[17162]: Failed password for root from 129.222.203.89 port 27426 ssh2
Oct  1 05:36:23 nativespace-cdp sshd[17162]: Received disconnect from 129.222.203.89 port 27426:11: Bye Bye [preauth]
Oct  1 05:36:23 nativespace-cdp sshd[17162]: Disconnected from 129.222.203.89 port 27426 [preauth]
Oct  1 05:36:24 nativespace-cdp sshd[17169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.11.93.205  user=root
Oct  1 05:36:24 nativespace-cdp sshd[17169]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:36:25 nativespace-cdp sshd[17169]: Failed password for root from 45.11.93.205 port 60840 ssh2
Oct  1 05:36:27 nativespace-cdp sshd[17169]: Received disconnect from 45.11.93.205 port 60840:11: Bye Bye [preauth]
Oct  1 05:36:27 nativespace-cdp sshd[17169]: Disconnected from 45.11.93.205 port 60840 [preauth]
Oct  1 05:36:32 nativespace-cdp sshd[17192]: Invalid user test from 78.51.129.113 port 41478
Oct  1 05:36:32 nativespace-cdp sshd[17192]: input_userauth_request: invalid user test [preauth]
Oct  1 05:36:32 nativespace-cdp sshd[17192]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:36:32 nativespace-cdp sshd[17192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:36:33 nativespace-cdp sshd[17198]: Connection closed by 159.100.136.21 port 53016 [preauth]
Oct  1 05:36:34 nativespace-cdp sshd[17192]: Failed password for invalid user test from 78.51.129.113 port 41478 ssh2
Oct  1 05:36:36 nativespace-cdp sshd[17192]: Received disconnect from 78.51.129.113 port 41478:11: Bye Bye [preauth]
Oct  1 05:36:36 nativespace-cdp sshd[17192]: Disconnected from 78.51.129.113 port 41478 [preauth]
Oct  1 05:36:53 nativespace-cdp sshd[17216]: Connection reset by 36.133.57.132 port 57882 [preauth]
Oct  1 05:37:07 nativespace-cdp sshd[17344]: Invalid user usuario from 78.51.129.113 port 36704
Oct  1 05:37:07 nativespace-cdp sshd[17344]: input_userauth_request: invalid user usuario [preauth]
Oct  1 05:37:07 nativespace-cdp sshd[17344]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:37:07 nativespace-cdp sshd[17344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:37:07 nativespace-cdp sshd[17327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133  user=root
Oct  1 05:37:07 nativespace-cdp sshd[17327]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:37:08 nativespace-cdp sshd[17344]: Failed password for invalid user usuario from 78.51.129.113 port 36704 ssh2
Oct  1 05:37:08 nativespace-cdp sshd[17327]: Failed password for root from 64.227.133.133 port 34354 ssh2
Oct  1 05:37:08 nativespace-cdp sshd[17344]: Received disconnect from 78.51.129.113 port 36704:11: Bye Bye [preauth]
Oct  1 05:37:08 nativespace-cdp sshd[17344]: Disconnected from 78.51.129.113 port 36704 [preauth]
Oct  1 05:37:08 nativespace-cdp sshd[17327]: Received disconnect from 64.227.133.133 port 34354:11: Bye Bye [preauth]
Oct  1 05:37:08 nativespace-cdp sshd[17327]: Disconnected from 64.227.133.133 port 34354 [preauth]
Oct  1 05:37:13 nativespace-cdp sshd[17356]: Invalid user ubuntu from 129.222.203.89 port 46838
Oct  1 05:37:13 nativespace-cdp sshd[17356]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:37:13 nativespace-cdp sshd[17356]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:37:13 nativespace-cdp sshd[17356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:37:15 nativespace-cdp sshd[17359]: Invalid user nexus from 36.133.57.132 port 37834
Oct  1 05:37:15 nativespace-cdp sshd[17359]: input_userauth_request: invalid user nexus [preauth]
Oct  1 05:37:15 nativespace-cdp sshd[17359]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:37:15 nativespace-cdp sshd[17359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:37:15 nativespace-cdp sshd[17356]: Failed password for invalid user ubuntu from 129.222.203.89 port 46838 ssh2
Oct  1 05:37:16 nativespace-cdp sshd[17356]: Received disconnect from 129.222.203.89 port 46838:11: Bye Bye [preauth]
Oct  1 05:37:16 nativespace-cdp sshd[17356]: Disconnected from 129.222.203.89 port 46838 [preauth]
Oct  1 05:37:16 nativespace-cdp sshd[17363]: Invalid user testuser from 203.25.211.164 port 58930
Oct  1 05:37:16 nativespace-cdp sshd[17363]: input_userauth_request: invalid user testuser [preauth]
Oct  1 05:37:16 nativespace-cdp sshd[17363]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:37:16 nativespace-cdp sshd[17363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.25.211.164
Oct  1 05:37:18 nativespace-cdp sshd[17363]: Failed password for invalid user testuser from 203.25.211.164 port 58930 ssh2
Oct  1 05:37:18 nativespace-cdp sshd[17359]: Failed password for invalid user nexus from 36.133.57.132 port 37834 ssh2
Oct  1 05:37:18 nativespace-cdp sshd[17363]: Received disconnect from 203.25.211.164 port 58930:11: Bye Bye [preauth]
Oct  1 05:37:18 nativespace-cdp sshd[17363]: Disconnected from 203.25.211.164 port 58930 [preauth]
Oct  1 05:37:18 nativespace-cdp sshd[17359]: Received disconnect from 36.133.57.132 port 37834:11: Bye Bye [preauth]
Oct  1 05:37:18 nativespace-cdp sshd[17359]: Disconnected from 36.133.57.132 port 37834 [preauth]
Oct  1 05:37:18 nativespace-cdp sshd[17170]: Connection closed by 203.25.211.164 port 42038 [preauth]
Oct  1 05:37:47 nativespace-cdp sshd[17450]: Invalid user test01 from 78.51.129.113 port 51466
Oct  1 05:37:47 nativespace-cdp sshd[17450]: input_userauth_request: invalid user test01 [preauth]
Oct  1 05:37:47 nativespace-cdp sshd[17450]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:37:47 nativespace-cdp sshd[17450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:37:49 nativespace-cdp sshd[17450]: Failed password for invalid user test01 from 78.51.129.113 port 51466 ssh2
Oct  1 05:37:49 nativespace-cdp sshd[17450]: Received disconnect from 78.51.129.113 port 51466:11: Bye Bye [preauth]
Oct  1 05:37:49 nativespace-cdp sshd[17450]: Disconnected from 78.51.129.113 port 51466 [preauth]
Oct  1 05:37:50 nativespace-cdp sshd[17456]: Invalid user ubuntu from 36.133.57.132 port 46004
Oct  1 05:37:50 nativespace-cdp sshd[17456]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:37:50 nativespace-cdp sshd[17456]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:37:50 nativespace-cdp sshd[17456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:37:52 nativespace-cdp sshd[17456]: Failed password for invalid user ubuntu from 36.133.57.132 port 46004 ssh2
Oct  1 05:37:53 nativespace-cdp sshd[17456]: Received disconnect from 36.133.57.132 port 46004:11: Bye Bye [preauth]
Oct  1 05:37:53 nativespace-cdp sshd[17456]: Disconnected from 36.133.57.132 port 46004 [preauth]
Oct  1 05:37:59 nativespace-cdp sshd[17474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89  user=root
Oct  1 05:37:59 nativespace-cdp sshd[17474]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:38:00 nativespace-cdp sshd[17474]: Failed password for root from 129.222.203.89 port 18910 ssh2
Oct  1 05:38:02 nativespace-cdp sshd[17474]: Received disconnect from 129.222.203.89 port 18910:11: Bye Bye [preauth]
Oct  1 05:38:02 nativespace-cdp sshd[17474]: Disconnected from 129.222.203.89 port 18910 [preauth]
Oct  1 05:38:04 nativespace-cdp sshd[17497]: Invalid user svn from 64.227.133.133 port 39708
Oct  1 05:38:04 nativespace-cdp sshd[17497]: input_userauth_request: invalid user svn [preauth]
Oct  1 05:38:04 nativespace-cdp sshd[17497]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:38:04 nativespace-cdp sshd[17497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:38:06 nativespace-cdp sshd[17497]: Failed password for invalid user svn from 64.227.133.133 port 39708 ssh2
Oct  1 05:38:06 nativespace-cdp sshd[17497]: Received disconnect from 64.227.133.133 port 39708:11: Bye Bye [preauth]
Oct  1 05:38:06 nativespace-cdp sshd[17497]: Disconnected from 64.227.133.133 port 39708 [preauth]
Oct  1 05:38:08 nativespace-cdp sshd[17500]: Connection reset by 203.25.211.164 port 45248 [preauth]
Oct  1 05:38:26 nativespace-cdp sshd[17544]: Invalid user ubuntu from 78.51.129.113 port 39728
Oct  1 05:38:26 nativespace-cdp sshd[17544]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:38:26 nativespace-cdp sshd[17544]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:38:26 nativespace-cdp sshd[17544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:38:28 nativespace-cdp sshd[17544]: Failed password for invalid user ubuntu from 78.51.129.113 port 39728 ssh2
Oct  1 05:38:28 nativespace-cdp sshd[17544]: Received disconnect from 78.51.129.113 port 39728:11: Bye Bye [preauth]
Oct  1 05:38:28 nativespace-cdp sshd[17544]: Disconnected from 78.51.129.113 port 39728 [preauth]
Oct  1 05:38:29 nativespace-cdp sshd[17550]: Invalid user abhishek from 36.133.57.132 port 54184
Oct  1 05:38:29 nativespace-cdp sshd[17550]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 05:38:29 nativespace-cdp sshd[17550]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:38:29 nativespace-cdp sshd[17550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:38:30 nativespace-cdp sshd[17550]: Failed password for invalid user abhishek from 36.133.57.132 port 54184 ssh2
Oct  1 05:38:31 nativespace-cdp sshd[17550]: Received disconnect from 36.133.57.132 port 54184:11: Bye Bye [preauth]
Oct  1 05:38:31 nativespace-cdp sshd[17550]: Disconnected from 36.133.57.132 port 54184 [preauth]
Oct  1 05:38:50 nativespace-cdp sshd[17599]: Invalid user ubuntu from 129.222.203.89 port 38256
Oct  1 05:38:50 nativespace-cdp sshd[17599]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:38:50 nativespace-cdp sshd[17599]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:38:50 nativespace-cdp sshd[17599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:38:51 nativespace-cdp sshd[17599]: Failed password for invalid user ubuntu from 129.222.203.89 port 38256 ssh2
Oct  1 05:38:51 nativespace-cdp sshd[17599]: Received disconnect from 129.222.203.89 port 38256:11: Bye Bye [preauth]
Oct  1 05:38:51 nativespace-cdp sshd[17599]: Disconnected from 129.222.203.89 port 38256 [preauth]
Oct  1 05:38:55 nativespace-cdp sshd[17618]: Invalid user tg from 64.227.133.133 port 55982
Oct  1 05:38:55 nativespace-cdp sshd[17618]: input_userauth_request: invalid user tg [preauth]
Oct  1 05:38:55 nativespace-cdp sshd[17618]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:38:55 nativespace-cdp sshd[17618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:38:57 nativespace-cdp sshd[17618]: Failed password for invalid user tg from 64.227.133.133 port 55982 ssh2
Oct  1 05:38:58 nativespace-cdp sshd[17618]: Received disconnect from 64.227.133.133 port 55982:11: Bye Bye [preauth]
Oct  1 05:38:58 nativespace-cdp sshd[17618]: Disconnected from 64.227.133.133 port 55982 [preauth]
Oct  1 05:39:05 nativespace-cdp sshd[17656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113  user=root
Oct  1 05:39:05 nativespace-cdp sshd[17656]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:39:07 nativespace-cdp sshd[17656]: Failed password for root from 78.51.129.113 port 32924 ssh2
Oct  1 05:39:07 nativespace-cdp sshd[17656]: Received disconnect from 78.51.129.113 port 32924:11: Bye Bye [preauth]
Oct  1 05:39:07 nativespace-cdp sshd[17656]: Disconnected from 78.51.129.113 port 32924 [preauth]
Oct  1 05:39:14 nativespace-cdp sshd[17667]: Invalid user tomcat from 36.133.57.132 port 34142
Oct  1 05:39:14 nativespace-cdp sshd[17667]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 05:39:14 nativespace-cdp sshd[17667]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:39:14 nativespace-cdp sshd[17667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:39:15 nativespace-cdp sshd[17667]: Failed password for invalid user tomcat from 36.133.57.132 port 34142 ssh2
Oct  1 05:39:16 nativespace-cdp sshd[17667]: Received disconnect from 36.133.57.132 port 34142:11: Bye Bye [preauth]
Oct  1 05:39:16 nativespace-cdp sshd[17667]: Disconnected from 36.133.57.132 port 34142 [preauth]
Oct  1 05:39:48 nativespace-cdp sshd[17777]: Invalid user superman from 78.51.129.113 port 36016
Oct  1 05:39:48 nativespace-cdp sshd[17777]: input_userauth_request: invalid user superman [preauth]
Oct  1 05:39:48 nativespace-cdp sshd[17777]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:39:48 nativespace-cdp sshd[17777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:39:48 nativespace-cdp sshd[17758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89  user=root
Oct  1 05:39:48 nativespace-cdp sshd[17758]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:39:48 nativespace-cdp sshd[17775]: Invalid user test_user from 64.227.133.133 port 50102
Oct  1 05:39:48 nativespace-cdp sshd[17775]: input_userauth_request: invalid user test_user [preauth]
Oct  1 05:39:48 nativespace-cdp sshd[17775]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:39:48 nativespace-cdp sshd[17775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:39:50 nativespace-cdp sshd[17777]: Failed password for invalid user superman from 78.51.129.113 port 36016 ssh2
Oct  1 05:39:50 nativespace-cdp sshd[17777]: Received disconnect from 78.51.129.113 port 36016:11: Bye Bye [preauth]
Oct  1 05:39:50 nativespace-cdp sshd[17777]: Disconnected from 78.51.129.113 port 36016 [preauth]
Oct  1 05:39:50 nativespace-cdp sshd[17758]: Failed password for root from 129.222.203.89 port 63177 ssh2
Oct  1 05:39:50 nativespace-cdp sshd[17775]: Failed password for invalid user test_user from 64.227.133.133 port 50102 ssh2
Oct  1 05:39:50 nativespace-cdp sshd[17758]: Received disconnect from 129.222.203.89 port 63177:11: Bye Bye [preauth]
Oct  1 05:39:50 nativespace-cdp sshd[17758]: Disconnected from 129.222.203.89 port 63177 [preauth]
Oct  1 05:39:50 nativespace-cdp sshd[17775]: Received disconnect from 64.227.133.133 port 50102:11: Bye Bye [preauth]
Oct  1 05:39:50 nativespace-cdp sshd[17775]: Disconnected from 64.227.133.133 port 50102 [preauth]
Oct  1 05:39:53 nativespace-cdp sshd[17785]: Invalid user test from 36.133.57.132 port 42310
Oct  1 05:39:53 nativespace-cdp sshd[17785]: input_userauth_request: invalid user test [preauth]
Oct  1 05:39:53 nativespace-cdp sshd[17785]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:39:53 nativespace-cdp sshd[17785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:39:56 nativespace-cdp sshd[17785]: Failed password for invalid user test from 36.133.57.132 port 42310 ssh2
Oct  1 05:39:59 nativespace-cdp sshd[17785]: Received disconnect from 36.133.57.132 port 42310:11: Bye Bye [preauth]
Oct  1 05:39:59 nativespace-cdp sshd[17785]: Disconnected from 36.133.57.132 port 42310 [preauth]
Oct  1 05:40:24 nativespace-cdp sshd[17988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113  user=root
Oct  1 05:40:24 nativespace-cdp sshd[17988]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:40:26 nativespace-cdp sshd[17988]: Failed password for root from 78.51.129.113 port 39434 ssh2
Oct  1 05:40:26 nativespace-cdp sshd[17988]: Received disconnect from 78.51.129.113 port 39434:11: Bye Bye [preauth]
Oct  1 05:40:26 nativespace-cdp sshd[17988]: Disconnected from 78.51.129.113 port 39434 [preauth]
Oct  1 05:40:33 nativespace-cdp sshd[18021]: Invalid user ubuntu from 68.183.142.21 port 60582
Oct  1 05:40:33 nativespace-cdp sshd[18021]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:40:33 nativespace-cdp sshd[18021]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:40:33 nativespace-cdp sshd[18021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 05:40:35 nativespace-cdp sshd[18031]: Invalid user sysadmin from 36.133.57.132 port 50492
Oct  1 05:40:35 nativespace-cdp sshd[18031]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 05:40:35 nativespace-cdp sshd[18031]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:40:35 nativespace-cdp sshd[18031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:40:35 nativespace-cdp sshd[18021]: Failed password for invalid user ubuntu from 68.183.142.21 port 60582 ssh2
Oct  1 05:40:36 nativespace-cdp sshd[18021]: Received disconnect from 68.183.142.21 port 60582:11: Bye Bye [preauth]
Oct  1 05:40:36 nativespace-cdp sshd[18021]: Disconnected from 68.183.142.21 port 60582 [preauth]
Oct  1 05:40:37 nativespace-cdp sshd[18110]: Invalid user svn from 129.222.203.89 port 26780
Oct  1 05:40:37 nativespace-cdp sshd[18110]: input_userauth_request: invalid user svn [preauth]
Oct  1 05:40:37 nativespace-cdp sshd[18110]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:40:37 nativespace-cdp sshd[18110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:40:38 nativespace-cdp sshd[18031]: Failed password for invalid user sysadmin from 36.133.57.132 port 50492 ssh2
Oct  1 05:40:38 nativespace-cdp sshd[18031]: Received disconnect from 36.133.57.132 port 50492:11: Bye Bye [preauth]
Oct  1 05:40:38 nativespace-cdp sshd[18031]: Disconnected from 36.133.57.132 port 50492 [preauth]
Oct  1 05:40:39 nativespace-cdp sshd[18110]: Failed password for invalid user svn from 129.222.203.89 port 26780 ssh2
Oct  1 05:40:43 nativespace-cdp sshd[18110]: Received disconnect from 129.222.203.89 port 26780:11: Bye Bye [preauth]
Oct  1 05:40:43 nativespace-cdp sshd[18110]: Disconnected from 129.222.203.89 port 26780 [preauth]
Oct  1 05:40:46 nativespace-cdp sshd[18193]: Invalid user support from 64.227.133.133 port 42076
Oct  1 05:40:46 nativespace-cdp sshd[18193]: input_userauth_request: invalid user support [preauth]
Oct  1 05:40:46 nativespace-cdp sshd[18193]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:40:46 nativespace-cdp sshd[18193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:40:49 nativespace-cdp sshd[18193]: Failed password for invalid user support from 64.227.133.133 port 42076 ssh2
Oct  1 05:40:49 nativespace-cdp sshd[18193]: Received disconnect from 64.227.133.133 port 42076:11: Bye Bye [preauth]
Oct  1 05:40:49 nativespace-cdp sshd[18193]: Disconnected from 64.227.133.133 port 42076 [preauth]
Oct  1 05:41:22 nativespace-cdp sshd[18301]: Invalid user test_user from 36.133.57.132 port 58682
Oct  1 05:41:22 nativespace-cdp sshd[18301]: input_userauth_request: invalid user test_user [preauth]
Oct  1 05:41:22 nativespace-cdp sshd[18301]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:41:22 nativespace-cdp sshd[18301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:41:25 nativespace-cdp sshd[18301]: Failed password for invalid user test_user from 36.133.57.132 port 58682 ssh2
Oct  1 05:41:26 nativespace-cdp sshd[18301]: Received disconnect from 36.133.57.132 port 58682:11: Bye Bye [preauth]
Oct  1 05:41:26 nativespace-cdp sshd[18301]: Disconnected from 36.133.57.132 port 58682 [preauth]
Oct  1 05:41:31 nativespace-cdp sshd[18333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89  user=root
Oct  1 05:41:31 nativespace-cdp sshd[18333]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:41:33 nativespace-cdp sshd[18340]: Connection closed by 159.100.136.21 port 34104 [preauth]
Oct  1 05:41:33 nativespace-cdp sshd[18333]: Failed password for root from 129.222.203.89 port 7439 ssh2
Oct  1 05:41:34 nativespace-cdp sshd[18333]: Received disconnect from 129.222.203.89 port 7439:11: Bye Bye [preauth]
Oct  1 05:41:34 nativespace-cdp sshd[18333]: Disconnected from 129.222.203.89 port 7439 [preauth]
Oct  1 05:41:42 nativespace-cdp sshd[18364]: Invalid user r from 64.227.133.133 port 34098
Oct  1 05:41:42 nativespace-cdp sshd[18364]: input_userauth_request: invalid user r [preauth]
Oct  1 05:41:42 nativespace-cdp sshd[18364]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:41:42 nativespace-cdp sshd[18364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:41:44 nativespace-cdp sshd[18364]: Failed password for invalid user r from 64.227.133.133 port 34098 ssh2
Oct  1 05:41:44 nativespace-cdp sshd[18364]: Received disconnect from 64.227.133.133 port 34098:11: Bye Bye [preauth]
Oct  1 05:41:44 nativespace-cdp sshd[18364]: Disconnected from 64.227.133.133 port 34098 [preauth]
Oct  1 05:41:48 nativespace-cdp sshd[18377]: Invalid user ubuntu from 78.51.129.113 port 55894
Oct  1 05:41:48 nativespace-cdp sshd[18377]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:41:48 nativespace-cdp sshd[18377]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:41:48 nativespace-cdp sshd[18377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:41:50 nativespace-cdp sshd[18377]: Failed password for invalid user ubuntu from 78.51.129.113 port 55894 ssh2
Oct  1 05:41:52 nativespace-cdp sshd[18377]: Received disconnect from 78.51.129.113 port 55894:11: Bye Bye [preauth]
Oct  1 05:41:52 nativespace-cdp sshd[18377]: Disconnected from 78.51.129.113 port 55894 [preauth]
Oct  1 05:42:05 nativespace-cdp sshd[18426]: Invalid user user from 36.133.57.132 port 38620
Oct  1 05:42:05 nativespace-cdp sshd[18426]: input_userauth_request: invalid user user [preauth]
Oct  1 05:42:05 nativespace-cdp sshd[18426]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:42:05 nativespace-cdp sshd[18426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:42:07 nativespace-cdp sshd[18426]: Failed password for invalid user user from 36.133.57.132 port 38620 ssh2
Oct  1 05:42:07 nativespace-cdp sshd[18426]: Received disconnect from 36.133.57.132 port 38620:11: Bye Bye [preauth]
Oct  1 05:42:07 nativespace-cdp sshd[18426]: Disconnected from 36.133.57.132 port 38620 [preauth]
Oct  1 05:42:15 nativespace-cdp sshd[18499]: Invalid user nexus from 203.25.211.164 port 35116
Oct  1 05:42:15 nativespace-cdp sshd[18499]: input_userauth_request: invalid user nexus [preauth]
Oct  1 05:42:15 nativespace-cdp sshd[18499]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:42:15 nativespace-cdp sshd[18499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.25.211.164
Oct  1 05:42:17 nativespace-cdp sshd[18499]: Failed password for invalid user nexus from 203.25.211.164 port 35116 ssh2
Oct  1 05:42:17 nativespace-cdp sshd[18499]: Received disconnect from 203.25.211.164 port 35116:11: Bye Bye [preauth]
Oct  1 05:42:17 nativespace-cdp sshd[18499]: Disconnected from 203.25.211.164 port 35116 [preauth]
Oct  1 05:42:27 nativespace-cdp sshd[18566]: Invalid user support from 78.51.129.113 port 49956
Oct  1 05:42:27 nativespace-cdp sshd[18566]: input_userauth_request: invalid user support [preauth]
Oct  1 05:42:27 nativespace-cdp sshd[18566]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:42:27 nativespace-cdp sshd[18566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:42:27 nativespace-cdp sshd[18562]: Invalid user ubuntu from 129.222.203.89 port 27889
Oct  1 05:42:27 nativespace-cdp sshd[18562]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:42:27 nativespace-cdp sshd[18562]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:42:27 nativespace-cdp sshd[18562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:42:29 nativespace-cdp sshd[18566]: Failed password for invalid user support from 78.51.129.113 port 49956 ssh2
Oct  1 05:42:29 nativespace-cdp sshd[18562]: Failed password for invalid user ubuntu from 129.222.203.89 port 27889 ssh2
Oct  1 05:42:29 nativespace-cdp sshd[18566]: Received disconnect from 78.51.129.113 port 49956:11: Bye Bye [preauth]
Oct  1 05:42:29 nativespace-cdp sshd[18566]: Disconnected from 78.51.129.113 port 49956 [preauth]
Oct  1 05:42:30 nativespace-cdp sshd[18562]: Received disconnect from 129.222.203.89 port 27889:11: Bye Bye [preauth]
Oct  1 05:42:30 nativespace-cdp sshd[18562]: Disconnected from 129.222.203.89 port 27889 [preauth]
Oct  1 05:42:35 nativespace-cdp sshd[18584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133  user=root
Oct  1 05:42:35 nativespace-cdp sshd[18584]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:42:38 nativespace-cdp sshd[18584]: Failed password for root from 64.227.133.133 port 35154 ssh2
Oct  1 05:42:41 nativespace-cdp sshd[18584]: Received disconnect from 64.227.133.133 port 35154:11: Bye Bye [preauth]
Oct  1 05:42:41 nativespace-cdp sshd[18584]: Disconnected from 64.227.133.133 port 35154 [preauth]
Oct  1 05:42:46 nativespace-cdp sshd[18605]: Invalid user ubuntu from 36.133.57.132 port 46806
Oct  1 05:42:46 nativespace-cdp sshd[18605]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:42:46 nativespace-cdp sshd[18605]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:42:46 nativespace-cdp sshd[18605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:42:48 nativespace-cdp sshd[18605]: Failed password for invalid user ubuntu from 36.133.57.132 port 46806 ssh2
Oct  1 05:42:48 nativespace-cdp sshd[18605]: Received disconnect from 36.133.57.132 port 46806:11: Bye Bye [preauth]
Oct  1 05:42:48 nativespace-cdp sshd[18605]: Disconnected from 36.133.57.132 port 46806 [preauth]
Oct  1 05:42:56 nativespace-cdp sshd[18627]: Invalid user abhishek from 68.183.142.21 port 39090
Oct  1 05:42:56 nativespace-cdp sshd[18627]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 05:42:56 nativespace-cdp sshd[18627]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:42:56 nativespace-cdp sshd[18627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 05:42:58 nativespace-cdp sshd[18627]: Failed password for invalid user abhishek from 68.183.142.21 port 39090 ssh2
Oct  1 05:42:58 nativespace-cdp sshd[18627]: Received disconnect from 68.183.142.21 port 39090:11: Bye Bye [preauth]
Oct  1 05:42:58 nativespace-cdp sshd[18627]: Disconnected from 68.183.142.21 port 39090 [preauth]
Oct  1 05:43:06 nativespace-cdp sshd[18672]: Invalid user user from 78.51.129.113 port 55820
Oct  1 05:43:06 nativespace-cdp sshd[18672]: input_userauth_request: invalid user user [preauth]
Oct  1 05:43:06 nativespace-cdp sshd[18672]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:43:06 nativespace-cdp sshd[18672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:43:08 nativespace-cdp sshd[18672]: Failed password for invalid user user from 78.51.129.113 port 55820 ssh2
Oct  1 05:43:08 nativespace-cdp sshd[18672]: Received disconnect from 78.51.129.113 port 55820:11: Bye Bye [preauth]
Oct  1 05:43:08 nativespace-cdp sshd[18672]: Disconnected from 78.51.129.113 port 55820 [preauth]
Oct  1 05:43:19 nativespace-cdp sshd[18706]: Invalid user test from 129.222.203.89 port 11066
Oct  1 05:43:19 nativespace-cdp sshd[18706]: input_userauth_request: invalid user test [preauth]
Oct  1 05:43:19 nativespace-cdp sshd[18706]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:43:19 nativespace-cdp sshd[18706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:43:21 nativespace-cdp sshd[18706]: Failed password for invalid user test from 129.222.203.89 port 11066 ssh2
Oct  1 05:43:23 nativespace-cdp sshd[18706]: Received disconnect from 129.222.203.89 port 11066:11: Bye Bye [preauth]
Oct  1 05:43:23 nativespace-cdp sshd[18706]: Disconnected from 129.222.203.89 port 11066 [preauth]
Oct  1 05:43:24 nativespace-cdp sshd[18713]: Invalid user steam from 36.133.57.132 port 54990
Oct  1 05:43:24 nativespace-cdp sshd[18713]: input_userauth_request: invalid user steam [preauth]
Oct  1 05:43:24 nativespace-cdp sshd[18713]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:43:24 nativespace-cdp sshd[18713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:43:25 nativespace-cdp sshd[18713]: Failed password for invalid user steam from 36.133.57.132 port 54990 ssh2
Oct  1 05:43:26 nativespace-cdp sshd[18713]: Received disconnect from 36.133.57.132 port 54990:11: Bye Bye [preauth]
Oct  1 05:43:26 nativespace-cdp sshd[18713]: Disconnected from 36.133.57.132 port 54990 [preauth]
Oct  1 05:43:28 nativespace-cdp sshd[18729]: Invalid user ubuntu from 64.227.133.133 port 35966
Oct  1 05:43:28 nativespace-cdp sshd[18729]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:43:28 nativespace-cdp sshd[18729]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:43:28 nativespace-cdp sshd[18729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:43:30 nativespace-cdp sshd[18729]: Failed password for invalid user ubuntu from 64.227.133.133 port 35966 ssh2
Oct  1 05:43:31 nativespace-cdp sshd[18729]: Received disconnect from 64.227.133.133 port 35966:11: Bye Bye [preauth]
Oct  1 05:43:31 nativespace-cdp sshd[18729]: Disconnected from 64.227.133.133 port 35966 [preauth]
Oct  1 05:43:44 nativespace-cdp sshd[18777]: Invalid user abhishek from 78.51.129.113 port 35554
Oct  1 05:43:44 nativespace-cdp sshd[18777]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 05:43:44 nativespace-cdp sshd[18777]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:43:44 nativespace-cdp sshd[18777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:43:47 nativespace-cdp sshd[18777]: Failed password for invalid user abhishek from 78.51.129.113 port 35554 ssh2
Oct  1 05:43:49 nativespace-cdp sshd[18777]: Received disconnect from 78.51.129.113 port 35554:11: Bye Bye [preauth]
Oct  1 05:43:49 nativespace-cdp sshd[18777]: Disconnected from 78.51.129.113 port 35554 [preauth]
Oct  1 05:44:10 nativespace-cdp sshd[18841]: Invalid user test_user from 129.222.203.89 port 40746
Oct  1 05:44:10 nativespace-cdp sshd[18841]: input_userauth_request: invalid user test_user [preauth]
Oct  1 05:44:10 nativespace-cdp sshd[18841]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:44:10 nativespace-cdp sshd[18841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:44:12 nativespace-cdp sshd[18841]: Failed password for invalid user test_user from 129.222.203.89 port 40746 ssh2
Oct  1 05:44:16 nativespace-cdp sshd[18841]: Received disconnect from 129.222.203.89 port 40746:11: Bye Bye [preauth]
Oct  1 05:44:16 nativespace-cdp sshd[18841]: Disconnected from 129.222.203.89 port 40746 [preauth]
Oct  1 05:44:22 nativespace-cdp sshd[18861]: Invalid user sysadmin from 78.51.129.113 port 59534
Oct  1 05:44:22 nativespace-cdp sshd[18861]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 05:44:22 nativespace-cdp sshd[18861]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:44:22 nativespace-cdp sshd[18861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:44:24 nativespace-cdp sshd[18861]: Failed password for invalid user sysadmin from 78.51.129.113 port 59534 ssh2
Oct  1 05:44:27 nativespace-cdp sshd[18866]: Invalid user tuan from 64.227.133.133 port 41814
Oct  1 05:44:27 nativespace-cdp sshd[18866]: input_userauth_request: invalid user tuan [preauth]
Oct  1 05:44:27 nativespace-cdp sshd[18866]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:44:27 nativespace-cdp sshd[18866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:44:28 nativespace-cdp sshd[18861]: Received disconnect from 78.51.129.113 port 59534:11: Bye Bye [preauth]
Oct  1 05:44:28 nativespace-cdp sshd[18861]: Disconnected from 78.51.129.113 port 59534 [preauth]
Oct  1 05:44:29 nativespace-cdp sshd[18866]: Failed password for invalid user tuan from 64.227.133.133 port 41814 ssh2
Oct  1 05:44:29 nativespace-cdp sshd[18866]: Received disconnect from 64.227.133.133 port 41814:11: Bye Bye [preauth]
Oct  1 05:44:29 nativespace-cdp sshd[18866]: Disconnected from 64.227.133.133 port 41814 [preauth]
Oct  1 05:44:59 nativespace-cdp sshd[18954]: Invalid user test from 78.51.129.113 port 38938
Oct  1 05:44:59 nativespace-cdp sshd[18954]: input_userauth_request: invalid user test [preauth]
Oct  1 05:44:59 nativespace-cdp sshd[18954]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:44:59 nativespace-cdp sshd[18954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:45:01 nativespace-cdp sshd[18954]: Failed password for invalid user test from 78.51.129.113 port 38938 ssh2
Oct  1 05:45:01 nativespace-cdp sshd[18954]: Received disconnect from 78.51.129.113 port 38938:11: Bye Bye [preauth]
Oct  1 05:45:01 nativespace-cdp sshd[18954]: Disconnected from 78.51.129.113 port 38938 [preauth]
Oct  1 05:45:02 nativespace-cdp sshd[18960]: Invalid user username from 129.222.203.89 port 6869
Oct  1 05:45:02 nativespace-cdp sshd[18960]: input_userauth_request: invalid user username [preauth]
Oct  1 05:45:02 nativespace-cdp sshd[18960]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:45:02 nativespace-cdp sshd[18960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:45:04 nativespace-cdp sshd[18960]: Failed password for invalid user username from 129.222.203.89 port 6869 ssh2
Oct  1 05:45:08 nativespace-cdp sshd[18960]: Received disconnect from 129.222.203.89 port 6869:11: Bye Bye [preauth]
Oct  1 05:45:08 nativespace-cdp sshd[18960]: Disconnected from 129.222.203.89 port 6869 [preauth]
Oct  1 05:45:10 nativespace-cdp sshd[18947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132  user=root
Oct  1 05:45:10 nativespace-cdp sshd[18947]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:45:12 nativespace-cdp sshd[18947]: Failed password for root from 36.133.57.132 port 43122 ssh2
Oct  1 05:45:12 nativespace-cdp sshd[18947]: Received disconnect from 36.133.57.132 port 43122:11: Bye Bye [preauth]
Oct  1 05:45:12 nativespace-cdp sshd[18947]: Disconnected from 36.133.57.132 port 43122 [preauth]
Oct  1 05:45:13 nativespace-cdp sshd[19118]: Invalid user test01 from 64.227.133.133 port 48820
Oct  1 05:45:13 nativespace-cdp sshd[19118]: input_userauth_request: invalid user test01 [preauth]
Oct  1 05:45:13 nativespace-cdp sshd[19118]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:45:13 nativespace-cdp sshd[19118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:45:15 nativespace-cdp sshd[19118]: Failed password for invalid user test01 from 64.227.133.133 port 48820 ssh2
Oct  1 05:45:18 nativespace-cdp sshd[19118]: Received disconnect from 64.227.133.133 port 48820:11: Bye Bye [preauth]
Oct  1 05:45:18 nativespace-cdp sshd[19118]: Disconnected from 64.227.133.133 port 48820 [preauth]
Oct  1 05:45:37 nativespace-cdp sshd[19212]: Invalid user ubuntu from 78.51.129.113 port 44438
Oct  1 05:45:37 nativespace-cdp sshd[19212]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:45:37 nativespace-cdp sshd[19212]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:45:37 nativespace-cdp sshd[19212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:45:39 nativespace-cdp sshd[19212]: Failed password for invalid user ubuntu from 78.51.129.113 port 44438 ssh2
Oct  1 05:45:39 nativespace-cdp sshd[19212]: Received disconnect from 78.51.129.113 port 44438:11: Bye Bye [preauth]
Oct  1 05:45:39 nativespace-cdp sshd[19212]: Disconnected from 78.51.129.113 port 44438 [preauth]
Oct  1 05:45:47 nativespace-cdp sshd[19301]: Invalid user student8 from 36.133.57.132 port 51312
Oct  1 05:45:47 nativespace-cdp sshd[19301]: input_userauth_request: invalid user student8 [preauth]
Oct  1 05:45:47 nativespace-cdp sshd[19301]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:45:47 nativespace-cdp sshd[19301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:45:49 nativespace-cdp sshd[19301]: Failed password for invalid user student8 from 36.133.57.132 port 51312 ssh2
Oct  1 05:45:49 nativespace-cdp sshd[19301]: Received disconnect from 36.133.57.132 port 51312:11: Bye Bye [preauth]
Oct  1 05:45:49 nativespace-cdp sshd[19301]: Disconnected from 36.133.57.132 port 51312 [preauth]
Oct  1 05:45:54 nativespace-cdp sshd[19324]: Invalid user student8 from 129.222.203.89 port 12946
Oct  1 05:45:54 nativespace-cdp sshd[19324]: input_userauth_request: invalid user student8 [preauth]
Oct  1 05:45:54 nativespace-cdp sshd[19324]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:45:54 nativespace-cdp sshd[19324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:45:55 nativespace-cdp sshd[19324]: Failed password for invalid user student8 from 129.222.203.89 port 12946 ssh2
Oct  1 05:45:55 nativespace-cdp sshd[19324]: Received disconnect from 129.222.203.89 port 12946:11: Bye Bye [preauth]
Oct  1 05:45:55 nativespace-cdp sshd[19324]: Disconnected from 129.222.203.89 port 12946 [preauth]
Oct  1 05:46:05 nativespace-cdp sshd[19405]: Invalid user test from 64.227.133.133 port 40940
Oct  1 05:46:05 nativespace-cdp sshd[19405]: input_userauth_request: invalid user test [preauth]
Oct  1 05:46:05 nativespace-cdp sshd[19405]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:46:05 nativespace-cdp sshd[19405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:46:06 nativespace-cdp sshd[19405]: Failed password for invalid user test from 64.227.133.133 port 40940 ssh2
Oct  1 05:46:09 nativespace-cdp sshd[19405]: Received disconnect from 64.227.133.133 port 40940:11: Bye Bye [preauth]
Oct  1 05:46:09 nativespace-cdp sshd[19405]: Disconnected from 64.227.133.133 port 40940 [preauth]
Oct  1 05:46:15 nativespace-cdp sshd[19427]: Invalid user tomcat from 78.51.129.113 port 53354
Oct  1 05:46:15 nativespace-cdp sshd[19427]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 05:46:15 nativespace-cdp sshd[19427]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:46:15 nativespace-cdp sshd[19427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:46:17 nativespace-cdp sshd[19427]: Failed password for invalid user tomcat from 78.51.129.113 port 53354 ssh2
Oct  1 05:46:17 nativespace-cdp sshd[19427]: Received disconnect from 78.51.129.113 port 53354:11: Bye Bye [preauth]
Oct  1 05:46:17 nativespace-cdp sshd[19427]: Disconnected from 78.51.129.113 port 53354 [preauth]
Oct  1 05:46:28 nativespace-cdp sshd[19447]: Invalid user test from 36.133.57.132 port 59498
Oct  1 05:46:28 nativespace-cdp sshd[19447]: input_userauth_request: invalid user test [preauth]
Oct  1 05:46:28 nativespace-cdp sshd[19447]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:46:28 nativespace-cdp sshd[19447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:46:30 nativespace-cdp sshd[19447]: Failed password for invalid user test from 36.133.57.132 port 59498 ssh2
Oct  1 05:46:33 nativespace-cdp sshd[19466]: Connection closed by 159.100.136.21 port 44104 [preauth]
Oct  1 05:46:36 nativespace-cdp sshd[19447]: Received disconnect from 36.133.57.132 port 59498:11: Bye Bye [preauth]
Oct  1 05:46:36 nativespace-cdp sshd[19447]: Disconnected from 36.133.57.132 port 59498 [preauth]
Oct  1 05:46:46 nativespace-cdp sshd[19500]: Invalid user acer from 68.183.142.21 port 42104
Oct  1 05:46:46 nativespace-cdp sshd[19500]: input_userauth_request: invalid user acer [preauth]
Oct  1 05:46:46 nativespace-cdp sshd[19500]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:46:46 nativespace-cdp sshd[19500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 05:46:46 nativespace-cdp sshd[19501]: Invalid user user from 129.222.203.89 port 19955
Oct  1 05:46:46 nativespace-cdp sshd[19501]: input_userauth_request: invalid user user [preauth]
Oct  1 05:46:46 nativespace-cdp sshd[19501]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:46:46 nativespace-cdp sshd[19501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:46:48 nativespace-cdp sshd[19500]: Failed password for invalid user acer from 68.183.142.21 port 42104 ssh2
Oct  1 05:46:48 nativespace-cdp sshd[19500]: Received disconnect from 68.183.142.21 port 42104:11: Bye Bye [preauth]
Oct  1 05:46:48 nativespace-cdp sshd[19500]: Disconnected from 68.183.142.21 port 42104 [preauth]
Oct  1 05:46:48 nativespace-cdp sshd[19501]: Failed password for invalid user user from 129.222.203.89 port 19955 ssh2
Oct  1 05:46:48 nativespace-cdp sshd[19501]: Received disconnect from 129.222.203.89 port 19955:11: Bye Bye [preauth]
Oct  1 05:46:48 nativespace-cdp sshd[19501]: Disconnected from 129.222.203.89 port 19955 [preauth]
Oct  1 05:46:57 nativespace-cdp sshd[19535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113  user=root
Oct  1 05:46:57 nativespace-cdp sshd[19535]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:46:57 nativespace-cdp sshd[19532]: Invalid user ubuntu from 64.227.133.133 port 44702
Oct  1 05:46:57 nativespace-cdp sshd[19532]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:46:57 nativespace-cdp sshd[19532]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:46:57 nativespace-cdp sshd[19532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:46:59 nativespace-cdp sshd[19535]: Failed password for root from 78.51.129.113 port 48784 ssh2
Oct  1 05:46:59 nativespace-cdp sshd[19535]: Received disconnect from 78.51.129.113 port 48784:11: Bye Bye [preauth]
Oct  1 05:46:59 nativespace-cdp sshd[19535]: Disconnected from 78.51.129.113 port 48784 [preauth]
Oct  1 05:46:59 nativespace-cdp sshd[19532]: Failed password for invalid user ubuntu from 64.227.133.133 port 44702 ssh2
Oct  1 05:46:59 nativespace-cdp sshd[19532]: Received disconnect from 64.227.133.133 port 44702:11: Bye Bye [preauth]
Oct  1 05:46:59 nativespace-cdp sshd[19532]: Disconnected from 64.227.133.133 port 44702 [preauth]
Oct  1 05:47:12 nativespace-cdp sshd[19578]: Invalid user deploy from 36.133.57.132 port 39434
Oct  1 05:47:12 nativespace-cdp sshd[19578]: input_userauth_request: invalid user deploy [preauth]
Oct  1 05:47:12 nativespace-cdp sshd[19578]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:47:12 nativespace-cdp sshd[19578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:47:14 nativespace-cdp sshd[19578]: Failed password for invalid user deploy from 36.133.57.132 port 39434 ssh2
Oct  1 05:47:15 nativespace-cdp sshd[19578]: Received disconnect from 36.133.57.132 port 39434:11: Bye Bye [preauth]
Oct  1 05:47:15 nativespace-cdp sshd[19578]: Disconnected from 36.133.57.132 port 39434 [preauth]
Oct  1 05:47:33 nativespace-cdp sshd[19634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113  user=root
Oct  1 05:47:33 nativespace-cdp sshd[19634]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:47:35 nativespace-cdp sshd[19634]: Failed password for root from 78.51.129.113 port 36428 ssh2
Oct  1 05:47:35 nativespace-cdp sshd[19634]: Received disconnect from 78.51.129.113 port 36428:11: Bye Bye [preauth]
Oct  1 05:47:35 nativespace-cdp sshd[19634]: Disconnected from 78.51.129.113 port 36428 [preauth]
Oct  1 05:47:36 nativespace-cdp sshd[19640]: Invalid user test from 129.222.203.89 port 56956
Oct  1 05:47:36 nativespace-cdp sshd[19640]: input_userauth_request: invalid user test [preauth]
Oct  1 05:47:36 nativespace-cdp sshd[19640]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:47:36 nativespace-cdp sshd[19640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:47:38 nativespace-cdp sshd[19640]: Failed password for invalid user test from 129.222.203.89 port 56956 ssh2
Oct  1 05:47:38 nativespace-cdp sshd[19640]: Received disconnect from 129.222.203.89 port 56956:11: Bye Bye [preauth]
Oct  1 05:47:38 nativespace-cdp sshd[19640]: Disconnected from 129.222.203.89 port 56956 [preauth]
Oct  1 05:47:56 nativespace-cdp sshd[19674]: Connection closed by 36.133.57.132 port 47622 [preauth]
Oct  1 05:48:13 nativespace-cdp sshd[19746]: Invalid user test from 78.51.129.113 port 52148
Oct  1 05:48:13 nativespace-cdp sshd[19746]: input_userauth_request: invalid user test [preauth]
Oct  1 05:48:13 nativespace-cdp sshd[19746]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:48:13 nativespace-cdp sshd[19746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:48:15 nativespace-cdp sshd[19746]: Failed password for invalid user test from 78.51.129.113 port 52148 ssh2
Oct  1 05:48:15 nativespace-cdp sshd[19746]: Received disconnect from 78.51.129.113 port 52148:11: Bye Bye [preauth]
Oct  1 05:48:15 nativespace-cdp sshd[19746]: Disconnected from 78.51.129.113 port 52148 [preauth]
Oct  1 05:48:31 nativespace-cdp sshd[19783]: Invalid user test from 129.222.203.89 port 62903
Oct  1 05:48:31 nativespace-cdp sshd[19783]: input_userauth_request: invalid user test [preauth]
Oct  1 05:48:31 nativespace-cdp sshd[19783]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:48:31 nativespace-cdp sshd[19783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:48:32 nativespace-cdp sshd[19783]: Failed password for invalid user test from 129.222.203.89 port 62903 ssh2
Oct  1 05:48:33 nativespace-cdp sshd[19783]: Received disconnect from 129.222.203.89 port 62903:11: Bye Bye [preauth]
Oct  1 05:48:33 nativespace-cdp sshd[19783]: Disconnected from 129.222.203.89 port 62903 [preauth]
Oct  1 05:48:42 nativespace-cdp sshd[19813]: Invalid user testuser from 36.133.57.132 port 55816
Oct  1 05:48:42 nativespace-cdp sshd[19813]: input_userauth_request: invalid user testuser [preauth]
Oct  1 05:48:42 nativespace-cdp sshd[19813]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:48:42 nativespace-cdp sshd[19813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:48:44 nativespace-cdp sshd[19813]: Failed password for invalid user testuser from 36.133.57.132 port 55816 ssh2
Oct  1 05:48:44 nativespace-cdp sshd[19813]: Received disconnect from 36.133.57.132 port 55816:11: Bye Bye [preauth]
Oct  1 05:48:44 nativespace-cdp sshd[19813]: Disconnected from 36.133.57.132 port 55816 [preauth]
Oct  1 05:48:49 nativespace-cdp sshd[19847]: Invalid user testuser from 64.227.133.133 port 37610
Oct  1 05:48:49 nativespace-cdp sshd[19847]: input_userauth_request: invalid user testuser [preauth]
Oct  1 05:48:49 nativespace-cdp sshd[19847]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:48:49 nativespace-cdp sshd[19847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:48:51 nativespace-cdp sshd[19847]: Failed password for invalid user testuser from 64.227.133.133 port 37610 ssh2
Oct  1 05:48:52 nativespace-cdp sshd[19847]: Received disconnect from 64.227.133.133 port 37610:11: Bye Bye [preauth]
Oct  1 05:48:52 nativespace-cdp sshd[19847]: Disconnected from 64.227.133.133 port 37610 [preauth]
Oct  1 05:48:55 nativespace-cdp sshd[19860]: Invalid user testuser from 78.51.129.113 port 56746
Oct  1 05:48:55 nativespace-cdp sshd[19860]: input_userauth_request: invalid user testuser [preauth]
Oct  1 05:48:55 nativespace-cdp sshd[19860]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:48:55 nativespace-cdp sshd[19860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:48:58 nativespace-cdp sshd[19860]: Failed password for invalid user testuser from 78.51.129.113 port 56746 ssh2
Oct  1 05:48:58 nativespace-cdp sshd[19860]: Received disconnect from 78.51.129.113 port 56746:11: Bye Bye [preauth]
Oct  1 05:48:58 nativespace-cdp sshd[19860]: Disconnected from 78.51.129.113 port 56746 [preauth]
Oct  1 05:49:22 nativespace-cdp sshd[19925]: Invalid user deploy from 129.222.203.89 port 11058
Oct  1 05:49:22 nativespace-cdp sshd[19925]: input_userauth_request: invalid user deploy [preauth]
Oct  1 05:49:22 nativespace-cdp sshd[19925]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:49:22 nativespace-cdp sshd[19925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:49:24 nativespace-cdp sshd[19925]: Failed password for invalid user deploy from 129.222.203.89 port 11058 ssh2
Oct  1 05:49:24 nativespace-cdp sshd[19925]: Received disconnect from 129.222.203.89 port 11058:11: Bye Bye [preauth]
Oct  1 05:49:24 nativespace-cdp sshd[19925]: Disconnected from 129.222.203.89 port 11058 [preauth]
Oct  1 05:49:34 nativespace-cdp sshd[19959]: Invalid user tuan from 78.51.129.113 port 35378
Oct  1 05:49:34 nativespace-cdp sshd[19959]: input_userauth_request: invalid user tuan [preauth]
Oct  1 05:49:34 nativespace-cdp sshd[19959]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:49:34 nativespace-cdp sshd[19959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:49:36 nativespace-cdp sshd[19959]: Failed password for invalid user tuan from 78.51.129.113 port 35378 ssh2
Oct  1 05:49:44 nativespace-cdp sshd[19970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133  user=root
Oct  1 05:49:44 nativespace-cdp sshd[19970]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:49:45 nativespace-cdp sshd[19959]: Received disconnect from 78.51.129.113 port 35378:11: Bye Bye [preauth]
Oct  1 05:49:45 nativespace-cdp sshd[19959]: Disconnected from 78.51.129.113 port 35378 [preauth]
Oct  1 05:49:47 nativespace-cdp sshd[19970]: Failed password for root from 64.227.133.133 port 49272 ssh2
Oct  1 05:49:50 nativespace-cdp sshd[19970]: Received disconnect from 64.227.133.133 port 49272:11: Bye Bye [preauth]
Oct  1 05:49:50 nativespace-cdp sshd[19970]: Disconnected from 64.227.133.133 port 49272 [preauth]
Oct  1 05:50:14 nativespace-cdp sshd[20390]: Invalid user thomas from 129.222.203.89 port 13144
Oct  1 05:50:14 nativespace-cdp sshd[20390]: input_userauth_request: invalid user thomas [preauth]
Oct  1 05:50:14 nativespace-cdp sshd[20390]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:50:14 nativespace-cdp sshd[20390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:50:16 nativespace-cdp sshd[20390]: Failed password for invalid user thomas from 129.222.203.89 port 13144 ssh2
Oct  1 05:50:16 nativespace-cdp sshd[20390]: Received disconnect from 129.222.203.89 port 13144:11: Bye Bye [preauth]
Oct  1 05:50:16 nativespace-cdp sshd[20390]: Disconnected from 129.222.203.89 port 13144 [preauth]
Oct  1 05:50:17 nativespace-cdp sshd[20405]: Invalid user acer from 78.51.129.113 port 36798
Oct  1 05:50:17 nativespace-cdp sshd[20405]: input_userauth_request: invalid user acer [preauth]
Oct  1 05:50:17 nativespace-cdp sshd[20405]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:50:17 nativespace-cdp sshd[20405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:50:19 nativespace-cdp sshd[20405]: Failed password for invalid user acer from 78.51.129.113 port 36798 ssh2
Oct  1 05:50:28 nativespace-cdp sshd[20405]: Received disconnect from 78.51.129.113 port 36798:11: Bye Bye [preauth]
Oct  1 05:50:28 nativespace-cdp sshd[20405]: Disconnected from 78.51.129.113 port 36798 [preauth]
Oct  1 05:50:34 nativespace-cdp sshd[20450]: Invalid user abhishek from 64.227.133.133 port 49472
Oct  1 05:50:34 nativespace-cdp sshd[20450]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 05:50:34 nativespace-cdp sshd[20450]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:50:34 nativespace-cdp sshd[20450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:50:36 nativespace-cdp sshd[20450]: Failed password for invalid user abhishek from 64.227.133.133 port 49472 ssh2
Oct  1 05:50:36 nativespace-cdp sshd[20450]: Received disconnect from 64.227.133.133 port 49472:11: Bye Bye [preauth]
Oct  1 05:50:36 nativespace-cdp sshd[20450]: Disconnected from 64.227.133.133 port 49472 [preauth]
Oct  1 05:50:56 nativespace-cdp sshd[20605]: Invalid user ubuntu from 78.51.129.113 port 59648
Oct  1 05:50:56 nativespace-cdp sshd[20605]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:50:56 nativespace-cdp sshd[20605]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:50:56 nativespace-cdp sshd[20605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:50:58 nativespace-cdp sshd[20605]: Failed password for invalid user ubuntu from 78.51.129.113 port 59648 ssh2
Oct  1 05:50:58 nativespace-cdp sshd[20605]: Received disconnect from 78.51.129.113 port 59648:11: Bye Bye [preauth]
Oct  1 05:50:58 nativespace-cdp sshd[20605]: Disconnected from 78.51.129.113 port 59648 [preauth]
Oct  1 05:51:11 nativespace-cdp sshd[20686]: Connection closed by 129.222.203.89 port 48204 [preauth]
Oct  1 05:51:12 nativespace-cdp sshd[20684]: Connection closed by 36.133.57.132 port 52146 [preauth]
Oct  1 05:51:12 nativespace-cdp sshd[20696]: Invalid user abhishek from 203.25.211.164 port 35634
Oct  1 05:51:12 nativespace-cdp sshd[20696]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 05:51:12 nativespace-cdp sshd[20696]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:51:12 nativespace-cdp sshd[20696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.25.211.164
Oct  1 05:51:14 nativespace-cdp sshd[20696]: Failed password for invalid user abhishek from 203.25.211.164 port 35634 ssh2
Oct  1 05:51:14 nativespace-cdp sshd[20696]: Received disconnect from 203.25.211.164 port 35634:11: Bye Bye [preauth]
Oct  1 05:51:14 nativespace-cdp sshd[20696]: Disconnected from 203.25.211.164 port 35634 [preauth]
Oct  1 05:51:28 nativespace-cdp sshd[20730]: Invalid user ubuntu from 64.227.133.133 port 51774
Oct  1 05:51:28 nativespace-cdp sshd[20730]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:51:28 nativespace-cdp sshd[20730]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:51:28 nativespace-cdp sshd[20730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:51:29 nativespace-cdp sshd[20730]: Failed password for invalid user ubuntu from 64.227.133.133 port 51774 ssh2
Oct  1 05:51:29 nativespace-cdp sshd[20730]: Received disconnect from 64.227.133.133 port 51774:11: Bye Bye [preauth]
Oct  1 05:51:29 nativespace-cdp sshd[20730]: Disconnected from 64.227.133.133 port 51774 [preauth]
Oct  1 05:51:34 nativespace-cdp sshd[20757]: Connection closed by 159.100.136.21 port 53292 [preauth]
Oct  1 05:51:35 nativespace-cdp sshd[20760]: Invalid user ubuntu from 78.51.129.113 port 50102
Oct  1 05:51:35 nativespace-cdp sshd[20760]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:51:35 nativespace-cdp sshd[20760]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:51:35 nativespace-cdp sshd[20760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:51:36 nativespace-cdp sshd[20760]: Failed password for invalid user ubuntu from 78.51.129.113 port 50102 ssh2
Oct  1 05:51:36 nativespace-cdp sshd[20760]: Received disconnect from 78.51.129.113 port 50102:11: Bye Bye [preauth]
Oct  1 05:51:36 nativespace-cdp sshd[20760]: Disconnected from 78.51.129.113 port 50102 [preauth]
Oct  1 05:51:51 nativespace-cdp sshd[20798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132  user=root
Oct  1 05:51:51 nativespace-cdp sshd[20798]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:51:53 nativespace-cdp sshd[20798]: Failed password for root from 36.133.57.132 port 60336 ssh2
Oct  1 05:51:57 nativespace-cdp sshd[20798]: Received disconnect from 36.133.57.132 port 60336:11: Bye Bye [preauth]
Oct  1 05:51:57 nativespace-cdp sshd[20798]: Disconnected from 36.133.57.132 port 60336 [preauth]
Oct  1 05:51:57 nativespace-cdp sshd[20813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89  user=root
Oct  1 05:51:57 nativespace-cdp sshd[20813]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:51:59 nativespace-cdp sshd[20813]: Failed password for root from 129.222.203.89 port 42892 ssh2
Oct  1 05:51:59 nativespace-cdp sshd[20813]: Received disconnect from 129.222.203.89 port 42892:11: Bye Bye [preauth]
Oct  1 05:51:59 nativespace-cdp sshd[20813]: Disconnected from 129.222.203.89 port 42892 [preauth]
Oct  1 05:52:15 nativespace-cdp sshd[20863]: Invalid user nexus from 78.51.129.113 port 46268
Oct  1 05:52:15 nativespace-cdp sshd[20863]: input_userauth_request: invalid user nexus [preauth]
Oct  1 05:52:15 nativespace-cdp sshd[20863]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:52:15 nativespace-cdp sshd[20863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:52:18 nativespace-cdp sshd[20863]: Failed password for invalid user nexus from 78.51.129.113 port 46268 ssh2
Oct  1 05:52:18 nativespace-cdp sshd[20863]: Received disconnect from 78.51.129.113 port 46268:11: Bye Bye [preauth]
Oct  1 05:52:18 nativespace-cdp sshd[20863]: Disconnected from 78.51.129.113 port 46268 [preauth]
Oct  1 05:52:20 nativespace-cdp sshd[20874]: Invalid user ubuntu from 64.227.133.133 port 56888
Oct  1 05:52:20 nativespace-cdp sshd[20874]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:52:20 nativespace-cdp sshd[20874]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:52:20 nativespace-cdp sshd[20874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:52:23 nativespace-cdp sshd[20874]: Failed password for invalid user ubuntu from 64.227.133.133 port 56888 ssh2
Oct  1 05:52:23 nativespace-cdp sshd[20874]: Received disconnect from 64.227.133.133 port 56888:11: Bye Bye [preauth]
Oct  1 05:52:23 nativespace-cdp sshd[20874]: Disconnected from 64.227.133.133 port 56888 [preauth]
Oct  1 05:52:38 nativespace-cdp sshd[20908]: Invalid user usuario from 36.133.57.132 port 40274
Oct  1 05:52:38 nativespace-cdp sshd[20908]: input_userauth_request: invalid user usuario [preauth]
Oct  1 05:52:38 nativespace-cdp sshd[20908]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:52:38 nativespace-cdp sshd[20908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:52:40 nativespace-cdp sshd[20908]: Failed password for invalid user usuario from 36.133.57.132 port 40274 ssh2
Oct  1 05:52:42 nativespace-cdp sshd[20908]: Received disconnect from 36.133.57.132 port 40274:11: Bye Bye [preauth]
Oct  1 05:52:42 nativespace-cdp sshd[20908]: Disconnected from 36.133.57.132 port 40274 [preauth]
Oct  1 05:52:47 nativespace-cdp sshd[20939]: Invalid user ubuntu from 129.222.203.89 port 38124
Oct  1 05:52:47 nativespace-cdp sshd[20939]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:52:47 nativespace-cdp sshd[20939]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:52:47 nativespace-cdp sshd[20939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:52:49 nativespace-cdp sshd[20939]: Failed password for invalid user ubuntu from 129.222.203.89 port 38124 ssh2
Oct  1 05:52:49 nativespace-cdp sshd[20939]: Received disconnect from 129.222.203.89 port 38124:11: Bye Bye [preauth]
Oct  1 05:52:49 nativespace-cdp sshd[20939]: Disconnected from 129.222.203.89 port 38124 [preauth]
Oct  1 05:52:51 nativespace-cdp sshd[20968]: Invalid user test from 78.51.129.113 port 53386
Oct  1 05:52:51 nativespace-cdp sshd[20968]: input_userauth_request: invalid user test [preauth]
Oct  1 05:52:51 nativespace-cdp sshd[20968]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:52:51 nativespace-cdp sshd[20968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:52:53 nativespace-cdp sshd[20968]: Failed password for invalid user test from 78.51.129.113 port 53386 ssh2
Oct  1 05:52:58 nativespace-cdp sshd[20968]: Received disconnect from 78.51.129.113 port 53386:11: Bye Bye [preauth]
Oct  1 05:52:58 nativespace-cdp sshd[20968]: Disconnected from 78.51.129.113 port 53386 [preauth]
Oct  1 05:53:13 nativespace-cdp sshd[21022]: Invalid user test from 64.227.133.133 port 35092
Oct  1 05:53:13 nativespace-cdp sshd[21022]: input_userauth_request: invalid user test [preauth]
Oct  1 05:53:13 nativespace-cdp sshd[21022]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:53:13 nativespace-cdp sshd[21022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:53:15 nativespace-cdp sshd[21022]: Failed password for invalid user test from 64.227.133.133 port 35092 ssh2
Oct  1 05:53:18 nativespace-cdp sshd[21022]: Received disconnect from 64.227.133.133 port 35092:11: Bye Bye [preauth]
Oct  1 05:53:18 nativespace-cdp sshd[21022]: Disconnected from 64.227.133.133 port 35092 [preauth]
Oct  1 05:53:32 nativespace-cdp sshd[21073]: Invalid user support from 78.51.129.113 port 47226
Oct  1 05:53:32 nativespace-cdp sshd[21073]: input_userauth_request: invalid user support [preauth]
Oct  1 05:53:32 nativespace-cdp sshd[21073]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:53:32 nativespace-cdp sshd[21073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:53:32 nativespace-cdp sshd[21048]: Invalid user acer from 36.133.57.132 port 48468
Oct  1 05:53:32 nativespace-cdp sshd[21048]: input_userauth_request: invalid user acer [preauth]
Oct  1 05:53:32 nativespace-cdp sshd[21048]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:53:32 nativespace-cdp sshd[21048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:53:34 nativespace-cdp sshd[21073]: Failed password for invalid user support from 78.51.129.113 port 47226 ssh2
Oct  1 05:53:34 nativespace-cdp sshd[21073]: Received disconnect from 78.51.129.113 port 47226:11: Bye Bye [preauth]
Oct  1 05:53:34 nativespace-cdp sshd[21073]: Disconnected from 78.51.129.113 port 47226 [preauth]
Oct  1 05:53:34 nativespace-cdp sshd[21048]: Failed password for invalid user acer from 36.133.57.132 port 48468 ssh2
Oct  1 05:53:38 nativespace-cdp sshd[21048]: Received disconnect from 36.133.57.132 port 48468:11: Bye Bye [preauth]
Oct  1 05:53:38 nativespace-cdp sshd[21048]: Disconnected from 36.133.57.132 port 48468 [preauth]
Oct  1 05:53:42 nativespace-cdp sshd[21115]: Invalid user test from 129.222.203.89 port 23465
Oct  1 05:53:42 nativespace-cdp sshd[21115]: input_userauth_request: invalid user test [preauth]
Oct  1 05:53:42 nativespace-cdp sshd[21115]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:53:42 nativespace-cdp sshd[21115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:53:44 nativespace-cdp sshd[21115]: Failed password for invalid user test from 129.222.203.89 port 23465 ssh2
Oct  1 05:53:45 nativespace-cdp sshd[21115]: Received disconnect from 129.222.203.89 port 23465:11: Bye Bye [preauth]
Oct  1 05:53:45 nativespace-cdp sshd[21115]: Disconnected from 129.222.203.89 port 23465 [preauth]
Oct  1 05:53:56 nativespace-cdp sshd[21148]: Connection closed by 68.183.142.21 port 43128 [preauth]
Oct  1 05:54:07 nativespace-cdp sshd[21186]: Invalid user sopuser from 64.227.133.133 port 46014
Oct  1 05:54:07 nativespace-cdp sshd[21186]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 05:54:07 nativespace-cdp sshd[21186]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:54:07 nativespace-cdp sshd[21186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:54:09 nativespace-cdp sshd[21186]: Failed password for invalid user sopuser from 64.227.133.133 port 46014 ssh2
Oct  1 05:54:10 nativespace-cdp sshd[21186]: Received disconnect from 64.227.133.133 port 46014:11: Bye Bye [preauth]
Oct  1 05:54:10 nativespace-cdp sshd[21186]: Disconnected from 64.227.133.133 port 46014 [preauth]
Oct  1 05:54:15 nativespace-cdp sshd[21199]: Invalid user ubuntu from 78.51.129.113 port 50670
Oct  1 05:54:15 nativespace-cdp sshd[21199]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:54:15 nativespace-cdp sshd[21199]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:54:15 nativespace-cdp sshd[21199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:54:18 nativespace-cdp sshd[21199]: Failed password for invalid user ubuntu from 78.51.129.113 port 50670 ssh2
Oct  1 05:54:18 nativespace-cdp sshd[21199]: Received disconnect from 78.51.129.113 port 50670:11: Bye Bye [preauth]
Oct  1 05:54:18 nativespace-cdp sshd[21199]: Disconnected from 78.51.129.113 port 50670 [preauth]
Oct  1 05:54:18 nativespace-cdp sshd[21205]: Invalid user user from 36.133.57.132 port 56656
Oct  1 05:54:18 nativespace-cdp sshd[21205]: input_userauth_request: invalid user user [preauth]
Oct  1 05:54:18 nativespace-cdp sshd[21205]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:54:18 nativespace-cdp sshd[21205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:54:20 nativespace-cdp sshd[21205]: Failed password for invalid user user from 36.133.57.132 port 56656 ssh2
Oct  1 05:54:20 nativespace-cdp sshd[21205]: Received disconnect from 36.133.57.132 port 56656:11: Bye Bye [preauth]
Oct  1 05:54:20 nativespace-cdp sshd[21205]: Disconnected from 36.133.57.132 port 56656 [preauth]
Oct  1 05:54:54 nativespace-cdp sshd[21294]: Invalid user svn from 78.51.129.113 port 43786
Oct  1 05:54:54 nativespace-cdp sshd[21294]: input_userauth_request: invalid user svn [preauth]
Oct  1 05:54:54 nativespace-cdp sshd[21294]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:54:54 nativespace-cdp sshd[21294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:54:57 nativespace-cdp sshd[21294]: Failed password for invalid user svn from 78.51.129.113 port 43786 ssh2
Oct  1 05:54:57 nativespace-cdp sshd[21294]: Received disconnect from 78.51.129.113 port 43786:11: Bye Bye [preauth]
Oct  1 05:54:57 nativespace-cdp sshd[21294]: Disconnected from 78.51.129.113 port 43786 [preauth]
Oct  1 05:55:02 nativespace-cdp sshd[21308]: Invalid user test from 64.227.133.133 port 54616
Oct  1 05:55:02 nativespace-cdp sshd[21308]: input_userauth_request: invalid user test [preauth]
Oct  1 05:55:02 nativespace-cdp sshd[21308]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:55:02 nativespace-cdp sshd[21308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:55:04 nativespace-cdp sshd[21380]: Invalid user tuan from 36.133.57.132 port 36614
Oct  1 05:55:04 nativespace-cdp sshd[21380]: input_userauth_request: invalid user tuan [preauth]
Oct  1 05:55:04 nativespace-cdp sshd[21380]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:55:04 nativespace-cdp sshd[21380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:55:04 nativespace-cdp sshd[21308]: Failed password for invalid user test from 64.227.133.133 port 54616 ssh2
Oct  1 05:55:05 nativespace-cdp sshd[21308]: Received disconnect from 64.227.133.133 port 54616:11: Bye Bye [preauth]
Oct  1 05:55:05 nativespace-cdp sshd[21308]: Disconnected from 64.227.133.133 port 54616 [preauth]
Oct  1 05:55:06 nativespace-cdp sshd[21380]: Failed password for invalid user tuan from 36.133.57.132 port 36614 ssh2
Oct  1 05:55:06 nativespace-cdp sshd[21380]: Received disconnect from 36.133.57.132 port 36614:11: Bye Bye [preauth]
Oct  1 05:55:06 nativespace-cdp sshd[21380]: Disconnected from 36.133.57.132 port 36614 [preauth]
Oct  1 05:55:06 nativespace-cdp sshd[21418]: Invalid user sysadmin from 68.183.142.21 port 49506
Oct  1 05:55:06 nativespace-cdp sshd[21418]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 05:55:06 nativespace-cdp sshd[21418]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:55:06 nativespace-cdp sshd[21418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 05:55:08 nativespace-cdp sshd[21418]: Failed password for invalid user sysadmin from 68.183.142.21 port 49506 ssh2
Oct  1 05:55:13 nativespace-cdp sshd[21418]: Received disconnect from 68.183.142.21 port 49506:11: Bye Bye [preauth]
Oct  1 05:55:13 nativespace-cdp sshd[21418]: Disconnected from 68.183.142.21 port 49506 [preauth]
Oct  1 05:55:35 nativespace-cdp sshd[21529]: Invalid user tuan from 129.222.203.89 port 41256
Oct  1 05:55:35 nativespace-cdp sshd[21529]: input_userauth_request: invalid user tuan [preauth]
Oct  1 05:55:35 nativespace-cdp sshd[21529]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:55:35 nativespace-cdp sshd[21529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:55:35 nativespace-cdp sshd[21533]: Invalid user tg from 78.51.129.113 port 58912
Oct  1 05:55:35 nativespace-cdp sshd[21533]: input_userauth_request: invalid user tg [preauth]
Oct  1 05:55:35 nativespace-cdp sshd[21533]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:55:35 nativespace-cdp sshd[21533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:55:38 nativespace-cdp sshd[21529]: Failed password for invalid user tuan from 129.222.203.89 port 41256 ssh2
Oct  1 05:55:38 nativespace-cdp sshd[21533]: Failed password for invalid user tg from 78.51.129.113 port 58912 ssh2
Oct  1 05:55:38 nativespace-cdp sshd[21533]: Received disconnect from 78.51.129.113 port 58912:11: Bye Bye [preauth]
Oct  1 05:55:38 nativespace-cdp sshd[21533]: Disconnected from 78.51.129.113 port 58912 [preauth]
Oct  1 05:55:38 nativespace-cdp sshd[21529]: Received disconnect from 129.222.203.89 port 41256:11: Bye Bye [preauth]
Oct  1 05:55:38 nativespace-cdp sshd[21529]: Disconnected from 129.222.203.89 port 41256 [preauth]
Oct  1 05:55:54 nativespace-cdp sshd[21697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133  user=root
Oct  1 05:55:54 nativespace-cdp sshd[21697]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:55:55 nativespace-cdp sshd[21698]: Invalid user ubuntu from 36.133.57.132 port 44804
Oct  1 05:55:55 nativespace-cdp sshd[21698]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:55:55 nativespace-cdp sshd[21698]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:55:55 nativespace-cdp sshd[21698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:55:56 nativespace-cdp sshd[21697]: Failed password for root from 64.227.133.133 port 59712 ssh2
Oct  1 05:55:57 nativespace-cdp sshd[21697]: Received disconnect from 64.227.133.133 port 59712:11: Bye Bye [preauth]
Oct  1 05:55:57 nativespace-cdp sshd[21697]: Disconnected from 64.227.133.133 port 59712 [preauth]
Oct  1 05:55:57 nativespace-cdp sshd[21698]: Failed password for invalid user ubuntu from 36.133.57.132 port 44804 ssh2
Oct  1 05:55:58 nativespace-cdp sshd[21698]: Received disconnect from 36.133.57.132 port 44804:11: Bye Bye [preauth]
Oct  1 05:55:58 nativespace-cdp sshd[21698]: Disconnected from 36.133.57.132 port 44804 [preauth]
Oct  1 05:56:06 nativespace-cdp sshd[21744]: Invalid user ubuntu from 203.25.211.164 port 38060
Oct  1 05:56:06 nativespace-cdp sshd[21744]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:56:06 nativespace-cdp sshd[21744]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:56:06 nativespace-cdp sshd[21744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.25.211.164
Oct  1 05:56:08 nativespace-cdp sshd[21744]: Failed password for invalid user ubuntu from 203.25.211.164 port 38060 ssh2
Oct  1 05:56:08 nativespace-cdp sshd[21744]: Received disconnect from 203.25.211.164 port 38060:11: Bye Bye [preauth]
Oct  1 05:56:08 nativespace-cdp sshd[21744]: Disconnected from 203.25.211.164 port 38060 [preauth]
Oct  1 05:56:18 nativespace-cdp sshd[21772]: Invalid user sopuser from 78.51.129.113 port 60894
Oct  1 05:56:18 nativespace-cdp sshd[21772]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 05:56:18 nativespace-cdp sshd[21772]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:56:18 nativespace-cdp sshd[21772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:56:20 nativespace-cdp sshd[21772]: Failed password for invalid user sopuser from 78.51.129.113 port 60894 ssh2
Oct  1 05:56:22 nativespace-cdp sshd[21772]: Received disconnect from 78.51.129.113 port 60894:11: Bye Bye [preauth]
Oct  1 05:56:22 nativespace-cdp sshd[21772]: Disconnected from 78.51.129.113 port 60894 [preauth]
Oct  1 05:56:29 nativespace-cdp sshd[21787]: Invalid user testuser from 129.222.203.89 port 36194
Oct  1 05:56:29 nativespace-cdp sshd[21787]: input_userauth_request: invalid user testuser [preauth]
Oct  1 05:56:29 nativespace-cdp sshd[21787]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:56:29 nativespace-cdp sshd[21787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:56:31 nativespace-cdp sshd[21787]: Failed password for invalid user testuser from 129.222.203.89 port 36194 ssh2
Oct  1 05:56:33 nativespace-cdp sshd[21803]: Connection closed by 159.100.136.21 port 34672 [preauth]
Oct  1 05:56:33 nativespace-cdp sshd[21787]: Received disconnect from 129.222.203.89 port 36194:11: Bye Bye [preauth]
Oct  1 05:56:33 nativespace-cdp sshd[21787]: Disconnected from 129.222.203.89 port 36194 [preauth]
Oct  1 05:56:44 nativespace-cdp sshd[21835]: Invalid user user from 64.227.133.133 port 40830
Oct  1 05:56:44 nativespace-cdp sshd[21835]: input_userauth_request: invalid user user [preauth]
Oct  1 05:56:44 nativespace-cdp sshd[21835]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:56:44 nativespace-cdp sshd[21835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:56:44 nativespace-cdp sshd[21821]: Invalid user username from 36.133.57.132 port 52990
Oct  1 05:56:44 nativespace-cdp sshd[21821]: input_userauth_request: invalid user username [preauth]
Oct  1 05:56:44 nativespace-cdp sshd[21821]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:56:44 nativespace-cdp sshd[21821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:56:47 nativespace-cdp sshd[21835]: Failed password for invalid user user from 64.227.133.133 port 40830 ssh2
Oct  1 05:56:47 nativespace-cdp sshd[21821]: Failed password for invalid user username from 36.133.57.132 port 52990 ssh2
Oct  1 05:56:47 nativespace-cdp sshd[21835]: Received disconnect from 64.227.133.133 port 40830:11: Bye Bye [preauth]
Oct  1 05:56:47 nativespace-cdp sshd[21835]: Disconnected from 64.227.133.133 port 40830 [preauth]
Oct  1 05:56:47 nativespace-cdp sshd[21821]: Received disconnect from 36.133.57.132 port 52990:11: Bye Bye [preauth]
Oct  1 05:56:47 nativespace-cdp sshd[21821]: Disconnected from 36.133.57.132 port 52990 [preauth]
Oct  1 05:57:00 nativespace-cdp sshd[21870]: Invalid user ubuntu from 78.51.129.113 port 59810
Oct  1 05:57:00 nativespace-cdp sshd[21870]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:57:00 nativespace-cdp sshd[21870]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:57:00 nativespace-cdp sshd[21870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:57:02 nativespace-cdp sshd[21870]: Failed password for invalid user ubuntu from 78.51.129.113 port 59810 ssh2
Oct  1 05:57:02 nativespace-cdp sshd[21870]: Received disconnect from 78.51.129.113 port 59810:11: Bye Bye [preauth]
Oct  1 05:57:02 nativespace-cdp sshd[21870]: Disconnected from 78.51.129.113 port 59810 [preauth]
Oct  1 05:57:22 nativespace-cdp sshd[21935]: Invalid user acer from 129.222.203.89 port 53515
Oct  1 05:57:22 nativespace-cdp sshd[21935]: input_userauth_request: invalid user acer [preauth]
Oct  1 05:57:22 nativespace-cdp sshd[21935]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:57:22 nativespace-cdp sshd[21935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:57:24 nativespace-cdp sshd[21935]: Failed password for invalid user acer from 129.222.203.89 port 53515 ssh2
Oct  1 05:57:24 nativespace-cdp sshd[21935]: Received disconnect from 129.222.203.89 port 53515:11: Bye Bye [preauth]
Oct  1 05:57:24 nativespace-cdp sshd[21935]: Disconnected from 129.222.203.89 port 53515 [preauth]
Oct  1 05:57:29 nativespace-cdp sshd[21948]: Invalid user sysadmin from 36.133.57.132 port 32948
Oct  1 05:57:29 nativespace-cdp sshd[21948]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 05:57:29 nativespace-cdp sshd[21948]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:57:29 nativespace-cdp sshd[21948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:57:30 nativespace-cdp sshd[21948]: Failed password for invalid user sysadmin from 36.133.57.132 port 32948 ssh2
Oct  1 05:57:31 nativespace-cdp sshd[21948]: Received disconnect from 36.133.57.132 port 32948:11: Bye Bye [preauth]
Oct  1 05:57:31 nativespace-cdp sshd[21948]: Disconnected from 36.133.57.132 port 32948 [preauth]
Oct  1 05:57:37 nativespace-cdp sshd[22003]: Invalid user user from 78.51.129.113 port 37228
Oct  1 05:57:37 nativespace-cdp sshd[22003]: input_userauth_request: invalid user user [preauth]
Oct  1 05:57:37 nativespace-cdp sshd[22003]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:57:37 nativespace-cdp sshd[22003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.51.129.113
Oct  1 05:57:39 nativespace-cdp sshd[22003]: Failed password for invalid user user from 78.51.129.113 port 37228 ssh2
Oct  1 05:57:40 nativespace-cdp sshd[22003]: Received disconnect from 78.51.129.113 port 37228:11: Bye Bye [preauth]
Oct  1 05:57:40 nativespace-cdp sshd[22003]: Disconnected from 78.51.129.113 port 37228 [preauth]
Oct  1 05:57:41 nativespace-cdp sshd[22000]: Invalid user ubuntu from 64.227.133.133 port 45802
Oct  1 05:57:41 nativespace-cdp sshd[22000]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:57:41 nativespace-cdp sshd[22000]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:57:41 nativespace-cdp sshd[22000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:57:43 nativespace-cdp sshd[22000]: Failed password for invalid user ubuntu from 64.227.133.133 port 45802 ssh2
Oct  1 05:57:43 nativespace-cdp sshd[22000]: Received disconnect from 64.227.133.133 port 45802:11: Bye Bye [preauth]
Oct  1 05:57:43 nativespace-cdp sshd[22000]: Disconnected from 64.227.133.133 port 45802 [preauth]
Oct  1 05:58:14 nativespace-cdp sshd[22145]: Invalid user ubuntu from 129.222.203.89 port 18398
Oct  1 05:58:14 nativespace-cdp sshd[22145]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 05:58:14 nativespace-cdp sshd[22145]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:58:14 nativespace-cdp sshd[22145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:58:16 nativespace-cdp sshd[22151]: Connection closed by 36.133.57.132 port 41132 [preauth]
Oct  1 05:58:16 nativespace-cdp sshd[22145]: Failed password for invalid user ubuntu from 129.222.203.89 port 18398 ssh2
Oct  1 05:58:16 nativespace-cdp sshd[22145]: Received disconnect from 129.222.203.89 port 18398:11: Bye Bye [preauth]
Oct  1 05:58:16 nativespace-cdp sshd[22145]: Disconnected from 129.222.203.89 port 18398 [preauth]
Oct  1 05:58:27 nativespace-cdp sshd[22167]: Invalid user sysadmin from 64.227.133.133 port 59446
Oct  1 05:58:27 nativespace-cdp sshd[22167]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 05:58:27 nativespace-cdp sshd[22167]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:58:27 nativespace-cdp sshd[22167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:58:29 nativespace-cdp sshd[22167]: Failed password for invalid user sysadmin from 64.227.133.133 port 59446 ssh2
Oct  1 05:58:36 nativespace-cdp sshd[22167]: Received disconnect from 64.227.133.133 port 59446:11: Bye Bye [preauth]
Oct  1 05:58:36 nativespace-cdp sshd[22167]: Disconnected from 64.227.133.133 port 59446 [preauth]
Oct  1 05:58:36 nativespace-cdp sshd[22025]: Connection closed by 203.25.211.164 port 56034 [preauth]
Oct  1 05:58:56 nativespace-cdp sshd[22245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132  user=root
Oct  1 05:58:56 nativespace-cdp sshd[22245]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 05:58:58 nativespace-cdp sshd[22245]: Failed password for root from 36.133.57.132 port 49304 ssh2
Oct  1 05:58:59 nativespace-cdp sshd[22245]: Received disconnect from 36.133.57.132 port 49304:11: Bye Bye [preauth]
Oct  1 05:58:59 nativespace-cdp sshd[22245]: Disconnected from 36.133.57.132 port 49304 [preauth]
Oct  1 05:59:07 nativespace-cdp sshd[22278]: Invalid user steam from 129.222.203.89 port 61253
Oct  1 05:59:07 nativespace-cdp sshd[22278]: input_userauth_request: invalid user steam [preauth]
Oct  1 05:59:07 nativespace-cdp sshd[22278]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:59:07 nativespace-cdp sshd[22278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 05:59:10 nativespace-cdp sshd[22278]: Failed password for invalid user steam from 129.222.203.89 port 61253 ssh2
Oct  1 05:59:10 nativespace-cdp sshd[22278]: Received disconnect from 129.222.203.89 port 61253:11: Bye Bye [preauth]
Oct  1 05:59:10 nativespace-cdp sshd[22278]: Disconnected from 129.222.203.89 port 61253 [preauth]
Oct  1 05:59:19 nativespace-cdp sshd[22324]: Invalid user test from 64.227.133.133 port 50370
Oct  1 05:59:19 nativespace-cdp sshd[22324]: input_userauth_request: invalid user test [preauth]
Oct  1 05:59:19 nativespace-cdp sshd[22324]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:59:19 nativespace-cdp sshd[22324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 05:59:21 nativespace-cdp sshd[22324]: Failed password for invalid user test from 64.227.133.133 port 50370 ssh2
Oct  1 05:59:24 nativespace-cdp sshd[22324]: Received disconnect from 64.227.133.133 port 50370:11: Bye Bye [preauth]
Oct  1 05:59:24 nativespace-cdp sshd[22324]: Disconnected from 64.227.133.133 port 50370 [preauth]
Oct  1 05:59:40 nativespace-cdp sshd[22380]: Invalid user user from 36.133.57.132 port 57490
Oct  1 05:59:40 nativespace-cdp sshd[22380]: input_userauth_request: invalid user user [preauth]
Oct  1 05:59:40 nativespace-cdp sshd[22380]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 05:59:40 nativespace-cdp sshd[22380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 05:59:41 nativespace-cdp sshd[22380]: Failed password for invalid user user from 36.133.57.132 port 57490 ssh2
Oct  1 05:59:45 nativespace-cdp sshd[22380]: Received disconnect from 36.133.57.132 port 57490:11: Bye Bye [preauth]
Oct  1 05:59:45 nativespace-cdp sshd[22380]: Disconnected from 36.133.57.132 port 57490 [preauth]
Oct  1 06:00:00 nativespace-cdp sshd[22435]: Invalid user test from 129.222.203.89 port 61221
Oct  1 06:00:00 nativespace-cdp sshd[22435]: input_userauth_request: invalid user test [preauth]
Oct  1 06:00:00 nativespace-cdp sshd[22435]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:00:00 nativespace-cdp sshd[22435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.222.203.89
Oct  1 06:00:02 nativespace-cdp sshd[22435]: Failed password for invalid user test from 129.222.203.89 port 61221 ssh2
Oct  1 06:00:06 nativespace-cdp sshd[22435]: Received disconnect from 129.222.203.89 port 61221:11: Bye Bye [preauth]
Oct  1 06:00:06 nativespace-cdp sshd[22435]: Disconnected from 129.222.203.89 port 61221 [preauth]
Oct  1 06:00:13 nativespace-cdp sshd[22655]: Invalid user superman from 64.227.133.133 port 60022
Oct  1 06:00:13 nativespace-cdp sshd[22655]: input_userauth_request: invalid user superman [preauth]
Oct  1 06:00:13 nativespace-cdp sshd[22655]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:00:13 nativespace-cdp sshd[22655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 06:00:15 nativespace-cdp sshd[22655]: Failed password for invalid user superman from 64.227.133.133 port 60022 ssh2
Oct  1 06:00:15 nativespace-cdp sshd[22655]: Received disconnect from 64.227.133.133 port 60022:11: Bye Bye [preauth]
Oct  1 06:00:15 nativespace-cdp sshd[22655]: Disconnected from 64.227.133.133 port 60022 [preauth]
Oct  1 06:00:26 nativespace-cdp sshd[22674]: Invalid user tg from 36.133.57.132 port 37448
Oct  1 06:00:26 nativespace-cdp sshd[22674]: input_userauth_request: invalid user tg [preauth]
Oct  1 06:00:26 nativespace-cdp sshd[22674]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:00:26 nativespace-cdp sshd[22674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 06:00:28 nativespace-cdp sshd[22674]: Failed password for invalid user tg from 36.133.57.132 port 37448 ssh2
Oct  1 06:00:28 nativespace-cdp sshd[22674]: Received disconnect from 36.133.57.132 port 37448:11: Bye Bye [preauth]
Oct  1 06:00:28 nativespace-cdp sshd[22674]: Disconnected from 36.133.57.132 port 37448 [preauth]
Oct  1 06:01:03 nativespace-cdp sshd[23036]: Invalid user username from 68.183.142.21 port 57366
Oct  1 06:01:03 nativespace-cdp sshd[23036]: input_userauth_request: invalid user username [preauth]
Oct  1 06:01:03 nativespace-cdp sshd[23036]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:01:03 nativespace-cdp sshd[23036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 06:01:05 nativespace-cdp sshd[23036]: Failed password for invalid user username from 68.183.142.21 port 57366 ssh2
Oct  1 06:01:10 nativespace-cdp sshd[23066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133  user=root
Oct  1 06:01:10 nativespace-cdp sshd[23066]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 06:01:12 nativespace-cdp sshd[23066]: Failed password for root from 64.227.133.133 port 57814 ssh2
Oct  1 06:01:12 nativespace-cdp sshd[23066]: Received disconnect from 64.227.133.133 port 57814:11: Bye Bye [preauth]
Oct  1 06:01:12 nativespace-cdp sshd[23066]: Disconnected from 64.227.133.133 port 57814 [preauth]
Oct  1 06:01:13 nativespace-cdp sshd[23036]: Received disconnect from 68.183.142.21 port 57366:11: Bye Bye [preauth]
Oct  1 06:01:13 nativespace-cdp sshd[23036]: Disconnected from 68.183.142.21 port 57366 [preauth]
Oct  1 06:01:19 nativespace-cdp sshd[23106]: Invalid user support from 36.133.57.132 port 45636
Oct  1 06:01:19 nativespace-cdp sshd[23106]: input_userauth_request: invalid user support [preauth]
Oct  1 06:01:19 nativespace-cdp sshd[23106]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:01:19 nativespace-cdp sshd[23106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 06:01:21 nativespace-cdp sshd[23106]: Failed password for invalid user support from 36.133.57.132 port 45636 ssh2
Oct  1 06:01:22 nativespace-cdp sshd[23106]: Received disconnect from 36.133.57.132 port 45636:11: Bye Bye [preauth]
Oct  1 06:01:22 nativespace-cdp sshd[23106]: Disconnected from 36.133.57.132 port 45636 [preauth]
Oct  1 06:01:33 nativespace-cdp sshd[23228]: Connection closed by 159.100.136.21 port 43362 [preauth]
Oct  1 06:02:01 nativespace-cdp sshd[23359]: Invalid user test from 64.227.133.133 port 43034
Oct  1 06:02:01 nativespace-cdp sshd[23359]: input_userauth_request: invalid user test [preauth]
Oct  1 06:02:01 nativespace-cdp sshd[23359]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:02:01 nativespace-cdp sshd[23359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 06:02:02 nativespace-cdp sshd[23354]: Invalid user support from 36.133.57.132 port 53812
Oct  1 06:02:02 nativespace-cdp sshd[23354]: input_userauth_request: invalid user support [preauth]
Oct  1 06:02:02 nativespace-cdp sshd[23354]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:02:02 nativespace-cdp sshd[23354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 06:02:03 nativespace-cdp sshd[23359]: Failed password for invalid user test from 64.227.133.133 port 43034 ssh2
Oct  1 06:02:03 nativespace-cdp sshd[23359]: Received disconnect from 64.227.133.133 port 43034:11: Bye Bye [preauth]
Oct  1 06:02:03 nativespace-cdp sshd[23359]: Disconnected from 64.227.133.133 port 43034 [preauth]
Oct  1 06:02:04 nativespace-cdp sshd[23354]: Failed password for invalid user support from 36.133.57.132 port 53812 ssh2
Oct  1 06:02:04 nativespace-cdp sshd[23354]: Received disconnect from 36.133.57.132 port 53812:11: Bye Bye [preauth]
Oct  1 06:02:04 nativespace-cdp sshd[23354]: Disconnected from 36.133.57.132 port 53812 [preauth]
Oct  1 06:02:49 nativespace-cdp sshd[23655]: Invalid user test from 36.133.57.132 port 33768
Oct  1 06:02:49 nativespace-cdp sshd[23655]: input_userauth_request: invalid user test [preauth]
Oct  1 06:02:49 nativespace-cdp sshd[23655]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:02:49 nativespace-cdp sshd[23655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 06:02:51 nativespace-cdp sshd[23655]: Failed password for invalid user test from 36.133.57.132 port 33768 ssh2
Oct  1 06:02:51 nativespace-cdp sshd[23655]: Received disconnect from 36.133.57.132 port 33768:11: Bye Bye [preauth]
Oct  1 06:02:51 nativespace-cdp sshd[23655]: Disconnected from 36.133.57.132 port 33768 [preauth]
Oct  1 06:03:00 nativespace-cdp sshd[23705]: Invalid user nexus from 64.227.133.133 port 34684
Oct  1 06:03:00 nativespace-cdp sshd[23705]: input_userauth_request: invalid user nexus [preauth]
Oct  1 06:03:00 nativespace-cdp sshd[23705]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:03:00 nativespace-cdp sshd[23705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 06:03:02 nativespace-cdp sshd[23705]: Failed password for invalid user nexus from 64.227.133.133 port 34684 ssh2
Oct  1 06:03:02 nativespace-cdp sshd[23705]: Received disconnect from 64.227.133.133 port 34684:11: Bye Bye [preauth]
Oct  1 06:03:02 nativespace-cdp sshd[23705]: Disconnected from 64.227.133.133 port 34684 [preauth]
Oct  1 06:03:34 nativespace-cdp sshd[23903]: Invalid user odoo from 36.133.57.132 port 41950
Oct  1 06:03:34 nativespace-cdp sshd[23903]: input_userauth_request: invalid user odoo [preauth]
Oct  1 06:03:34 nativespace-cdp sshd[23903]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:03:34 nativespace-cdp sshd[23903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 06:03:36 nativespace-cdp sshd[23903]: Failed password for invalid user odoo from 36.133.57.132 port 41950 ssh2
Oct  1 06:03:38 nativespace-cdp sshd[23903]: Received disconnect from 36.133.57.132 port 41950:11: Bye Bye [preauth]
Oct  1 06:03:38 nativespace-cdp sshd[23903]: Disconnected from 36.133.57.132 port 41950 [preauth]
Oct  1 06:03:52 nativespace-cdp sshd[23985]: Invalid user user from 64.227.133.133 port 54118
Oct  1 06:03:52 nativespace-cdp sshd[23985]: input_userauth_request: invalid user user [preauth]
Oct  1 06:03:52 nativespace-cdp sshd[23985]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:03:52 nativespace-cdp sshd[23985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 06:03:54 nativespace-cdp sshd[23985]: Failed password for invalid user user from 64.227.133.133 port 54118 ssh2
Oct  1 06:03:54 nativespace-cdp sshd[23985]: Received disconnect from 64.227.133.133 port 54118:11: Bye Bye [preauth]
Oct  1 06:03:54 nativespace-cdp sshd[23985]: Disconnected from 64.227.133.133 port 54118 [preauth]
Oct  1 06:04:21 nativespace-cdp sshd[24222]: Invalid user user from 203.25.211.164 port 42398
Oct  1 06:04:21 nativespace-cdp sshd[24222]: input_userauth_request: invalid user user [preauth]
Oct  1 06:04:21 nativespace-cdp sshd[24222]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:04:21 nativespace-cdp sshd[24222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.25.211.164
Oct  1 06:04:23 nativespace-cdp sshd[24222]: Failed password for invalid user user from 203.25.211.164 port 42398 ssh2
Oct  1 06:04:26 nativespace-cdp sshd[24222]: Received disconnect from 203.25.211.164 port 42398:11: Bye Bye [preauth]
Oct  1 06:04:26 nativespace-cdp sshd[24222]: Disconnected from 203.25.211.164 port 42398 [preauth]
Oct  1 06:04:29 nativespace-cdp sshd[24271]: Invalid user superman from 36.133.57.132 port 50146
Oct  1 06:04:29 nativespace-cdp sshd[24271]: input_userauth_request: invalid user superman [preauth]
Oct  1 06:04:29 nativespace-cdp sshd[24271]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:04:29 nativespace-cdp sshd[24271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 06:04:30 nativespace-cdp sshd[24271]: Failed password for invalid user superman from 36.133.57.132 port 50146 ssh2
Oct  1 06:04:31 nativespace-cdp sshd[24271]: Received disconnect from 36.133.57.132 port 50146:11: Bye Bye [preauth]
Oct  1 06:04:31 nativespace-cdp sshd[24271]: Disconnected from 36.133.57.132 port 50146 [preauth]
Oct  1 06:04:48 nativespace-cdp sshd[24375]: Invalid user ubuntu from 64.227.133.133 port 46216
Oct  1 06:04:48 nativespace-cdp sshd[24375]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 06:04:48 nativespace-cdp sshd[24375]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:04:48 nativespace-cdp sshd[24375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 06:04:49 nativespace-cdp sshd[24375]: Failed password for invalid user ubuntu from 64.227.133.133 port 46216 ssh2
Oct  1 06:04:53 nativespace-cdp sshd[24375]: Received disconnect from 64.227.133.133 port 46216:11: Bye Bye [preauth]
Oct  1 06:04:53 nativespace-cdp sshd[24375]: Disconnected from 64.227.133.133 port 46216 [preauth]
Oct  1 06:05:18 nativespace-cdp sshd[24929]: Invalid user svn from 36.133.57.132 port 58336
Oct  1 06:05:18 nativespace-cdp sshd[24929]: input_userauth_request: invalid user svn [preauth]
Oct  1 06:05:18 nativespace-cdp sshd[24929]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:05:18 nativespace-cdp sshd[24929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 06:05:20 nativespace-cdp sshd[24929]: Failed password for invalid user svn from 36.133.57.132 port 58336 ssh2
Oct  1 06:05:23 nativespace-cdp sshd[24929]: Received disconnect from 36.133.57.132 port 58336:11: Bye Bye [preauth]
Oct  1 06:05:23 nativespace-cdp sshd[24929]: Disconnected from 36.133.57.132 port 58336 [preauth]
Oct  1 06:05:37 nativespace-cdp sshd[25022]: Invalid user test from 64.227.133.133 port 48182
Oct  1 06:05:37 nativespace-cdp sshd[25022]: input_userauth_request: invalid user test [preauth]
Oct  1 06:05:37 nativespace-cdp sshd[25022]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:05:37 nativespace-cdp sshd[25022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 06:05:39 nativespace-cdp sshd[25022]: Failed password for invalid user test from 64.227.133.133 port 48182 ssh2
Oct  1 06:05:39 nativespace-cdp sshd[25022]: Received disconnect from 64.227.133.133 port 48182:11: Bye Bye [preauth]
Oct  1 06:05:39 nativespace-cdp sshd[25022]: Disconnected from 64.227.133.133 port 48182 [preauth]
Oct  1 06:06:11 nativespace-cdp sshd[25391]: Invalid user test from 36.133.57.132 port 38296
Oct  1 06:06:11 nativespace-cdp sshd[25391]: input_userauth_request: invalid user test [preauth]
Oct  1 06:06:11 nativespace-cdp sshd[25391]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:06:11 nativespace-cdp sshd[25391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.133.57.132
Oct  1 06:06:13 nativespace-cdp sshd[25391]: Failed password for invalid user test from 36.133.57.132 port 38296 ssh2
Oct  1 06:06:14 nativespace-cdp sshd[25391]: Received disconnect from 36.133.57.132 port 38296:11: Bye Bye [preauth]
Oct  1 06:06:14 nativespace-cdp sshd[25391]: Disconnected from 36.133.57.132 port 38296 [preauth]
Oct  1 06:06:31 nativespace-cdp sshd[25594]: Invalid user sysadmin from 64.227.133.133 port 56776
Oct  1 06:06:31 nativespace-cdp sshd[25594]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 06:06:31 nativespace-cdp sshd[25594]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:06:31 nativespace-cdp sshd[25594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.133.133
Oct  1 06:06:33 nativespace-cdp sshd[25594]: Failed password for invalid user sysadmin from 64.227.133.133 port 56776 ssh2
Oct  1 06:06:35 nativespace-cdp sshd[25594]: Received disconnect from 64.227.133.133 port 56776:11: Bye Bye [preauth]
Oct  1 06:06:35 nativespace-cdp sshd[25594]: Disconnected from 64.227.133.133 port 56776 [preauth]
Oct  1 06:06:36 nativespace-cdp sshd[25622]: Connection closed by 159.100.136.21 port 52586 [preauth]
Oct  1 06:07:07 nativespace-cdp sshd[25799]: Received disconnect from 68.183.142.21 port 52010:11: Bye Bye [preauth]
Oct  1 06:07:07 nativespace-cdp sshd[25799]: Disconnected from 68.183.142.21 port 52010 [preauth]
Oct  1 06:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 06:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:00 nativespace-cdp sudo[26781]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 06:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:00 nativespace-cdp sudo[26785]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 06:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:03 nativespace-cdp sudo[26789]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 06:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:03 nativespace-cdp sudo[26918]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 06:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:08 nativespace-cdp sudo[26921]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 06:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:08 nativespace-cdp sudo[26939]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 06:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:08 nativespace-cdp sudo[26942]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 06:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:08 nativespace-cdp sudo[26945]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 06:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:08 nativespace-cdp sudo[26948]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 06:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:08 nativespace-cdp sudo[26951]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 06:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:08 nativespace-cdp sudo[26954]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 06:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:19 nativespace-cdp sudo[27021]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 06:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:20 nativespace-cdp sudo[27026]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=cwsocial user-2=howardon user-3=pugwash user-4=paulmca1 user-5=ninejimm user-6=reliable user-7=cathski user-8=cambria1 user-9=courseme user-10=eugincou user-11=hirefootballgame user-12=steakbridieme user-13=firstre5 user-14=donnychicago user-15=philmcph user-16=ctedorgu user-17=lkpier user-18=leftie user-19=foods user-20=fortunaz user-21=health2045 user-22=nscdp user-23=barbersh user-24=tigerlet user-25=nomistakes user-26=hidden user-27=smrszyqg user-28=isleofwi user-29=nsceres user-30=fawcettd user-31=burydropin user-32=dhyana user-33=darkstar user-34=eatspam user-35=beauty user-36=asandcoc user-37=sibtoncc user-38=steve user-39=zebrapho user-40=bwppodcast user-41=nvihkvu user-42=havantho user-43=cath user-44=sketchy user-45=what user-46=tstardom user-47=oubpgvbx user-48=design
Oct  1 06:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=kategilpin user-50=stagingerris user-51=dancinggardener user-52=ladburyp user-53=boldover user-54=nove user-55=crrtipdl user-56=sosevalu user-57=bakery user-58=onlycont user-59=lucy user-60=attlebor user-61=romaldki user-62=branko user-63=ranxterc user-64=outdoorc user-65=hodgsonmail user-66=jennimil user-67=tomandle user-68=david user-69=nbhavers user-70=careers user-71=mcdermos user-72=chrisdal user-73=ptkxhsbt user-74=dickemery123 user-75=martsblo user-76=magichat user-77=hhdugcor user-78=lbhyisi user-79=atestord user-80=sarafoundation user-81=strathar user-82=lakesan1 user-83=brmrjxl user-84=megacards user-85=musorguk user-86=wilsonsw user-87=theblack user-88=hodgesonweb user-89=spectrum user-90=jarvisin user-91=leereyn1 user-92=stephani user-93=agproduc user-94=still user-95=lbscrmod user-96=maflemin user-97=vantagep user-98=athenare user-99=connect9 user-100=markward user-101=booff
Oct  1 06:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=foundation user-103=ulsukarm user-104=alexadmin user-105=skyfirec user-106=nativene user-107=askhform user-108=stuartge user-109=innovat1 user-110=oneoarco user-111=battlere user-112=vivienn1 user-113=firstre2 user-114=nstriton user-115=brighto1 user-116=bemadonn user-117=newstoda user-118=belle user-119=ggaaorgu user-120=bedfords user-121=fetch user-122=carsinyo user-123=hubmaster user-124=elecleis user-125=gilpin user-126=milloyco user-127=thqkgnbz user-128=connectedshoppin user-129=ianrayne user-130=accooper user-131=opaiscyx user-132=coursemc user-133=firstres user-134=ultbcrra user-135=seftvta user-136=jonhartl user-137=highlegh user-138=southlon user-139=firstred user-140=costestimatorco user-141=clarkass user-142=firstrel feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 06:10:20 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 06:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:21 nativespace-cdp sudo[27033]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 06:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:21 nativespace-cdp sudo[27052]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-x1zMU9Jgpnf2CaDP.~
Oct  1 06:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:22 nativespace-cdp sudo[27058]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-x1zMU9Jgpnf2CaDP.~'
Oct  1 06:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:22 nativespace-cdp sudo[27061]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-x1zMU9Jgpnf2CaDP.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 06:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:22 nativespace-cdp sudo[27066]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 06:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:22 nativespace-cdp sudo[27069]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:32 nativespace-cdp sshd[27111]: Invalid user test from 68.183.142.21 port 56952
Oct  1 06:10:32 nativespace-cdp sshd[27111]: input_userauth_request: invalid user test [preauth]
Oct  1 06:10:32 nativespace-cdp sshd[27111]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:10:32 nativespace-cdp sshd[27111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 06:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 06:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 06:10:35 nativespace-cdp sudo[27130]: pam_unix(sudo:session): session closed for user root
Oct  1 06:10:35 nativespace-cdp sshd[27111]: Failed password for invalid user test from 68.183.142.21 port 56952 ssh2
Oct  1 06:10:35 nativespace-cdp sshd[27111]: Received disconnect from 68.183.142.21 port 56952:11: Bye Bye [preauth]
Oct  1 06:10:35 nativespace-cdp sshd[27111]: Disconnected from 68.183.142.21 port 56952 [preauth]
Oct  1 06:11:34 nativespace-cdp sshd[27380]: Connection closed by 159.100.136.21 port 33634 [preauth]
Oct  1 06:12:58 nativespace-cdp sshd[27634]: Invalid user odoo from 68.183.142.21 port 47110
Oct  1 06:12:58 nativespace-cdp sshd[27634]: input_userauth_request: invalid user odoo [preauth]
Oct  1 06:12:58 nativespace-cdp sshd[27634]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 06:12:58 nativespace-cdp sshd[27634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.21
Oct  1 06:13:01 nativespace-cdp sshd[27634]: Failed password for invalid user odoo from 68.183.142.21 port 47110 ssh2
Oct  1 06:13:20 nativespace-cdp sshd[27634]: Received disconnect from 68.183.142.21 port 47110:11: Bye Bye [preauth]
Oct  1 06:13:20 nativespace-cdp sshd[27634]: Disconnected from 68.183.142.21 port 47110 [preauth]
Oct  1 06:16:33 nativespace-cdp sshd[28405]: Connection closed by 159.100.136.21 port 43592 [preauth]
Oct  1 06:21:33 nativespace-cdp sshd[29826]: Connection closed by 159.100.136.21 port 53304 [preauth]
Oct  1 06:26:33 nativespace-cdp sshd[30979]: Connection closed by 159.100.136.21 port 35062 [preauth]
Oct  1 06:31:33 nativespace-cdp sshd[32199]: Connection closed by 159.100.136.21 port 44718 [preauth]
Oct  1 06:36:34 nativespace-cdp sshd[935]: Connection closed by 159.100.136.21 port 54626 [preauth]
Oct  1 06:41:36 nativespace-cdp sshd[2034]: Connection closed by 159.100.136.21 port 35812 [preauth]
Oct  1 06:46:33 nativespace-cdp sshd[3036]: Connection closed by 159.100.136.21 port 45550 [preauth]
Oct  1 06:51:34 nativespace-cdp sshd[4205]: Connection closed by 159.100.136.21 port 55290 [preauth]
Oct  1 07:01:33 nativespace-cdp sshd[6586]: Connection closed by 159.100.136.21 port 46742 [preauth]
Oct  1 07:06:33 nativespace-cdp sshd[7830]: Connection closed by 159.100.136.21 port 56756 [preauth]
Oct  1 07:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 07:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:54 nativespace-cdp sudo[8440]: pam_unix(sudo:session): session closed for user root
Oct  1 07:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 07:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:54 nativespace-cdp sudo[8444]: pam_unix(sudo:session): session closed for user root
Oct  1 07:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 07:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:55 nativespace-cdp sudo[8447]: pam_unix(sudo:session): session closed for user root
Oct  1 07:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 07:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:55 nativespace-cdp sudo[8453]: pam_unix(sudo:session): session closed for user root
Oct  1 07:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 07:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:59 nativespace-cdp sudo[8456]: pam_unix(sudo:session): session closed for user root
Oct  1 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:59 nativespace-cdp sudo[8467]: pam_unix(sudo:session): session closed for user root
Oct  1 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:59 nativespace-cdp sudo[8470]: pam_unix(sudo:session): session closed for user root
Oct  1 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:59 nativespace-cdp sudo[8473]: pam_unix(sudo:session): session closed for user root
Oct  1 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:59 nativespace-cdp sudo[8476]: pam_unix(sudo:session): session closed for user root
Oct  1 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:59 nativespace-cdp sudo[8479]: pam_unix(sudo:session): session closed for user root
Oct  1 07:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 07:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:09:59 nativespace-cdp sudo[8483]: pam_unix(sudo:session): session closed for user root
Oct  1 07:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 07:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:10:09 nativespace-cdp sudo[8630]: pam_unix(sudo:session): session closed for user root
Oct  1 07:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 07:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:10:09 nativespace-cdp sudo[8635]: pam_unix(sudo:session): session closed for user root
Oct  1 07:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=magichat user-2=lbhyisi user-3=hhdugcor user-4=ptkxhsbt user-5=dickemery123 user-6=martsblo user-7=musorguk user-8=megacards user-9=wilsonsw user-10=sarafoundation user-11=atestord user-12=strathar user-13=lakesan1 user-14=brmrjxl user-15=leereyn1 user-16=stephani user-17=still user-18=agproduc user-19=hodgesonweb user-20=theblack user-21=spectrum user-22=jarvisin user-23=ulsukarm user-24=maflemin user-25=lbscrmod user-26=athenare user-27=connect9 user-28=vantagep user-29=booff user-30=markward user-31=foundation user-32=nativene user-33=stuartge user-34=askhform user-35=innovat1 user-36=skyfirec user-37=alexadmin user-38=bemadonn user-39=ggaaorgu user-40=belle user-41=newstoda user-42=bedfords user-43=battlere user-44=oneoarco user-45=firstre2 user-46=vivienn1 user-47=brighto1 user-48=nstriton
Oct  1 07:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=thqkgnbz user-50=connectedshoppin user-51=ianrayne user-52=accooper user-53=carsinyo user-54=fetch user-55=hubmaster user-56=elecleis user-57=milloyco user-58=gilpin user-59=southlon user-60=highlegh user-61=firstred user-62=costestimatorco user-63=clarkass user-64=firstrel user-65=opaiscyx user-66=coursemc user-67=firstres user-68=seftvta user-69=jonhartl user-70=ultbcrra user-71=courseme user-72=eugincou user-73=hirefootballgame user-74=pugwash user-75=howardon user-76=paulmca1 user-77=cwsocial user-78=reliable user-79=ninejimm user-80=cambria1 user-81=cathski user-82=barbersh user-83=tigerlet user-84=hidden user-85=nomistakes user-86=smrszyqg user-87=isleofwi user-88=ctedorgu user-89=philmcph user-90=steakbridieme user-91=firstre5 user-92=donnychicago user-93=lkpier user-94=fortunaz user-95=health2045 user-96=leftie user-97=foods user-98=nscdp user-99=dhyana user-100=eatspam user-101=darkstar
Oct  1 07:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=beauty user-103=nsceres user-104=burydropin user-105=fawcettd user-106=steve user-107=zebrapho user-108=bwppodcast user-109=asandcoc user-110=sibtoncc user-111=design user-112=kategilpin user-113=ladburyp user-114=stagingerris user-115=dancinggardener user-116=nvihkvu user-117=cath user-118=sketchy user-119=havantho user-120=what user-121=tstardom user-122=oubpgvbx user-123=sosevalu user-124=crrtipdl user-125=bakery user-126=boldover user-127=nove user-128=romaldki user-129=branko user-130=outdoorc user-131=hodgsonmail user-132=ranxterc user-133=onlycont user-134=attlebor user-135=lucy user-136=careers user-137=nbhavers user-138=david user-139=mcdermos user-140=chrisdal user-141=jennimil user-142=tomandle feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 07:10:09 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 07:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:10:11 nativespace-cdp sudo[8641]: pam_unix(sudo:session): session closed for user root
Oct  1 07:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 07:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:10:12 nativespace-cdp sudo[8647]: pam_unix(sudo:session): session closed for user root
Oct  1 07:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-U3AWs0Osjzs2lSAK.~
Oct  1 07:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:10:12 nativespace-cdp sudo[8650]: pam_unix(sudo:session): session closed for user root
Oct  1 07:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-U3AWs0Osjzs2lSAK.~'
Oct  1 07:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:10:12 nativespace-cdp sudo[8653]: pam_unix(sudo:session): session closed for user root
Oct  1 07:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-U3AWs0Osjzs2lSAK.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 07:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:10:12 nativespace-cdp sudo[8657]: pam_unix(sudo:session): session closed for user root
Oct  1 07:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 07:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:10:12 nativespace-cdp sudo[8660]: pam_unix(sudo:session): session closed for user root
Oct  1 07:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 07:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 07:10:14 nativespace-cdp sudo[8681]: pam_unix(sudo:session): session closed for user root
Oct  1 07:11:34 nativespace-cdp sshd[9035]: Connection closed by 159.100.136.21 port 38118 [preauth]
Oct  1 07:16:35 nativespace-cdp sshd[10002]: Connection closed by 159.100.136.21 port 48028 [preauth]
Oct  1 07:21:35 nativespace-cdp sshd[11155]: Connection closed by 159.100.136.21 port 56834 [preauth]
Oct  1 07:26:33 nativespace-cdp sshd[12073]: Connection closed by 159.100.136.21 port 37940 [preauth]
Oct  1 07:31:33 nativespace-cdp sshd[13206]: Connection closed by 159.100.136.21 port 46876 [preauth]
Oct  1 07:36:33 nativespace-cdp sshd[14439]: Connection closed by 159.100.136.21 port 56652 [preauth]
Oct  1 07:41:35 nativespace-cdp sshd[15384]: Connection closed by 159.100.136.21 port 37194 [preauth]
Oct  1 07:46:34 nativespace-cdp sshd[16369]: Connection closed by 159.100.136.21 port 45694 [preauth]
Oct  1 07:46:37 nativespace-cdp sshd[16379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=root
Oct  1 07:46:37 nativespace-cdp sshd[16379]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:46:38 nativespace-cdp sshd[16379]: Failed password for root from 112.91.139.202 port 33729 ssh2
Oct  1 07:46:38 nativespace-cdp sshd[16379]: Received disconnect from 112.91.139.202 port 33729:11: Bye Bye [preauth]
Oct  1 07:46:38 nativespace-cdp sshd[16379]: Disconnected from 112.91.139.202 port 33729 [preauth]
Oct  1 07:46:39 nativespace-cdp sshd[16384]: Invalid user admin from 45.121.147.47 port 37072
Oct  1 07:46:39 nativespace-cdp sshd[16384]: input_userauth_request: invalid user admin [preauth]
Oct  1 07:46:39 nativespace-cdp sshd[16384]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:46:39 nativespace-cdp sshd[16384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 07:46:41 nativespace-cdp sshd[16384]: Failed password for invalid user admin from 45.121.147.47 port 37072 ssh2
Oct  1 07:46:41 nativespace-cdp sshd[16384]: Received disconnect from 45.121.147.47 port 37072:11: Bye Bye [preauth]
Oct  1 07:46:41 nativespace-cdp sshd[16384]: Disconnected from 45.121.147.47 port 37072 [preauth]
Oct  1 07:48:00 nativespace-cdp sshd[16601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 07:48:00 nativespace-cdp sshd[16601]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:48:02 nativespace-cdp sshd[16601]: Failed password for root from 170.0.235.253 port 49226 ssh2
Oct  1 07:48:02 nativespace-cdp sshd[16601]: Received disconnect from 170.0.235.253 port 49226:11: Bye Bye [preauth]
Oct  1 07:48:02 nativespace-cdp sshd[16601]: Disconnected from 170.0.235.253 port 49226 [preauth]
Oct  1 07:50:54 nativespace-cdp sshd[17423]: Invalid user nisec from 223.197.186.7 port 47606
Oct  1 07:50:54 nativespace-cdp sshd[17423]: input_userauth_request: invalid user nisec [preauth]
Oct  1 07:50:54 nativespace-cdp sshd[17423]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:50:54 nativespace-cdp sshd[17423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 07:50:56 nativespace-cdp sshd[17423]: Failed password for invalid user nisec from 223.197.186.7 port 47606 ssh2
Oct  1 07:50:56 nativespace-cdp sshd[17423]: Received disconnect from 223.197.186.7 port 47606:11: Bye Bye [preauth]
Oct  1 07:50:56 nativespace-cdp sshd[17423]: Disconnected from 223.197.186.7 port 47606 [preauth]
Oct  1 07:51:33 nativespace-cdp sshd[17646]: Connection closed by 159.100.136.21 port 54578 [preauth]
Oct  1 07:51:39 nativespace-cdp sshd[17666]: Invalid user admin from 170.0.235.253 port 39852
Oct  1 07:51:39 nativespace-cdp sshd[17666]: input_userauth_request: invalid user admin [preauth]
Oct  1 07:51:39 nativespace-cdp sshd[17666]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:51:39 nativespace-cdp sshd[17666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 07:51:41 nativespace-cdp sshd[17666]: Failed password for invalid user admin from 170.0.235.253 port 39852 ssh2
Oct  1 07:51:41 nativespace-cdp sshd[17666]: Received disconnect from 170.0.235.253 port 39852:11: Bye Bye [preauth]
Oct  1 07:51:41 nativespace-cdp sshd[17666]: Disconnected from 170.0.235.253 port 39852 [preauth]
Oct  1 07:51:49 nativespace-cdp sshd[17705]: Invalid user nginx from 45.121.147.47 port 58036
Oct  1 07:51:49 nativespace-cdp sshd[17705]: input_userauth_request: invalid user nginx [preauth]
Oct  1 07:51:49 nativespace-cdp sshd[17705]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:51:49 nativespace-cdp sshd[17705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 07:51:51 nativespace-cdp sshd[17705]: Failed password for invalid user nginx from 45.121.147.47 port 58036 ssh2
Oct  1 07:51:51 nativespace-cdp sshd[17705]: Received disconnect from 45.121.147.47 port 58036:11: Bye Bye [preauth]
Oct  1 07:51:51 nativespace-cdp sshd[17705]: Disconnected from 45.121.147.47 port 58036 [preauth]
Oct  1 07:52:13 nativespace-cdp sshd[17766]: Invalid user chris from 223.197.186.7 port 35726
Oct  1 07:52:13 nativespace-cdp sshd[17766]: input_userauth_request: invalid user chris [preauth]
Oct  1 07:52:13 nativespace-cdp sshd[17766]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:52:13 nativespace-cdp sshd[17766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 07:52:15 nativespace-cdp sshd[17766]: Failed password for invalid user chris from 223.197.186.7 port 35726 ssh2
Oct  1 07:52:18 nativespace-cdp sshd[17766]: Received disconnect from 223.197.186.7 port 35726:11: Bye Bye [preauth]
Oct  1 07:52:18 nativespace-cdp sshd[17766]: Disconnected from 223.197.186.7 port 35726 [preauth]
Oct  1 07:52:22 nativespace-cdp sshd[17794]: Invalid user cacti from 170.0.235.253 port 58766
Oct  1 07:52:22 nativespace-cdp sshd[17794]: input_userauth_request: invalid user cacti [preauth]
Oct  1 07:52:22 nativespace-cdp sshd[17794]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:52:22 nativespace-cdp sshd[17794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 07:52:24 nativespace-cdp sshd[17794]: Failed password for invalid user cacti from 170.0.235.253 port 58766 ssh2
Oct  1 07:52:28 nativespace-cdp sshd[17794]: Received disconnect from 170.0.235.253 port 58766:11: Bye Bye [preauth]
Oct  1 07:52:28 nativespace-cdp sshd[17794]: Disconnected from 170.0.235.253 port 58766 [preauth]
Oct  1 07:52:33 nativespace-cdp sshd[17833]: Invalid user daniel from 45.121.147.47 port 42226
Oct  1 07:52:33 nativespace-cdp sshd[17833]: input_userauth_request: invalid user daniel [preauth]
Oct  1 07:52:33 nativespace-cdp sshd[17833]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:52:33 nativespace-cdp sshd[17833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 07:52:35 nativespace-cdp sshd[17833]: Failed password for invalid user daniel from 45.121.147.47 port 42226 ssh2
Oct  1 07:52:35 nativespace-cdp sshd[17833]: Received disconnect from 45.121.147.47 port 42226:11: Bye Bye [preauth]
Oct  1 07:52:35 nativespace-cdp sshd[17833]: Disconnected from 45.121.147.47 port 42226 [preauth]
Oct  1 07:53:00 nativespace-cdp sshd[17960]: Invalid user administrator from 223.197.186.7 port 48312
Oct  1 07:53:00 nativespace-cdp sshd[17960]: input_userauth_request: invalid user administrator [preauth]
Oct  1 07:53:00 nativespace-cdp sshd[17960]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:53:00 nativespace-cdp sshd[17960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 07:53:02 nativespace-cdp sshd[17960]: Failed password for invalid user administrator from 223.197.186.7 port 48312 ssh2
Oct  1 07:53:02 nativespace-cdp sshd[17960]: Received disconnect from 223.197.186.7 port 48312:11: Bye Bye [preauth]
Oct  1 07:53:02 nativespace-cdp sshd[17960]: Disconnected from 223.197.186.7 port 48312 [preauth]
Oct  1 07:53:04 nativespace-cdp sshd[18008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 07:53:04 nativespace-cdp sshd[18008]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:53:06 nativespace-cdp sshd[18008]: Failed password for root from 170.0.235.253 port 40420 ssh2
Oct  1 07:53:06 nativespace-cdp sshd[18008]: Received disconnect from 170.0.235.253 port 40420:11: Bye Bye [preauth]
Oct  1 07:53:06 nativespace-cdp sshd[18008]: Disconnected from 170.0.235.253 port 40420 [preauth]
Oct  1 07:53:19 nativespace-cdp sshd[18044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 07:53:19 nativespace-cdp sshd[18044]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:53:21 nativespace-cdp sshd[18044]: Failed password for root from 45.121.147.47 port 54648 ssh2
Oct  1 07:53:21 nativespace-cdp sshd[18044]: Received disconnect from 45.121.147.47 port 54648:11: Bye Bye [preauth]
Oct  1 07:53:21 nativespace-cdp sshd[18044]: Disconnected from 45.121.147.47 port 54648 [preauth]
Oct  1 07:53:47 nativespace-cdp sshd[18154]: Invalid user anand from 170.0.235.253 port 46602
Oct  1 07:53:47 nativespace-cdp sshd[18154]: input_userauth_request: invalid user anand [preauth]
Oct  1 07:53:47 nativespace-cdp sshd[18154]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:53:47 nativespace-cdp sshd[18154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 07:53:48 nativespace-cdp sshd[18165]: Invalid user basesystem from 223.197.186.7 port 60896
Oct  1 07:53:48 nativespace-cdp sshd[18165]: input_userauth_request: invalid user basesystem [preauth]
Oct  1 07:53:48 nativespace-cdp sshd[18165]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:53:48 nativespace-cdp sshd[18165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 07:53:49 nativespace-cdp sshd[18154]: Failed password for invalid user anand from 170.0.235.253 port 46602 ssh2
Oct  1 07:53:49 nativespace-cdp sshd[18154]: Received disconnect from 170.0.235.253 port 46602:11: Bye Bye [preauth]
Oct  1 07:53:49 nativespace-cdp sshd[18154]: Disconnected from 170.0.235.253 port 46602 [preauth]
Oct  1 07:53:51 nativespace-cdp sshd[18165]: Failed password for invalid user basesystem from 223.197.186.7 port 60896 ssh2
Oct  1 07:53:53 nativespace-cdp sshd[18165]: Received disconnect from 223.197.186.7 port 60896:11: Bye Bye [preauth]
Oct  1 07:53:53 nativespace-cdp sshd[18165]: Disconnected from 223.197.186.7 port 60896 [preauth]
Oct  1 07:54:02 nativespace-cdp sshd[18200]: Invalid user informix from 45.121.147.47 port 38828
Oct  1 07:54:02 nativespace-cdp sshd[18200]: input_userauth_request: invalid user informix [preauth]
Oct  1 07:54:02 nativespace-cdp sshd[18200]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:54:02 nativespace-cdp sshd[18200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 07:54:04 nativespace-cdp sshd[18200]: Failed password for invalid user informix from 45.121.147.47 port 38828 ssh2
Oct  1 07:54:06 nativespace-cdp sshd[18200]: Received disconnect from 45.121.147.47 port 38828:11: Bye Bye [preauth]
Oct  1 07:54:06 nativespace-cdp sshd[18200]: Disconnected from 45.121.147.47 port 38828 [preauth]
Oct  1 07:54:32 nativespace-cdp sshd[18278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=david
Oct  1 07:54:34 nativespace-cdp sshd[18278]: Failed password for david from 170.0.235.253 port 34684 ssh2
Oct  1 07:54:34 nativespace-cdp sshd[18278]: Received disconnect from 170.0.235.253 port 34684:11: Bye Bye [preauth]
Oct  1 07:54:34 nativespace-cdp sshd[18278]: Disconnected from 170.0.235.253 port 34684 [preauth]
Oct  1 07:54:42 nativespace-cdp sshd[18288]: Received disconnect from 223.197.186.7 port 45248:11: Bye Bye [preauth]
Oct  1 07:54:42 nativespace-cdp sshd[18288]: Disconnected from 223.197.186.7 port 45248 [preauth]
Oct  1 07:54:51 nativespace-cdp sshd[18328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 07:54:51 nativespace-cdp sshd[18328]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:54:53 nativespace-cdp sshd[18328]: Failed password for root from 45.121.147.47 port 51244 ssh2
Oct  1 07:54:53 nativespace-cdp sshd[18328]: Received disconnect from 45.121.147.47 port 51244:11: Bye Bye [preauth]
Oct  1 07:54:53 nativespace-cdp sshd[18328]: Disconnected from 45.121.147.47 port 51244 [preauth]
Oct  1 07:55:15 nativespace-cdp sshd[18509]: Connection closed by 170.0.235.253 port 45854 [preauth]
Oct  1 07:55:26 nativespace-cdp sshd[18604]: Invalid user xbmc from 223.197.186.7 port 57836
Oct  1 07:55:26 nativespace-cdp sshd[18604]: input_userauth_request: invalid user xbmc [preauth]
Oct  1 07:55:26 nativespace-cdp sshd[18604]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:55:26 nativespace-cdp sshd[18604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 07:55:28 nativespace-cdp sshd[18604]: Failed password for invalid user xbmc from 223.197.186.7 port 57836 ssh2
Oct  1 07:55:31 nativespace-cdp sshd[18604]: Received disconnect from 223.197.186.7 port 57836:11: Bye Bye [preauth]
Oct  1 07:55:31 nativespace-cdp sshd[18604]: Disconnected from 223.197.186.7 port 57836 [preauth]
Oct  1 07:55:32 nativespace-cdp sshd[18626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 07:55:32 nativespace-cdp sshd[18626]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:55:35 nativespace-cdp sshd[18626]: Failed password for root from 45.121.147.47 port 35438 ssh2
Oct  1 07:55:35 nativespace-cdp sshd[18626]: Received disconnect from 45.121.147.47 port 35438:11: Bye Bye [preauth]
Oct  1 07:55:35 nativespace-cdp sshd[18626]: Disconnected from 45.121.147.47 port 35438 [preauth]
Oct  1 07:55:54 nativespace-cdp sshd[18719]: Invalid user adminftp from 170.0.235.253 port 35504
Oct  1 07:55:54 nativespace-cdp sshd[18719]: input_userauth_request: invalid user adminftp [preauth]
Oct  1 07:55:54 nativespace-cdp sshd[18719]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:55:54 nativespace-cdp sshd[18719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 07:55:57 nativespace-cdp sshd[18719]: Failed password for invalid user adminftp from 170.0.235.253 port 35504 ssh2
Oct  1 07:55:59 nativespace-cdp sshd[18719]: Received disconnect from 170.0.235.253 port 35504:11: Bye Bye [preauth]
Oct  1 07:55:59 nativespace-cdp sshd[18719]: Disconnected from 170.0.235.253 port 35504 [preauth]
Oct  1 07:56:16 nativespace-cdp sshd[18798]: Invalid user admin from 223.197.186.7 port 42190
Oct  1 07:56:16 nativespace-cdp sshd[18798]: input_userauth_request: invalid user admin [preauth]
Oct  1 07:56:16 nativespace-cdp sshd[18798]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:56:16 nativespace-cdp sshd[18798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 07:56:18 nativespace-cdp sshd[18798]: Failed password for invalid user admin from 223.197.186.7 port 42190 ssh2
Oct  1 07:56:21 nativespace-cdp sshd[18798]: Received disconnect from 223.197.186.7 port 42190:11: Bye Bye [preauth]
Oct  1 07:56:21 nativespace-cdp sshd[18798]: Disconnected from 223.197.186.7 port 42190 [preauth]
Oct  1 07:56:26 nativespace-cdp sshd[18809]: Invalid user admin from 45.121.147.47 port 47860
Oct  1 07:56:26 nativespace-cdp sshd[18809]: input_userauth_request: invalid user admin [preauth]
Oct  1 07:56:26 nativespace-cdp sshd[18809]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:56:26 nativespace-cdp sshd[18809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 07:56:27 nativespace-cdp sshd[18809]: Failed password for invalid user admin from 45.121.147.47 port 47860 ssh2
Oct  1 07:56:28 nativespace-cdp sshd[18809]: Received disconnect from 45.121.147.47 port 47860:11: Bye Bye [preauth]
Oct  1 07:56:28 nativespace-cdp sshd[18809]: Disconnected from 45.121.147.47 port 47860 [preauth]
Oct  1 07:56:36 nativespace-cdp sshd[18928]: Connection closed by 159.100.136.21 port 35068 [preauth]
Oct  1 07:56:44 nativespace-cdp sshd[18938]: Invalid user administrator from 170.0.235.253 port 49878
Oct  1 07:56:44 nativespace-cdp sshd[18938]: input_userauth_request: invalid user administrator [preauth]
Oct  1 07:56:44 nativespace-cdp sshd[18938]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:56:44 nativespace-cdp sshd[18938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 07:56:46 nativespace-cdp sshd[18938]: Failed password for invalid user administrator from 170.0.235.253 port 49878 ssh2
Oct  1 07:56:46 nativespace-cdp sshd[18938]: Received disconnect from 170.0.235.253 port 49878:11: Bye Bye [preauth]
Oct  1 07:56:46 nativespace-cdp sshd[18938]: Disconnected from 170.0.235.253 port 49878 [preauth]
Oct  1 07:57:00 nativespace-cdp sshd[18973]: Invalid user nisec from 45.121.147.47 port 60272
Oct  1 07:57:00 nativespace-cdp sshd[18973]: input_userauth_request: invalid user nisec [preauth]
Oct  1 07:57:00 nativespace-cdp sshd[18973]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:57:00 nativespace-cdp sshd[18973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 07:57:02 nativespace-cdp sshd[18973]: Failed password for invalid user nisec from 45.121.147.47 port 60272 ssh2
Oct  1 07:57:02 nativespace-cdp sshd[18973]: Received disconnect from 45.121.147.47 port 60272:11: Bye Bye [preauth]
Oct  1 07:57:02 nativespace-cdp sshd[18973]: Disconnected from 45.121.147.47 port 60272 [preauth]
Oct  1 07:57:10 nativespace-cdp sshd[19015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 07:57:10 nativespace-cdp sshd[19015]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:57:11 nativespace-cdp sshd[19015]: Failed password for root from 223.197.186.7 port 54776 ssh2
Oct  1 07:57:12 nativespace-cdp sshd[19015]: Received disconnect from 223.197.186.7 port 54776:11: Bye Bye [preauth]
Oct  1 07:57:12 nativespace-cdp sshd[19015]: Disconnected from 223.197.186.7 port 54776 [preauth]
Oct  1 07:57:21 nativespace-cdp sshd[19056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 07:57:21 nativespace-cdp sshd[19056]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:57:23 nativespace-cdp sshd[19056]: Failed password for root from 170.0.235.253 port 42326 ssh2
Oct  1 07:57:23 nativespace-cdp sshd[19056]: Received disconnect from 170.0.235.253 port 42326:11: Bye Bye [preauth]
Oct  1 07:57:23 nativespace-cdp sshd[19056]: Disconnected from 170.0.235.253 port 42326 [preauth]
Oct  1 07:57:43 nativespace-cdp sshd[19136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 07:57:43 nativespace-cdp sshd[19136]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:57:45 nativespace-cdp sshd[19136]: Failed password for root from 45.121.147.47 port 44450 ssh2
Oct  1 07:57:46 nativespace-cdp sshd[19136]: Received disconnect from 45.121.147.47 port 44450:11: Bye Bye [preauth]
Oct  1 07:57:46 nativespace-cdp sshd[19136]: Disconnected from 45.121.147.47 port 44450 [preauth]
Oct  1 07:57:55 nativespace-cdp sshd[19159]: Invalid user admin from 223.197.186.7 port 39128
Oct  1 07:57:55 nativespace-cdp sshd[19159]: input_userauth_request: invalid user admin [preauth]
Oct  1 07:57:55 nativespace-cdp sshd[19159]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:57:55 nativespace-cdp sshd[19159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 07:57:56 nativespace-cdp sshd[19159]: Failed password for invalid user admin from 223.197.186.7 port 39128 ssh2
Oct  1 07:57:57 nativespace-cdp sshd[19159]: Received disconnect from 223.197.186.7 port 39128:11: Bye Bye [preauth]
Oct  1 07:57:57 nativespace-cdp sshd[19159]: Disconnected from 223.197.186.7 port 39128 [preauth]
Oct  1 07:58:02 nativespace-cdp sshd[19203]: Invalid user admin from 170.0.235.253 port 42450
Oct  1 07:58:02 nativespace-cdp sshd[19203]: input_userauth_request: invalid user admin [preauth]
Oct  1 07:58:02 nativespace-cdp sshd[19203]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:58:02 nativespace-cdp sshd[19203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 07:58:04 nativespace-cdp sshd[19203]: Failed password for invalid user admin from 170.0.235.253 port 42450 ssh2
Oct  1 07:58:04 nativespace-cdp sshd[19203]: Received disconnect from 170.0.235.253 port 42450:11: Bye Bye [preauth]
Oct  1 07:58:04 nativespace-cdp sshd[19203]: Disconnected from 170.0.235.253 port 42450 [preauth]
Oct  1 07:58:46 nativespace-cdp sshd[19315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 07:58:46 nativespace-cdp sshd[19315]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:58:46 nativespace-cdp sshd[19305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 07:58:46 nativespace-cdp sshd[19305]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:58:47 nativespace-cdp sshd[19318]: Invalid user server from 112.91.139.202 port 40733
Oct  1 07:58:47 nativespace-cdp sshd[19318]: input_userauth_request: invalid user server [preauth]
Oct  1 07:58:47 nativespace-cdp sshd[19318]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:58:47 nativespace-cdp sshd[19318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 07:58:48 nativespace-cdp sshd[19315]: Failed password for root from 223.197.186.7 port 51714 ssh2
Oct  1 07:58:48 nativespace-cdp sshd[19305]: Failed password for root from 170.0.235.253 port 52894 ssh2
Oct  1 07:58:48 nativespace-cdp sshd[19315]: Received disconnect from 223.197.186.7 port 51714:11: Bye Bye [preauth]
Oct  1 07:58:48 nativespace-cdp sshd[19315]: Disconnected from 223.197.186.7 port 51714 [preauth]
Oct  1 07:58:48 nativespace-cdp sshd[19305]: Received disconnect from 170.0.235.253 port 52894:11: Bye Bye [preauth]
Oct  1 07:58:48 nativespace-cdp sshd[19305]: Disconnected from 170.0.235.253 port 52894 [preauth]
Oct  1 07:58:48 nativespace-cdp sshd[19318]: Failed password for invalid user server from 112.91.139.202 port 40733 ssh2
Oct  1 07:58:49 nativespace-cdp sshd[19318]: Received disconnect from 112.91.139.202 port 40733:11: Bye Bye [preauth]
Oct  1 07:58:49 nativespace-cdp sshd[19318]: Disconnected from 112.91.139.202 port 40733 [preauth]
Oct  1 07:59:01 nativespace-cdp sshd[19169]: Connection closed by 112.91.139.202 port 35815 [preauth]
Oct  1 07:59:09 nativespace-cdp sshd[19379]: Connection closed by 45.121.147.47 port 41056 [preauth]
Oct  1 07:59:22 nativespace-cdp sshd[19405]: Invalid user nginx from 170.0.235.253 port 43972
Oct  1 07:59:22 nativespace-cdp sshd[19405]: input_userauth_request: invalid user nginx [preauth]
Oct  1 07:59:22 nativespace-cdp sshd[19405]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:59:22 nativespace-cdp sshd[19405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 07:59:24 nativespace-cdp sshd[19405]: Failed password for invalid user nginx from 170.0.235.253 port 43972 ssh2
Oct  1 07:59:24 nativespace-cdp sshd[19405]: Received disconnect from 170.0.235.253 port 43972:11: Bye Bye [preauth]
Oct  1 07:59:24 nativespace-cdp sshd[19405]: Disconnected from 170.0.235.253 port 43972 [preauth]
Oct  1 07:59:31 nativespace-cdp sshd[19415]: Invalid user debian from 112.91.139.202 port 45649
Oct  1 07:59:31 nativespace-cdp sshd[19415]: input_userauth_request: invalid user debian [preauth]
Oct  1 07:59:31 nativespace-cdp sshd[19415]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:59:31 nativespace-cdp sshd[19415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 07:59:32 nativespace-cdp sshd[19424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 07:59:32 nativespace-cdp sshd[19424]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 07:59:33 nativespace-cdp sshd[19415]: Failed password for invalid user debian from 112.91.139.202 port 45649 ssh2
Oct  1 07:59:34 nativespace-cdp sshd[19415]: Received disconnect from 112.91.139.202 port 45649:11: Bye Bye [preauth]
Oct  1 07:59:34 nativespace-cdp sshd[19415]: Disconnected from 112.91.139.202 port 45649 [preauth]
Oct  1 07:59:34 nativespace-cdp sshd[19424]: Failed password for root from 223.197.186.7 port 36068 ssh2
Oct  1 07:59:39 nativespace-cdp sshd[19424]: Received disconnect from 223.197.186.7 port 36068:11: Bye Bye [preauth]
Oct  1 07:59:39 nativespace-cdp sshd[19424]: Disconnected from 223.197.186.7 port 36068 [preauth]
Oct  1 07:59:47 nativespace-cdp sshd[19489]: Invalid user bkp from 45.121.147.47 port 53462
Oct  1 07:59:47 nativespace-cdp sshd[19489]: input_userauth_request: invalid user bkp [preauth]
Oct  1 07:59:47 nativespace-cdp sshd[19489]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 07:59:47 nativespace-cdp sshd[19489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 07:59:49 nativespace-cdp sshd[19489]: Failed password for invalid user bkp from 45.121.147.47 port 53462 ssh2
Oct  1 07:59:49 nativespace-cdp sshd[19489]: Received disconnect from 45.121.147.47 port 53462:11: Bye Bye [preauth]
Oct  1 07:59:49 nativespace-cdp sshd[19489]: Disconnected from 45.121.147.47 port 53462 [preauth]
Oct  1 08:00:07 nativespace-cdp sshd[19796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 08:00:07 nativespace-cdp sshd[19796]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:00:09 nativespace-cdp sshd[19796]: Failed password for root from 170.0.235.253 port 51496 ssh2
Oct  1 08:00:09 nativespace-cdp sshd[19796]: Received disconnect from 170.0.235.253 port 51496:11: Bye Bye [preauth]
Oct  1 08:00:09 nativespace-cdp sshd[19796]: Disconnected from 170.0.235.253 port 51496 [preauth]
Oct  1 08:00:11 nativespace-cdp sshd[19804]: Invalid user admin from 112.91.139.202 port 50566
Oct  1 08:00:11 nativespace-cdp sshd[19804]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:00:11 nativespace-cdp sshd[19804]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:00:11 nativespace-cdp sshd[19804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:00:13 nativespace-cdp sshd[19804]: Failed password for invalid user admin from 112.91.139.202 port 50566 ssh2
Oct  1 08:00:15 nativespace-cdp sshd[19804]: Received disconnect from 112.91.139.202 port 50566:11: Bye Bye [preauth]
Oct  1 08:00:15 nativespace-cdp sshd[19804]: Disconnected from 112.91.139.202 port 50566 [preauth]
Oct  1 08:00:25 nativespace-cdp sshd[19823]: Invalid user debianuser from 223.197.186.7 port 48652
Oct  1 08:00:25 nativespace-cdp sshd[19823]: input_userauth_request: invalid user debianuser [preauth]
Oct  1 08:00:25 nativespace-cdp sshd[19823]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:00:25 nativespace-cdp sshd[19823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:00:28 nativespace-cdp sshd[19823]: Failed password for invalid user debianuser from 223.197.186.7 port 48652 ssh2
Oct  1 08:00:28 nativespace-cdp sshd[19823]: Received disconnect from 223.197.186.7 port 48652:11: Bye Bye [preauth]
Oct  1 08:00:28 nativespace-cdp sshd[19823]: Disconnected from 223.197.186.7 port 48652 [preauth]
Oct  1 08:00:29 nativespace-cdp sshd[19846]: Invalid user admin from 45.121.147.47 port 37644
Oct  1 08:00:29 nativespace-cdp sshd[19846]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:00:29 nativespace-cdp sshd[19846]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:00:29 nativespace-cdp sshd[19846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:00:31 nativespace-cdp sshd[19846]: Failed password for invalid user admin from 45.121.147.47 port 37644 ssh2
Oct  1 08:00:31 nativespace-cdp sshd[19846]: Received disconnect from 45.121.147.47 port 37644:11: Bye Bye [preauth]
Oct  1 08:00:31 nativespace-cdp sshd[19846]: Disconnected from 45.121.147.47 port 37644 [preauth]
Oct  1 08:00:49 nativespace-cdp sshd[19972]: Invalid user admin from 170.0.235.253 port 59998
Oct  1 08:00:49 nativespace-cdp sshd[19972]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:00:49 nativespace-cdp sshd[19972]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:00:49 nativespace-cdp sshd[19972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:00:51 nativespace-cdp sshd[19972]: Failed password for invalid user admin from 170.0.235.253 port 59998 ssh2
Oct  1 08:00:52 nativespace-cdp sshd[19972]: Received disconnect from 170.0.235.253 port 59998:11: Bye Bye [preauth]
Oct  1 08:00:52 nativespace-cdp sshd[19972]: Disconnected from 170.0.235.253 port 59998 [preauth]
Oct  1 08:00:53 nativespace-cdp sshd[19982]: Invalid user admin from 112.91.139.202 port 55480
Oct  1 08:00:53 nativespace-cdp sshd[19982]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:00:53 nativespace-cdp sshd[19982]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:00:53 nativespace-cdp sshd[19982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:00:54 nativespace-cdp sshd[19982]: Failed password for invalid user admin from 112.91.139.202 port 55480 ssh2
Oct  1 08:00:58 nativespace-cdp sshd[19982]: Received disconnect from 112.91.139.202 port 55480:11: Bye Bye [preauth]
Oct  1 08:00:58 nativespace-cdp sshd[19982]: Disconnected from 112.91.139.202 port 55480 [preauth]
Oct  1 08:01:10 nativespace-cdp sshd[20041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 08:01:10 nativespace-cdp sshd[20041]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:01:12 nativespace-cdp sshd[20048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=david
Oct  1 08:01:12 nativespace-cdp sshd[20041]: Failed password for root from 45.121.147.47 port 50064 ssh2
Oct  1 08:01:13 nativespace-cdp sshd[20041]: Received disconnect from 45.121.147.47 port 50064:11: Bye Bye [preauth]
Oct  1 08:01:13 nativespace-cdp sshd[20041]: Disconnected from 45.121.147.47 port 50064 [preauth]
Oct  1 08:01:14 nativespace-cdp sshd[20048]: Failed password for david from 223.197.186.7 port 33006 ssh2
Oct  1 08:01:14 nativespace-cdp sshd[20048]: Received disconnect from 223.197.186.7 port 33006:11: Bye Bye [preauth]
Oct  1 08:01:14 nativespace-cdp sshd[20048]: Disconnected from 223.197.186.7 port 33006 [preauth]
Oct  1 08:01:33 nativespace-cdp sshd[20099]: Invalid user cassandra from 170.0.235.253 port 60716
Oct  1 08:01:33 nativespace-cdp sshd[20099]: input_userauth_request: invalid user cassandra [preauth]
Oct  1 08:01:33 nativespace-cdp sshd[20099]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:01:33 nativespace-cdp sshd[20099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:01:33 nativespace-cdp sshd[20168]: Connection closed by 159.100.136.21 port 44554 [preauth]
Oct  1 08:01:35 nativespace-cdp sshd[20099]: Failed password for invalid user cassandra from 170.0.235.253 port 60716 ssh2
Oct  1 08:01:39 nativespace-cdp sshd[20099]: Received disconnect from 170.0.235.253 port 60716:11: Bye Bye [preauth]
Oct  1 08:01:39 nativespace-cdp sshd[20099]: Disconnected from 170.0.235.253 port 60716 [preauth]
Oct  1 08:01:40 nativespace-cdp sshd[20198]: Connection closed by 112.91.139.202 port 60395 [preauth]
Oct  1 08:01:56 nativespace-cdp sshd[20252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 08:01:56 nativespace-cdp sshd[20252]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:01:58 nativespace-cdp sshd[20252]: Failed password for root from 45.121.147.47 port 34242 ssh2
Oct  1 08:01:58 nativespace-cdp sshd[20252]: Received disconnect from 45.121.147.47 port 34242:11: Bye Bye [preauth]
Oct  1 08:01:58 nativespace-cdp sshd[20252]: Disconnected from 45.121.147.47 port 34242 [preauth]
Oct  1 08:02:04 nativespace-cdp sshd[20294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 08:02:04 nativespace-cdp sshd[20294]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:02:06 nativespace-cdp sshd[20294]: Failed password for root from 223.197.186.7 port 45592 ssh2
Oct  1 08:02:06 nativespace-cdp sshd[20294]: Received disconnect from 223.197.186.7 port 45592:11: Bye Bye [preauth]
Oct  1 08:02:06 nativespace-cdp sshd[20294]: Disconnected from 223.197.186.7 port 45592 [preauth]
Oct  1 08:02:17 nativespace-cdp sshd[20339]: Invalid user administrator from 170.0.235.253 port 52646
Oct  1 08:02:17 nativespace-cdp sshd[20339]: input_userauth_request: invalid user administrator [preauth]
Oct  1 08:02:17 nativespace-cdp sshd[20339]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:02:17 nativespace-cdp sshd[20339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:02:18 nativespace-cdp sshd[20349]: Invalid user administrator from 112.91.139.202 port 37077
Oct  1 08:02:18 nativespace-cdp sshd[20349]: input_userauth_request: invalid user administrator [preauth]
Oct  1 08:02:18 nativespace-cdp sshd[20349]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:02:18 nativespace-cdp sshd[20349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:02:19 nativespace-cdp sshd[20339]: Failed password for invalid user administrator from 170.0.235.253 port 52646 ssh2
Oct  1 08:02:19 nativespace-cdp sshd[20339]: Received disconnect from 170.0.235.253 port 52646:11: Bye Bye [preauth]
Oct  1 08:02:19 nativespace-cdp sshd[20339]: Disconnected from 170.0.235.253 port 52646 [preauth]
Oct  1 08:02:21 nativespace-cdp sshd[20349]: Failed password for invalid user administrator from 112.91.139.202 port 37077 ssh2
Oct  1 08:02:24 nativespace-cdp sshd[20349]: Received disconnect from 112.91.139.202 port 37077:11: Bye Bye [preauth]
Oct  1 08:02:24 nativespace-cdp sshd[20349]: Disconnected from 112.91.139.202 port 37077 [preauth]
Oct  1 08:02:47 nativespace-cdp sshd[20417]: Connection closed by 45.121.147.47 port 46662 [preauth]
Oct  1 08:02:56 nativespace-cdp sshd[20454]: Invalid user administrator from 223.197.186.7 port 58178
Oct  1 08:02:56 nativespace-cdp sshd[20454]: input_userauth_request: invalid user administrator [preauth]
Oct  1 08:02:56 nativespace-cdp sshd[20454]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:02:56 nativespace-cdp sshd[20454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:02:58 nativespace-cdp sshd[20454]: Failed password for invalid user administrator from 223.197.186.7 port 58178 ssh2
Oct  1 08:02:58 nativespace-cdp sshd[20454]: Received disconnect from 223.197.186.7 port 58178:11: Bye Bye [preauth]
Oct  1 08:02:58 nativespace-cdp sshd[20454]: Disconnected from 223.197.186.7 port 58178 [preauth]
Oct  1 08:02:58 nativespace-cdp sshd[20466]: Invalid user admin from 170.0.235.253 port 59036
Oct  1 08:02:58 nativespace-cdp sshd[20466]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:02:58 nativespace-cdp sshd[20466]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:02:58 nativespace-cdp sshd[20466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:03:01 nativespace-cdp sshd[20466]: Failed password for invalid user admin from 170.0.235.253 port 59036 ssh2
Oct  1 08:03:01 nativespace-cdp sshd[20466]: Received disconnect from 170.0.235.253 port 59036:11: Bye Bye [preauth]
Oct  1 08:03:01 nativespace-cdp sshd[20466]: Disconnected from 170.0.235.253 port 59036 [preauth]
Oct  1 08:03:01 nativespace-cdp sshd[20480]: Invalid user dasusr1 from 112.91.139.202 port 41993
Oct  1 08:03:01 nativespace-cdp sshd[20480]: input_userauth_request: invalid user dasusr1 [preauth]
Oct  1 08:03:01 nativespace-cdp sshd[20480]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:03:01 nativespace-cdp sshd[20480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:03:03 nativespace-cdp sshd[20480]: Failed password for invalid user dasusr1 from 112.91.139.202 port 41993 ssh2
Oct  1 08:03:03 nativespace-cdp sshd[20480]: Received disconnect from 112.91.139.202 port 41993:11: Bye Bye [preauth]
Oct  1 08:03:03 nativespace-cdp sshd[20480]: Disconnected from 112.91.139.202 port 41993 [preauth]
Oct  1 08:03:25 nativespace-cdp sshd[20545]: Invalid user admin from 45.121.147.47 port 59080
Oct  1 08:03:25 nativespace-cdp sshd[20545]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:03:25 nativespace-cdp sshd[20545]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:03:25 nativespace-cdp sshd[20545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:03:27 nativespace-cdp sshd[20545]: Failed password for invalid user admin from 45.121.147.47 port 59080 ssh2
Oct  1 08:03:27 nativespace-cdp sshd[20545]: Received disconnect from 45.121.147.47 port 59080:11: Bye Bye [preauth]
Oct  1 08:03:27 nativespace-cdp sshd[20545]: Disconnected from 45.121.147.47 port 59080 [preauth]
Oct  1 08:03:43 nativespace-cdp sshd[20595]: Invalid user informix from 170.0.235.253 port 47522
Oct  1 08:03:43 nativespace-cdp sshd[20595]: input_userauth_request: invalid user informix [preauth]
Oct  1 08:03:43 nativespace-cdp sshd[20595]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:03:43 nativespace-cdp sshd[20595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:03:43 nativespace-cdp sshd[20600]: Invalid user server from 223.197.186.7 port 42532
Oct  1 08:03:43 nativespace-cdp sshd[20600]: input_userauth_request: invalid user server [preauth]
Oct  1 08:03:43 nativespace-cdp sshd[20600]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:03:43 nativespace-cdp sshd[20600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:03:44 nativespace-cdp sshd[20605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=root
Oct  1 08:03:44 nativespace-cdp sshd[20605]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:03:45 nativespace-cdp sshd[20595]: Failed password for invalid user informix from 170.0.235.253 port 47522 ssh2
Oct  1 08:03:45 nativespace-cdp sshd[20595]: Received disconnect from 170.0.235.253 port 47522:11: Bye Bye [preauth]
Oct  1 08:03:45 nativespace-cdp sshd[20595]: Disconnected from 170.0.235.253 port 47522 [preauth]
Oct  1 08:03:46 nativespace-cdp sshd[20600]: Failed password for invalid user server from 223.197.186.7 port 42532 ssh2
Oct  1 08:03:46 nativespace-cdp sshd[20600]: Received disconnect from 223.197.186.7 port 42532:11: Bye Bye [preauth]
Oct  1 08:03:46 nativespace-cdp sshd[20600]: Disconnected from 223.197.186.7 port 42532 [preauth]
Oct  1 08:03:46 nativespace-cdp sshd[20605]: Failed password for root from 112.91.139.202 port 46906 ssh2
Oct  1 08:03:46 nativespace-cdp sshd[20605]: Received disconnect from 112.91.139.202 port 46906:11: Bye Bye [preauth]
Oct  1 08:03:46 nativespace-cdp sshd[20605]: Disconnected from 112.91.139.202 port 46906 [preauth]
Oct  1 08:04:08 nativespace-cdp sshd[20751]: Invalid user administrator from 45.121.147.47 port 43270
Oct  1 08:04:08 nativespace-cdp sshd[20751]: input_userauth_request: invalid user administrator [preauth]
Oct  1 08:04:08 nativespace-cdp sshd[20751]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:04:08 nativespace-cdp sshd[20751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:04:10 nativespace-cdp sshd[20751]: Failed password for invalid user administrator from 45.121.147.47 port 43270 ssh2
Oct  1 08:04:10 nativespace-cdp sshd[20751]: Received disconnect from 45.121.147.47 port 43270:11: Bye Bye [preauth]
Oct  1 08:04:10 nativespace-cdp sshd[20751]: Disconnected from 45.121.147.47 port 43270 [preauth]
Oct  1 08:04:22 nativespace-cdp sshd[20780]: Invalid user daniel from 112.91.139.202 port 51820
Oct  1 08:04:22 nativespace-cdp sshd[20780]: input_userauth_request: invalid user daniel [preauth]
Oct  1 08:04:22 nativespace-cdp sshd[20780]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:04:22 nativespace-cdp sshd[20780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:04:24 nativespace-cdp sshd[20780]: Failed password for invalid user daniel from 112.91.139.202 port 51820 ssh2
Oct  1 08:04:24 nativespace-cdp sshd[20780]: Received disconnect from 112.91.139.202 port 51820:11: Bye Bye [preauth]
Oct  1 08:04:24 nativespace-cdp sshd[20780]: Disconnected from 112.91.139.202 port 51820 [preauth]
Oct  1 08:04:31 nativespace-cdp sshd[20791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=david
Oct  1 08:04:32 nativespace-cdp sshd[20791]: Failed password for david from 170.0.235.253 port 47888 ssh2
Oct  1 08:04:33 nativespace-cdp sshd[20791]: Received disconnect from 170.0.235.253 port 47888:11: Bye Bye [preauth]
Oct  1 08:04:33 nativespace-cdp sshd[20791]: Disconnected from 170.0.235.253 port 47888 [preauth]
Oct  1 08:04:54 nativespace-cdp sshd[20879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 08:04:54 nativespace-cdp sshd[20879]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:04:56 nativespace-cdp sshd[20879]: Failed password for root from 45.121.147.47 port 55674 ssh2
Oct  1 08:04:56 nativespace-cdp sshd[20879]: Received disconnect from 45.121.147.47 port 55674:11: Bye Bye [preauth]
Oct  1 08:04:56 nativespace-cdp sshd[20879]: Disconnected from 45.121.147.47 port 55674 [preauth]
Oct  1 08:05:06 nativespace-cdp sshd[20960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=root
Oct  1 08:05:06 nativespace-cdp sshd[20960]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:05:07 nativespace-cdp sshd[20960]: Failed password for root from 112.91.139.202 port 56733 ssh2
Oct  1 08:05:09 nativespace-cdp sshd[20960]: Connection reset by 112.91.139.202 port 56733 [preauth]
Oct  1 08:05:10 nativespace-cdp sshd[21127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 08:05:10 nativespace-cdp sshd[21127]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:05:12 nativespace-cdp sshd[21127]: Failed password for root from 170.0.235.253 port 50268 ssh2
Oct  1 08:05:12 nativespace-cdp sshd[21127]: Received disconnect from 170.0.235.253 port 50268:11: Bye Bye [preauth]
Oct  1 08:05:12 nativespace-cdp sshd[21127]: Disconnected from 170.0.235.253 port 50268 [preauth]
Oct  1 08:05:17 nativespace-cdp sshd[21146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 08:05:17 nativespace-cdp sshd[21146]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:05:19 nativespace-cdp sshd[21146]: Failed password for root from 223.197.186.7 port 39470 ssh2
Oct  1 08:05:19 nativespace-cdp sshd[21146]: Received disconnect from 223.197.186.7 port 39470:11: Bye Bye [preauth]
Oct  1 08:05:19 nativespace-cdp sshd[21146]: Disconnected from 223.197.186.7 port 39470 [preauth]
Oct  1 08:05:41 nativespace-cdp sshd[21197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 08:05:41 nativespace-cdp sshd[21197]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:05:43 nativespace-cdp sshd[21197]: Failed password for root from 45.121.147.47 port 39870 ssh2
Oct  1 08:05:43 nativespace-cdp sshd[21197]: Received disconnect from 45.121.147.47 port 39870:11: Bye Bye [preauth]
Oct  1 08:05:43 nativespace-cdp sshd[21197]: Disconnected from 45.121.147.47 port 39870 [preauth]
Oct  1 08:05:44 nativespace-cdp sshd[21215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=root
Oct  1 08:05:44 nativespace-cdp sshd[21215]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:05:46 nativespace-cdp sshd[21215]: Failed password for root from 112.91.139.202 port 33415 ssh2
Oct  1 08:05:46 nativespace-cdp sshd[21215]: Received disconnect from 112.91.139.202 port 33415:11: Bye Bye [preauth]
Oct  1 08:05:46 nativespace-cdp sshd[21215]: Disconnected from 112.91.139.202 port 33415 [preauth]
Oct  1 08:05:50 nativespace-cdp sshd[21231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 08:05:50 nativespace-cdp sshd[21231]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:05:52 nativespace-cdp sshd[21231]: Failed password for root from 170.0.235.253 port 52988 ssh2
Oct  1 08:05:52 nativespace-cdp sshd[21231]: Received disconnect from 170.0.235.253 port 52988:11: Bye Bye [preauth]
Oct  1 08:05:52 nativespace-cdp sshd[21231]: Disconnected from 170.0.235.253 port 52988 [preauth]
Oct  1 08:06:04 nativespace-cdp sshd[21266]: Invalid user admin from 223.197.186.7 port 52054
Oct  1 08:06:04 nativespace-cdp sshd[21266]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:06:04 nativespace-cdp sshd[21266]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:06:04 nativespace-cdp sshd[21266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:06:06 nativespace-cdp sshd[21266]: Failed password for invalid user admin from 223.197.186.7 port 52054 ssh2
Oct  1 08:06:09 nativespace-cdp sshd[21266]: Received disconnect from 223.197.186.7 port 52054:11: Bye Bye [preauth]
Oct  1 08:06:09 nativespace-cdp sshd[21266]: Disconnected from 223.197.186.7 port 52054 [preauth]
Oct  1 08:06:20 nativespace-cdp sshd[21294]: Invalid user adminftp from 45.121.147.47 port 52284
Oct  1 08:06:20 nativespace-cdp sshd[21294]: input_userauth_request: invalid user adminftp [preauth]
Oct  1 08:06:20 nativespace-cdp sshd[21294]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:06:20 nativespace-cdp sshd[21294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:06:22 nativespace-cdp sshd[21294]: Failed password for invalid user adminftp from 45.121.147.47 port 52284 ssh2
Oct  1 08:06:22 nativespace-cdp sshd[21294]: Received disconnect from 45.121.147.47 port 52284:11: Bye Bye [preauth]
Oct  1 08:06:22 nativespace-cdp sshd[21294]: Disconnected from 45.121.147.47 port 52284 [preauth]
Oct  1 08:06:25 nativespace-cdp sshd[21316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=root
Oct  1 08:06:25 nativespace-cdp sshd[21316]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:06:27 nativespace-cdp sshd[21316]: Failed password for root from 112.91.139.202 port 38329 ssh2
Oct  1 08:06:33 nativespace-cdp sshd[21331]: Connection closed by 159.100.136.21 port 53922 [preauth]
Oct  1 08:06:35 nativespace-cdp sshd[21373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 08:06:35 nativespace-cdp sshd[21373]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:06:35 nativespace-cdp sshd[21316]: Received disconnect from 112.91.139.202 port 38329:11: Bye Bye [preauth]
Oct  1 08:06:35 nativespace-cdp sshd[21316]: Disconnected from 112.91.139.202 port 38329 [preauth]
Oct  1 08:06:36 nativespace-cdp sshd[21373]: Failed password for root from 170.0.235.253 port 45702 ssh2
Oct  1 08:06:36 nativespace-cdp sshd[21373]: Received disconnect from 170.0.235.253 port 45702:11: Bye Bye [preauth]
Oct  1 08:06:36 nativespace-cdp sshd[21373]: Disconnected from 170.0.235.253 port 45702 [preauth]
Oct  1 08:06:54 nativespace-cdp sshd[21465]: Invalid user cacti from 223.197.186.7 port 36408
Oct  1 08:06:54 nativespace-cdp sshd[21465]: input_userauth_request: invalid user cacti [preauth]
Oct  1 08:06:54 nativespace-cdp sshd[21465]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:06:54 nativespace-cdp sshd[21465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:06:56 nativespace-cdp sshd[21465]: Failed password for invalid user cacti from 223.197.186.7 port 36408 ssh2
Oct  1 08:06:56 nativespace-cdp sshd[21465]: Received disconnect from 223.197.186.7 port 36408:11: Bye Bye [preauth]
Oct  1 08:06:56 nativespace-cdp sshd[21465]: Disconnected from 223.197.186.7 port 36408 [preauth]
Oct  1 08:07:04 nativespace-cdp sshd[21501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 08:07:04 nativespace-cdp sshd[21501]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:07:06 nativespace-cdp sshd[21501]: Failed password for root from 45.121.147.47 port 36480 ssh2
Oct  1 08:07:06 nativespace-cdp sshd[21501]: Received disconnect from 45.121.147.47 port 36480:11: Bye Bye [preauth]
Oct  1 08:07:06 nativespace-cdp sshd[21501]: Disconnected from 45.121.147.47 port 36480 [preauth]
Oct  1 08:07:08 nativespace-cdp sshd[21512]: Invalid user chris from 112.91.139.202 port 43244
Oct  1 08:07:08 nativespace-cdp sshd[21512]: input_userauth_request: invalid user chris [preauth]
Oct  1 08:07:08 nativespace-cdp sshd[21512]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:07:08 nativespace-cdp sshd[21512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:07:10 nativespace-cdp sshd[21512]: Failed password for invalid user chris from 112.91.139.202 port 43244 ssh2
Oct  1 08:07:12 nativespace-cdp sshd[21512]: Received disconnect from 112.91.139.202 port 43244:11: Bye Bye [preauth]
Oct  1 08:07:12 nativespace-cdp sshd[21512]: Disconnected from 112.91.139.202 port 43244 [preauth]
Oct  1 08:07:18 nativespace-cdp sshd[21534]: Invalid user admin from 170.0.235.253 port 51548
Oct  1 08:07:18 nativespace-cdp sshd[21534]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:07:18 nativespace-cdp sshd[21534]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:07:18 nativespace-cdp sshd[21534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:07:20 nativespace-cdp sshd[21534]: Failed password for invalid user admin from 170.0.235.253 port 51548 ssh2
Oct  1 08:07:23 nativespace-cdp sshd[21534]: Received disconnect from 170.0.235.253 port 51548:11: Bye Bye [preauth]
Oct  1 08:07:23 nativespace-cdp sshd[21534]: Disconnected from 170.0.235.253 port 51548 [preauth]
Oct  1 08:07:51 nativespace-cdp sshd[21613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 08:07:51 nativespace-cdp sshd[21613]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:07:51 nativespace-cdp sshd[21618]: Invalid user bkp from 112.91.139.202 port 48160
Oct  1 08:07:51 nativespace-cdp sshd[21618]: input_userauth_request: invalid user bkp [preauth]
Oct  1 08:07:51 nativespace-cdp sshd[21618]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:07:51 nativespace-cdp sshd[21618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:07:54 nativespace-cdp sshd[21613]: Failed password for root from 45.121.147.47 port 48880 ssh2
Oct  1 08:07:54 nativespace-cdp sshd[21618]: Failed password for invalid user bkp from 112.91.139.202 port 48160 ssh2
Oct  1 08:07:54 nativespace-cdp sshd[21618]: Received disconnect from 112.91.139.202 port 48160:11: Bye Bye [preauth]
Oct  1 08:07:54 nativespace-cdp sshd[21618]: Disconnected from 112.91.139.202 port 48160 [preauth]
Oct  1 08:07:54 nativespace-cdp sshd[21613]: Received disconnect from 45.121.147.47 port 48880:11: Bye Bye [preauth]
Oct  1 08:07:54 nativespace-cdp sshd[21613]: Disconnected from 45.121.147.47 port 48880 [preauth]
Oct  1 08:08:02 nativespace-cdp sshd[21696]: Invalid user admin from 170.0.235.253 port 55284
Oct  1 08:08:02 nativespace-cdp sshd[21696]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:08:02 nativespace-cdp sshd[21696]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:08:02 nativespace-cdp sshd[21696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:08:05 nativespace-cdp sshd[21696]: Failed password for invalid user admin from 170.0.235.253 port 55284 ssh2
Oct  1 08:08:12 nativespace-cdp sshd[21696]: Received disconnect from 170.0.235.253 port 55284:11: Bye Bye [preauth]
Oct  1 08:08:12 nativespace-cdp sshd[21696]: Disconnected from 170.0.235.253 port 55284 [preauth]
Oct  1 08:08:32 nativespace-cdp sshd[21765]: Invalid user admin from 45.121.147.47 port 33066
Oct  1 08:08:32 nativespace-cdp sshd[21765]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:08:32 nativespace-cdp sshd[21765]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:08:32 nativespace-cdp sshd[21765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:08:34 nativespace-cdp sshd[21776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=root
Oct  1 08:08:34 nativespace-cdp sshd[21776]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:08:34 nativespace-cdp sshd[21774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 08:08:34 nativespace-cdp sshd[21774]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:08:34 nativespace-cdp sshd[21765]: Failed password for invalid user admin from 45.121.147.47 port 33066 ssh2
Oct  1 08:08:34 nativespace-cdp sshd[21765]: Received disconnect from 45.121.147.47 port 33066:11: Bye Bye [preauth]
Oct  1 08:08:34 nativespace-cdp sshd[21765]: Disconnected from 45.121.147.47 port 33066 [preauth]
Oct  1 08:08:37 nativespace-cdp sshd[21776]: Failed password for root from 112.91.139.202 port 53075 ssh2
Oct  1 08:08:37 nativespace-cdp sshd[21774]: Failed password for root from 223.197.186.7 port 33348 ssh2
Oct  1 08:08:38 nativespace-cdp sshd[21774]: Received disconnect from 223.197.186.7 port 33348:11: Bye Bye [preauth]
Oct  1 08:08:38 nativespace-cdp sshd[21774]: Disconnected from 223.197.186.7 port 33348 [preauth]
Oct  1 08:08:38 nativespace-cdp sshd[21776]: Received disconnect from 112.91.139.202 port 53075:11: Bye Bye [preauth]
Oct  1 08:08:38 nativespace-cdp sshd[21776]: Disconnected from 112.91.139.202 port 53075 [preauth]
Oct  1 08:08:45 nativespace-cdp sshd[21812]: Invalid user basesystem from 170.0.235.253 port 42286
Oct  1 08:08:45 nativespace-cdp sshd[21812]: input_userauth_request: invalid user basesystem [preauth]
Oct  1 08:08:45 nativespace-cdp sshd[21812]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:08:45 nativespace-cdp sshd[21812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:08:48 nativespace-cdp sshd[21812]: Failed password for invalid user basesystem from 170.0.235.253 port 42286 ssh2
Oct  1 08:08:50 nativespace-cdp sshd[21812]: Received disconnect from 170.0.235.253 port 42286:11: Bye Bye [preauth]
Oct  1 08:08:50 nativespace-cdp sshd[21812]: Disconnected from 170.0.235.253 port 42286 [preauth]
Oct  1 08:09:16 nativespace-cdp sshd[21902]: Invalid user anand from 112.91.139.202 port 57989
Oct  1 08:09:16 nativespace-cdp sshd[21902]: input_userauth_request: invalid user anand [preauth]
Oct  1 08:09:16 nativespace-cdp sshd[21902]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:09:16 nativespace-cdp sshd[21902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:09:18 nativespace-cdp sshd[21902]: Failed password for invalid user anand from 112.91.139.202 port 57989 ssh2
Oct  1 08:09:18 nativespace-cdp sshd[21909]: Invalid user basesystem from 45.121.147.47 port 45488
Oct  1 08:09:18 nativespace-cdp sshd[21909]: input_userauth_request: invalid user basesystem [preauth]
Oct  1 08:09:18 nativespace-cdp sshd[21909]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:09:18 nativespace-cdp sshd[21909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:09:18 nativespace-cdp sshd[21902]: Received disconnect from 112.91.139.202 port 57989:11: Bye Bye [preauth]
Oct  1 08:09:18 nativespace-cdp sshd[21902]: Disconnected from 112.91.139.202 port 57989 [preauth]
Oct  1 08:09:20 nativespace-cdp sshd[21909]: Failed password for invalid user basesystem from 45.121.147.47 port 45488 ssh2
Oct  1 08:09:20 nativespace-cdp sshd[21909]: Received disconnect from 45.121.147.47 port 45488:11: Bye Bye [preauth]
Oct  1 08:09:20 nativespace-cdp sshd[21909]: Disconnected from 45.121.147.47 port 45488 [preauth]
Oct  1 08:09:23 nativespace-cdp sshd[21921]: Invalid user debian from 223.197.186.7 port 45934
Oct  1 08:09:23 nativespace-cdp sshd[21921]: input_userauth_request: invalid user debian [preauth]
Oct  1 08:09:23 nativespace-cdp sshd[21921]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:09:23 nativespace-cdp sshd[21921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:09:25 nativespace-cdp sshd[21921]: Failed password for invalid user debian from 223.197.186.7 port 45934 ssh2
Oct  1 08:09:25 nativespace-cdp sshd[21921]: Received disconnect from 223.197.186.7 port 45934:11: Bye Bye [preauth]
Oct  1 08:09:25 nativespace-cdp sshd[21921]: Disconnected from 223.197.186.7 port 45934 [preauth]
Oct  1 08:09:27 nativespace-cdp sshd[21942]: Invalid user debianuser from 170.0.235.253 port 46390
Oct  1 08:09:27 nativespace-cdp sshd[21942]: input_userauth_request: invalid user debianuser [preauth]
Oct  1 08:09:27 nativespace-cdp sshd[21942]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:09:27 nativespace-cdp sshd[21942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:09:29 nativespace-cdp sshd[21942]: Failed password for invalid user debianuser from 170.0.235.253 port 46390 ssh2
Oct  1 08:09:29 nativespace-cdp sshd[21942]: Received disconnect from 170.0.235.253 port 46390:11: Bye Bye [preauth]
Oct  1 08:09:29 nativespace-cdp sshd[21942]: Disconnected from 170.0.235.253 port 46390 [preauth]
Oct  1 08:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 08:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:53 nativespace-cdp sudo[22008]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 08:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:53 nativespace-cdp sudo[22011]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 08:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:54 nativespace-cdp sudo[22014]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 08:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:54 nativespace-cdp sudo[22020]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 08:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:57 nativespace-cdp sudo[22023]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:57 nativespace-cdp sudo[22034]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:57 nativespace-cdp sudo[22037]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:57 nativespace-cdp sudo[22040]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:57 nativespace-cdp sudo[22043]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:57 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 08:09:57 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:58 nativespace-cdp sudo[22047]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 08:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:58 nativespace-cdp sudo[22050]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:59 nativespace-cdp sshd[22059]: Invalid user debian from 45.121.147.47 port 57894
Oct  1 08:09:59 nativespace-cdp sshd[22059]: input_userauth_request: invalid user debian [preauth]
Oct  1 08:09:59 nativespace-cdp sshd[22059]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:09:59 nativespace-cdp sshd[22059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:09:59 nativespace-cdp sudo[22083]: pam_unix(sudo:session): session closed for user root
Oct  1 08:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 08:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:10:00 nativespace-cdp sshd[22028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=root
Oct  1 08:10:00 nativespace-cdp sshd[22028]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:10:00 nativespace-cdp sudo[22089]: pam_unix(sudo:session): session closed for user root
Oct  1 08:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sarafoundation user-2=atestord user-3=strathar user-4=brmrjxl user-5=lakesan1 user-6=musorguk user-7=megacards user-8=wilsonsw user-9=ptkxhsbt user-10=dickemery123 user-11=martsblo user-12=magichat user-13=lbhyisi user-14=hhdugcor user-15=maflemin user-16=lbscrmod user-17=athenare user-18=connect9 user-19=vantagep user-20=booff user-21=markward user-22=foundation user-23=ulsukarm user-24=hodgesonweb user-25=theblack user-26=spectrum user-27=jarvisin user-28=leereyn1 user-29=stephani user-30=still user-31=agproduc user-32=battlere user-33=oneoarco user-34=firstre2 user-35=vivienn1 user-36=brighto1 user-37=nstriton user-38=bemadonn user-39=belle user-40=ggaaorgu user-41=newstoda user-42=bedfords user-43=alexadmin user-44=skyfirec user-45=nativene user-46=stuartge user-47=askhform user-48=innovat1
Oct  1 08:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=coursemc user-50=opaiscyx user-51=firstres user-52=jonhartl user-53=seftvta user-54=ultbcrra user-55=southlon user-56=highlegh user-57=firstred user-58=costestimatorco user-59=clarkass user-60=firstrel user-61=carsinyo user-62=fetch user-63=hubmaster user-64=elecleis user-65=gilpin user-66=milloyco user-67=thqkgnbz user-68=connectedshoppin user-69=ianrayne user-70=accooper user-71=philmcph user-72=ctedorgu user-73=steakbridieme user-74=firstre5 user-75=donnychicago user-76=lkpier user-77=fortunaz user-78=health2045 user-79=foods user-80=leftie user-81=nscdp user-82=barbersh user-83=tigerlet user-84=hidden user-85=nomistakes user-86=smrszyqg user-87=isleofwi user-88=pugwash user-89=paulmca1 user-90=howardon user-91=cwsocial user-92=reliable user-93=ninejimm user-94=cambria1 user-95=cathski user-96=courseme user-97=eugincou user-98=hirefootballgame user-99=asandcoc user-100=sibtoncc user-101=steve
Oct  1 08:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=zebrapho user-103=bwppodcast user-104=nsceres user-105=burydropin user-106=fawcettd user-107=dhyana user-108=eatspam user-109=darkstar user-110=beauty user-111=boldover user-112=nove user-113=sosevalu user-114=crrtipdl user-115=bakery user-116=nvihkvu user-117=sketchy user-118=cath user-119=havantho user-120=what user-121=tstardom user-122=oubpgvbx user-123=design user-124=kategilpin user-125=ladburyp user-126=dancinggardener user-127=stagingerris user-128=jennimil user-129=tomandle user-130=nbhavers user-131=careers user-132=david user-133=mcdermos user-134=chrisdal user-135=onlycont user-136=attlebor user-137=lucy user-138=romaldki user-139=branko user-140=outdoorc user-141=ranxterc user-142=hodgsonmail feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 08:10:00 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 08:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:10:01 nativespace-cdp sshd[22059]: Failed password for invalid user debian from 45.121.147.47 port 57894 ssh2
Oct  1 08:10:01 nativespace-cdp sshd[22059]: Received disconnect from 45.121.147.47 port 57894:11: Bye Bye [preauth]
Oct  1 08:10:01 nativespace-cdp sshd[22059]: Disconnected from 45.121.147.47 port 57894 [preauth]
Oct  1 08:10:01 nativespace-cdp sudo[22093]: pam_unix(sudo:session): session closed for user root
Oct  1 08:10:01 nativespace-cdp sshd[22028]: Failed password for root from 112.91.139.202 port 34669 ssh2
Oct  1 08:10:01 nativespace-cdp sshd[22028]: Received disconnect from 112.91.139.202 port 34669:11: Bye Bye [preauth]
Oct  1 08:10:01 nativespace-cdp sshd[22028]: Disconnected from 112.91.139.202 port 34669 [preauth]
Oct  1 08:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 08:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:10:01 nativespace-cdp sudo[22206]: pam_unix(sudo:session): session closed for user root
Oct  1 08:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5C6f57QcOsq7bDli.~
Oct  1 08:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:10:01 nativespace-cdp sudo[22216]: pam_unix(sudo:session): session closed for user root
Oct  1 08:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5C6f57QcOsq7bDli.~'
Oct  1 08:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:10:02 nativespace-cdp sudo[22219]: pam_unix(sudo:session): session closed for user root
Oct  1 08:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-5C6f57QcOsq7bDli.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 08:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:10:02 nativespace-cdp sudo[22301]: pam_unix(sudo:session): session closed for user root
Oct  1 08:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 08:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:10:02 nativespace-cdp sudo[22316]: pam_unix(sudo:session): session closed for user root
Oct  1 08:10:09 nativespace-cdp sshd[22411]: Invalid user debian from 170.0.235.253 port 32954
Oct  1 08:10:09 nativespace-cdp sshd[22411]: input_userauth_request: invalid user debian [preauth]
Oct  1 08:10:09 nativespace-cdp sshd[22411]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:10:09 nativespace-cdp sshd[22411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:10:11 nativespace-cdp sshd[22411]: Failed password for invalid user debian from 170.0.235.253 port 32954 ssh2
Oct  1 08:10:11 nativespace-cdp sshd[22411]: Received disconnect from 170.0.235.253 port 32954:11: Bye Bye [preauth]
Oct  1 08:10:11 nativespace-cdp sshd[22411]: Disconnected from 170.0.235.253 port 32954 [preauth]
Oct  1 08:10:12 nativespace-cdp sshd[22422]: Invalid user admin from 223.197.186.7 port 58520
Oct  1 08:10:12 nativespace-cdp sshd[22422]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:10:12 nativespace-cdp sshd[22422]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:10:12 nativespace-cdp sshd[22422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:10:14 nativespace-cdp sshd[22422]: Failed password for invalid user admin from 223.197.186.7 port 58520 ssh2
Oct  1 08:10:14 nativespace-cdp sshd[22422]: Received disconnect from 223.197.186.7 port 58520:11: Bye Bye [preauth]
Oct  1 08:10:14 nativespace-cdp sshd[22422]: Disconnected from 223.197.186.7 port 58520 [preauth]
Oct  1 08:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 08:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 08:10:22 nativespace-cdp sudo[22464]: pam_unix(sudo:session): session closed for user root
Oct  1 08:10:37 nativespace-cdp sshd[22497]: Invalid user admin from 112.91.139.202 port 39583
Oct  1 08:10:37 nativespace-cdp sshd[22497]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:10:37 nativespace-cdp sshd[22497]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:10:37 nativespace-cdp sshd[22497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:10:38 nativespace-cdp sshd[22497]: Failed password for invalid user admin from 112.91.139.202 port 39583 ssh2
Oct  1 08:10:39 nativespace-cdp sshd[22497]: Received disconnect from 112.91.139.202 port 39583:11: Bye Bye [preauth]
Oct  1 08:10:39 nativespace-cdp sshd[22497]: Disconnected from 112.91.139.202 port 39583 [preauth]
Oct  1 08:10:41 nativespace-cdp sshd[22513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 08:10:41 nativespace-cdp sshd[22513]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:10:42 nativespace-cdp sshd[22513]: Failed password for root from 45.121.147.47 port 42082 ssh2
Oct  1 08:10:42 nativespace-cdp sshd[22513]: Received disconnect from 45.121.147.47 port 42082:11: Bye Bye [preauth]
Oct  1 08:10:42 nativespace-cdp sshd[22513]: Disconnected from 45.121.147.47 port 42082 [preauth]
Oct  1 08:10:50 nativespace-cdp sshd[22533]: Invalid user daniel from 170.0.235.253 port 56928
Oct  1 08:10:50 nativespace-cdp sshd[22533]: input_userauth_request: invalid user daniel [preauth]
Oct  1 08:10:50 nativespace-cdp sshd[22533]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:10:50 nativespace-cdp sshd[22533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:10:52 nativespace-cdp sshd[22533]: Failed password for invalid user daniel from 170.0.235.253 port 56928 ssh2
Oct  1 08:10:52 nativespace-cdp sshd[22533]: Received disconnect from 170.0.235.253 port 56928:11: Bye Bye [preauth]
Oct  1 08:10:52 nativespace-cdp sshd[22533]: Disconnected from 170.0.235.253 port 56928 [preauth]
Oct  1 08:11:00 nativespace-cdp sshd[22553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 08:11:00 nativespace-cdp sshd[22553]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:11:02 nativespace-cdp sshd[22553]: Failed password for root from 223.197.186.7 port 42872 ssh2
Oct  1 08:11:02 nativespace-cdp sshd[22553]: Received disconnect from 223.197.186.7 port 42872:11: Bye Bye [preauth]
Oct  1 08:11:02 nativespace-cdp sshd[22553]: Disconnected from 223.197.186.7 port 42872 [preauth]
Oct  1 08:11:18 nativespace-cdp sshd[22639]: Invalid user admin from 112.91.139.202 port 44497
Oct  1 08:11:18 nativespace-cdp sshd[22639]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:11:18 nativespace-cdp sshd[22639]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:11:18 nativespace-cdp sshd[22639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:11:20 nativespace-cdp sshd[22639]: Failed password for invalid user admin from 112.91.139.202 port 44497 ssh2
Oct  1 08:11:23 nativespace-cdp sshd[22639]: Received disconnect from 112.91.139.202 port 44497:11: Bye Bye [preauth]
Oct  1 08:11:23 nativespace-cdp sshd[22639]: Disconnected from 112.91.139.202 port 44497 [preauth]
Oct  1 08:11:25 nativespace-cdp sshd[22658]: Invalid user chris from 45.121.147.47 port 54490
Oct  1 08:11:25 nativespace-cdp sshd[22658]: input_userauth_request: invalid user chris [preauth]
Oct  1 08:11:25 nativespace-cdp sshd[22658]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:11:25 nativespace-cdp sshd[22658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:11:27 nativespace-cdp sshd[22658]: Failed password for invalid user chris from 45.121.147.47 port 54490 ssh2
Oct  1 08:11:27 nativespace-cdp sshd[22658]: Received disconnect from 45.121.147.47 port 54490:11: Bye Bye [preauth]
Oct  1 08:11:27 nativespace-cdp sshd[22658]: Disconnected from 45.121.147.47 port 54490 [preauth]
Oct  1 08:11:33 nativespace-cdp sshd[22674]: Connection closed by 159.100.136.21 port 34776 [preauth]
Oct  1 08:11:34 nativespace-cdp sshd[22671]: Invalid user admin from 170.0.235.253 port 37300
Oct  1 08:11:34 nativespace-cdp sshd[22671]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:11:34 nativespace-cdp sshd[22671]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:11:34 nativespace-cdp sshd[22671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:11:36 nativespace-cdp sshd[22671]: Failed password for invalid user admin from 170.0.235.253 port 37300 ssh2
Oct  1 08:11:36 nativespace-cdp sshd[22671]: Received disconnect from 170.0.235.253 port 37300:11: Bye Bye [preauth]
Oct  1 08:11:36 nativespace-cdp sshd[22671]: Disconnected from 170.0.235.253 port 37300 [preauth]
Oct  1 08:11:48 nativespace-cdp sshd[22794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 08:11:48 nativespace-cdp sshd[22794]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:11:50 nativespace-cdp sshd[22794]: Failed password for root from 223.197.186.7 port 55456 ssh2
Oct  1 08:11:50 nativespace-cdp sshd[22794]: Received disconnect from 223.197.186.7 port 55456:11: Bye Bye [preauth]
Oct  1 08:11:50 nativespace-cdp sshd[22794]: Disconnected from 223.197.186.7 port 55456 [preauth]
Oct  1 08:11:59 nativespace-cdp sshd[22814]: Invalid user xbmc from 112.91.139.202 port 49412
Oct  1 08:11:59 nativespace-cdp sshd[22814]: input_userauth_request: invalid user xbmc [preauth]
Oct  1 08:11:59 nativespace-cdp sshd[22814]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:11:59 nativespace-cdp sshd[22814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:12:01 nativespace-cdp sshd[22814]: Failed password for invalid user xbmc from 112.91.139.202 port 49412 ssh2
Oct  1 08:12:01 nativespace-cdp sshd[22814]: Received disconnect from 112.91.139.202 port 49412:11: Bye Bye [preauth]
Oct  1 08:12:01 nativespace-cdp sshd[22814]: Disconnected from 112.91.139.202 port 49412 [preauth]
Oct  1 08:12:08 nativespace-cdp sshd[22852]: Invalid user admin from 45.121.147.47 port 38670
Oct  1 08:12:08 nativespace-cdp sshd[22852]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:12:08 nativespace-cdp sshd[22852]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:12:08 nativespace-cdp sshd[22852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:12:09 nativespace-cdp sshd[22852]: Failed password for invalid user admin from 45.121.147.47 port 38670 ssh2
Oct  1 08:12:10 nativespace-cdp sshd[22852]: Received disconnect from 45.121.147.47 port 38670:11: Bye Bye [preauth]
Oct  1 08:12:10 nativespace-cdp sshd[22852]: Disconnected from 45.121.147.47 port 38670 [preauth]
Oct  1 08:12:17 nativespace-cdp sshd[22897]: Connection closed by 170.0.235.253 port 57924 [preauth]
Oct  1 08:12:42 nativespace-cdp sshd[22989]: Invalid user dasusr1 from 223.197.186.7 port 39816
Oct  1 08:12:42 nativespace-cdp sshd[22989]: input_userauth_request: invalid user dasusr1 [preauth]
Oct  1 08:12:42 nativespace-cdp sshd[22989]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:12:42 nativespace-cdp sshd[22989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:12:43 nativespace-cdp sshd[23003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=root
Oct  1 08:12:43 nativespace-cdp sshd[23003]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:12:44 nativespace-cdp sshd[22989]: Failed password for invalid user dasusr1 from 223.197.186.7 port 39816 ssh2
Oct  1 08:12:45 nativespace-cdp sshd[23003]: Failed password for root from 112.91.139.202 port 54328 ssh2
Oct  1 08:12:45 nativespace-cdp sshd[22989]: Received disconnect from 223.197.186.7 port 39816:11: Bye Bye [preauth]
Oct  1 08:12:45 nativespace-cdp sshd[22989]: Disconnected from 223.197.186.7 port 39816 [preauth]
Oct  1 08:12:45 nativespace-cdp sshd[23003]: Received disconnect from 112.91.139.202 port 54328:11: Bye Bye [preauth]
Oct  1 08:12:45 nativespace-cdp sshd[23003]: Disconnected from 112.91.139.202 port 54328 [preauth]
Oct  1 08:12:47 nativespace-cdp sshd[23023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=david
Oct  1 08:12:48 nativespace-cdp sshd[23023]: Failed password for david from 45.121.147.47 port 51082 ssh2
Oct  1 08:12:49 nativespace-cdp sshd[23023]: Received disconnect from 45.121.147.47 port 51082:11: Bye Bye [preauth]
Oct  1 08:12:49 nativespace-cdp sshd[23023]: Disconnected from 45.121.147.47 port 51082 [preauth]
Oct  1 08:12:55 nativespace-cdp sshd[23085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 08:12:55 nativespace-cdp sshd[23085]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:12:57 nativespace-cdp sshd[23085]: Failed password for root from 170.0.235.253 port 43302 ssh2
Oct  1 08:12:57 nativespace-cdp sshd[23085]: Received disconnect from 170.0.235.253 port 43302:11: Bye Bye [preauth]
Oct  1 08:12:57 nativespace-cdp sshd[23085]: Disconnected from 170.0.235.253 port 43302 [preauth]
Oct  1 08:13:24 nativespace-cdp sshd[23292]: Invalid user adminftp from 112.91.139.202 port 59241
Oct  1 08:13:24 nativespace-cdp sshd[23292]: input_userauth_request: invalid user adminftp [preauth]
Oct  1 08:13:24 nativespace-cdp sshd[23292]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:13:24 nativespace-cdp sshd[23292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:13:26 nativespace-cdp sshd[23292]: Failed password for invalid user adminftp from 112.91.139.202 port 59241 ssh2
Oct  1 08:13:29 nativespace-cdp sshd[23292]: Received disconnect from 112.91.139.202 port 59241:11: Bye Bye [preauth]
Oct  1 08:13:29 nativespace-cdp sshd[23292]: Disconnected from 112.91.139.202 port 59241 [preauth]
Oct  1 08:13:30 nativespace-cdp sshd[23336]: Invalid user anand from 45.121.147.47 port 35264
Oct  1 08:13:30 nativespace-cdp sshd[23336]: input_userauth_request: invalid user anand [preauth]
Oct  1 08:13:30 nativespace-cdp sshd[23336]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:13:30 nativespace-cdp sshd[23336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:13:31 nativespace-cdp sshd[23341]: Invalid user daniel from 223.197.186.7 port 52400
Oct  1 08:13:31 nativespace-cdp sshd[23341]: input_userauth_request: invalid user daniel [preauth]
Oct  1 08:13:31 nativespace-cdp sshd[23341]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:13:31 nativespace-cdp sshd[23341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:13:32 nativespace-cdp sshd[23336]: Failed password for invalid user anand from 45.121.147.47 port 35264 ssh2
Oct  1 08:13:33 nativespace-cdp sshd[23341]: Failed password for invalid user daniel from 223.197.186.7 port 52400 ssh2
Oct  1 08:13:33 nativespace-cdp sshd[23336]: Received disconnect from 45.121.147.47 port 35264:11: Bye Bye [preauth]
Oct  1 08:13:33 nativespace-cdp sshd[23336]: Disconnected from 45.121.147.47 port 35264 [preauth]
Oct  1 08:13:33 nativespace-cdp sshd[23341]: Received disconnect from 223.197.186.7 port 52400:11: Bye Bye [preauth]
Oct  1 08:13:33 nativespace-cdp sshd[23341]: Disconnected from 223.197.186.7 port 52400 [preauth]
Oct  1 08:13:42 nativespace-cdp sshd[23411]: Invalid user chris from 170.0.235.253 port 57384
Oct  1 08:13:42 nativespace-cdp sshd[23411]: input_userauth_request: invalid user chris [preauth]
Oct  1 08:13:42 nativespace-cdp sshd[23411]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:13:42 nativespace-cdp sshd[23411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:13:44 nativespace-cdp sshd[23411]: Failed password for invalid user chris from 170.0.235.253 port 57384 ssh2
Oct  1 08:13:44 nativespace-cdp sshd[23411]: Received disconnect from 170.0.235.253 port 57384:11: Bye Bye [preauth]
Oct  1 08:13:44 nativespace-cdp sshd[23411]: Disconnected from 170.0.235.253 port 57384 [preauth]
Oct  1 08:14:04 nativespace-cdp sshd[23542]: Invalid user admin from 112.91.139.202 port 35921
Oct  1 08:14:04 nativespace-cdp sshd[23542]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:14:04 nativespace-cdp sshd[23542]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:14:04 nativespace-cdp sshd[23542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:14:07 nativespace-cdp sshd[23542]: Failed password for invalid user admin from 112.91.139.202 port 35921 ssh2
Oct  1 08:14:07 nativespace-cdp sshd[23542]: Received disconnect from 112.91.139.202 port 35921:11: Bye Bye [preauth]
Oct  1 08:14:07 nativespace-cdp sshd[23542]: Disconnected from 112.91.139.202 port 35921 [preauth]
Oct  1 08:14:13 nativespace-cdp sshd[23604]: Invalid user user3 from 45.121.147.47 port 47686
Oct  1 08:14:13 nativespace-cdp sshd[23604]: input_userauth_request: invalid user user3 [preauth]
Oct  1 08:14:13 nativespace-cdp sshd[23604]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:14:13 nativespace-cdp sshd[23604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:14:15 nativespace-cdp sshd[23604]: Failed password for invalid user user3 from 45.121.147.47 port 47686 ssh2
Oct  1 08:14:15 nativespace-cdp sshd[23604]: Received disconnect from 45.121.147.47 port 47686:11: Bye Bye [preauth]
Oct  1 08:14:15 nativespace-cdp sshd[23604]: Disconnected from 45.121.147.47 port 47686 [preauth]
Oct  1 08:14:20 nativespace-cdp sshd[23685]: Invalid user student7 from 223.197.186.7 port 36752
Oct  1 08:14:20 nativespace-cdp sshd[23685]: input_userauth_request: invalid user student7 [preauth]
Oct  1 08:14:20 nativespace-cdp sshd[23685]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:14:20 nativespace-cdp sshd[23685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:14:21 nativespace-cdp sshd[23700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 08:14:21 nativespace-cdp sshd[23700]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:14:22 nativespace-cdp sshd[23685]: Failed password for invalid user student7 from 223.197.186.7 port 36752 ssh2
Oct  1 08:14:24 nativespace-cdp sshd[23700]: Failed password for root from 170.0.235.253 port 58450 ssh2
Oct  1 08:14:25 nativespace-cdp sshd[23685]: Received disconnect from 223.197.186.7 port 36752:11: Bye Bye [preauth]
Oct  1 08:14:25 nativespace-cdp sshd[23685]: Disconnected from 223.197.186.7 port 36752 [preauth]
Oct  1 08:14:26 nativespace-cdp sshd[23700]: Received disconnect from 170.0.235.253 port 58450:11: Bye Bye [preauth]
Oct  1 08:14:26 nativespace-cdp sshd[23700]: Disconnected from 170.0.235.253 port 58450 [preauth]
Oct  1 08:14:53 nativespace-cdp sshd[23884]: Connection closed by 112.91.139.202 port 40830 [preauth]
Oct  1 08:15:03 nativespace-cdp sshd[24022]: Connection closed by 45.121.147.47 port 60096 [preauth]
Oct  1 08:15:05 nativespace-cdp sshd[24080]: Invalid user bkp from 170.0.235.253 port 59400
Oct  1 08:15:05 nativespace-cdp sshd[24080]: input_userauth_request: invalid user bkp [preauth]
Oct  1 08:15:05 nativespace-cdp sshd[24080]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:15:05 nativespace-cdp sshd[24080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:15:07 nativespace-cdp sshd[24080]: Failed password for invalid user bkp from 170.0.235.253 port 59400 ssh2
Oct  1 08:15:07 nativespace-cdp sshd[24080]: Received disconnect from 170.0.235.253 port 59400:11: Bye Bye [preauth]
Oct  1 08:15:07 nativespace-cdp sshd[24080]: Disconnected from 170.0.235.253 port 59400 [preauth]
Oct  1 08:15:09 nativespace-cdp sshd[24099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=david
Oct  1 08:15:11 nativespace-cdp sshd[24099]: Failed password for david from 223.197.186.7 port 49340 ssh2
Oct  1 08:15:11 nativespace-cdp sshd[24099]: Received disconnect from 223.197.186.7 port 49340:11: Bye Bye [preauth]
Oct  1 08:15:11 nativespace-cdp sshd[24099]: Disconnected from 223.197.186.7 port 49340 [preauth]
Oct  1 08:15:26 nativespace-cdp sshd[24191]: Invalid user admin from 112.91.139.202 port 45741
Oct  1 08:15:26 nativespace-cdp sshd[24191]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:15:26 nativespace-cdp sshd[24191]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:15:26 nativespace-cdp sshd[24191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:15:28 nativespace-cdp sshd[24191]: Failed password for invalid user admin from 112.91.139.202 port 45741 ssh2
Oct  1 08:15:36 nativespace-cdp sshd[24191]: Received disconnect from 112.91.139.202 port 45741:11: Bye Bye [preauth]
Oct  1 08:15:36 nativespace-cdp sshd[24191]: Disconnected from 112.91.139.202 port 45741 [preauth]
Oct  1 08:15:44 nativespace-cdp sshd[24238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47  user=root
Oct  1 08:15:44 nativespace-cdp sshd[24238]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:15:45 nativespace-cdp sshd[24238]: Failed password for root from 45.121.147.47 port 44284 ssh2
Oct  1 08:15:45 nativespace-cdp sshd[24238]: Received disconnect from 45.121.147.47 port 44284:11: Bye Bye [preauth]
Oct  1 08:15:45 nativespace-cdp sshd[24238]: Disconnected from 45.121.147.47 port 44284 [preauth]
Oct  1 08:15:52 nativespace-cdp sshd[24249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 08:15:52 nativespace-cdp sshd[24249]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:15:54 nativespace-cdp sshd[24249]: Failed password for root from 170.0.235.253 port 43072 ssh2
Oct  1 08:15:54 nativespace-cdp sshd[24249]: Received disconnect from 170.0.235.253 port 43072:11: Bye Bye [preauth]
Oct  1 08:15:54 nativespace-cdp sshd[24249]: Disconnected from 170.0.235.253 port 43072 [preauth]
Oct  1 08:16:04 nativespace-cdp sshd[24293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=root
Oct  1 08:16:04 nativespace-cdp sshd[24293]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:16:06 nativespace-cdp sshd[24270]: Received disconnect from 223.197.186.7 port 33692:11: Bye Bye [preauth]
Oct  1 08:16:06 nativespace-cdp sshd[24270]: Disconnected from 223.197.186.7 port 33692 [preauth]
Oct  1 08:16:06 nativespace-cdp sshd[24293]: Failed password for root from 112.91.139.202 port 50653 ssh2
Oct  1 08:16:06 nativespace-cdp sshd[24293]: Received disconnect from 112.91.139.202 port 50653:11: Bye Bye [preauth]
Oct  1 08:16:06 nativespace-cdp sshd[24293]: Disconnected from 112.91.139.202 port 50653 [preauth]
Oct  1 08:16:28 nativespace-cdp sshd[24336]: Invalid user admin from 45.121.147.47 port 56698
Oct  1 08:16:28 nativespace-cdp sshd[24336]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:16:28 nativespace-cdp sshd[24336]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:16:28 nativespace-cdp sshd[24336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:16:30 nativespace-cdp sshd[24336]: Failed password for invalid user admin from 45.121.147.47 port 56698 ssh2
Oct  1 08:16:30 nativespace-cdp sshd[24336]: Received disconnect from 45.121.147.47 port 56698:11: Bye Bye [preauth]
Oct  1 08:16:30 nativespace-cdp sshd[24336]: Disconnected from 45.121.147.47 port 56698 [preauth]
Oct  1 08:16:34 nativespace-cdp sshd[24348]: Connection closed by 159.100.136.21 port 43562 [preauth]
Oct  1 08:16:36 nativespace-cdp sshd[24368]: Invalid user user3 from 170.0.235.253 port 46220
Oct  1 08:16:36 nativespace-cdp sshd[24368]: input_userauth_request: invalid user user3 [preauth]
Oct  1 08:16:36 nativespace-cdp sshd[24368]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:16:36 nativespace-cdp sshd[24368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:16:38 nativespace-cdp sshd[24368]: Failed password for invalid user user3 from 170.0.235.253 port 46220 ssh2
Oct  1 08:16:39 nativespace-cdp sshd[24368]: Received disconnect from 170.0.235.253 port 46220:11: Bye Bye [preauth]
Oct  1 08:16:39 nativespace-cdp sshd[24368]: Disconnected from 170.0.235.253 port 46220 [preauth]
Oct  1 08:16:47 nativespace-cdp sshd[24478]: Invalid user nisec from 112.91.139.202 port 55567
Oct  1 08:16:47 nativespace-cdp sshd[24478]: input_userauth_request: invalid user nisec [preauth]
Oct  1 08:16:47 nativespace-cdp sshd[24478]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:16:47 nativespace-cdp sshd[24478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:16:47 nativespace-cdp sshd[24481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 08:16:47 nativespace-cdp sshd[24481]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:16:49 nativespace-cdp sshd[24478]: Failed password for invalid user nisec from 112.91.139.202 port 55567 ssh2
Oct  1 08:16:49 nativespace-cdp sshd[24478]: Received disconnect from 112.91.139.202 port 55567:11: Bye Bye [preauth]
Oct  1 08:16:49 nativespace-cdp sshd[24478]: Disconnected from 112.91.139.202 port 55567 [preauth]
Oct  1 08:16:50 nativespace-cdp sshd[24481]: Failed password for root from 223.197.186.7 port 46278 ssh2
Oct  1 08:16:50 nativespace-cdp sshd[24481]: Received disconnect from 223.197.186.7 port 46278:11: Bye Bye [preauth]
Oct  1 08:16:50 nativespace-cdp sshd[24481]: Disconnected from 223.197.186.7 port 46278 [preauth]
Oct  1 08:17:10 nativespace-cdp sshd[24547]: Invalid user administrator from 45.121.147.47 port 40890
Oct  1 08:17:10 nativespace-cdp sshd[24547]: input_userauth_request: invalid user administrator [preauth]
Oct  1 08:17:10 nativespace-cdp sshd[24547]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:17:10 nativespace-cdp sshd[24547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:17:12 nativespace-cdp sshd[24547]: Failed password for invalid user administrator from 45.121.147.47 port 40890 ssh2
Oct  1 08:17:13 nativespace-cdp sshd[24547]: Received disconnect from 45.121.147.47 port 40890:11: Bye Bye [preauth]
Oct  1 08:17:13 nativespace-cdp sshd[24547]: Disconnected from 45.121.147.47 port 40890 [preauth]
Oct  1 08:17:21 nativespace-cdp sshd[24564]: Invalid user nisec from 170.0.235.253 port 43062
Oct  1 08:17:21 nativespace-cdp sshd[24564]: input_userauth_request: invalid user nisec [preauth]
Oct  1 08:17:21 nativespace-cdp sshd[24564]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:17:21 nativespace-cdp sshd[24564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253
Oct  1 08:17:22 nativespace-cdp sshd[24564]: Failed password for invalid user nisec from 170.0.235.253 port 43062 ssh2
Oct  1 08:17:22 nativespace-cdp sshd[24564]: Received disconnect from 170.0.235.253 port 43062:11: Bye Bye [preauth]
Oct  1 08:17:22 nativespace-cdp sshd[24564]: Disconnected from 170.0.235.253 port 43062 [preauth]
Oct  1 08:17:23 nativespace-cdp sshd[24576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=root
Oct  1 08:17:23 nativespace-cdp sshd[24576]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:17:26 nativespace-cdp sshd[24576]: Failed password for root from 112.91.139.202 port 60481 ssh2
Oct  1 08:17:27 nativespace-cdp sshd[24576]: Received disconnect from 112.91.139.202 port 60481:11: Bye Bye [preauth]
Oct  1 08:17:27 nativespace-cdp sshd[24576]: Disconnected from 112.91.139.202 port 60481 [preauth]
Oct  1 08:17:35 nativespace-cdp sshd[24621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 08:17:35 nativespace-cdp sshd[24621]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:17:37 nativespace-cdp sshd[24621]: Failed password for root from 223.197.186.7 port 58864 ssh2
Oct  1 08:17:38 nativespace-cdp sshd[24621]: Received disconnect from 223.197.186.7 port 58864:11: Bye Bye [preauth]
Oct  1 08:17:38 nativespace-cdp sshd[24621]: Disconnected from 223.197.186.7 port 58864 [preauth]
Oct  1 08:17:55 nativespace-cdp sshd[24668]: Invalid user cassandra from 45.121.147.47 port 53290
Oct  1 08:17:55 nativespace-cdp sshd[24668]: input_userauth_request: invalid user cassandra [preauth]
Oct  1 08:17:55 nativespace-cdp sshd[24668]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:17:55 nativespace-cdp sshd[24668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.121.147.47
Oct  1 08:17:57 nativespace-cdp sshd[24668]: Failed password for invalid user cassandra from 45.121.147.47 port 53290 ssh2
Oct  1 08:17:57 nativespace-cdp sshd[24668]: Received disconnect from 45.121.147.47 port 53290:11: Bye Bye [preauth]
Oct  1 08:17:57 nativespace-cdp sshd[24668]: Disconnected from 45.121.147.47 port 53290 [preauth]
Oct  1 08:17:59 nativespace-cdp sshd[24674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.235.253  user=root
Oct  1 08:17:59 nativespace-cdp sshd[24674]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:18:01 nativespace-cdp sshd[24674]: Failed password for root from 170.0.235.253 port 37070 ssh2
Oct  1 08:18:01 nativespace-cdp sshd[24674]: Received disconnect from 170.0.235.253 port 37070:11: Bye Bye [preauth]
Oct  1 08:18:01 nativespace-cdp sshd[24674]: Disconnected from 170.0.235.253 port 37070 [preauth]
Oct  1 08:18:05 nativespace-cdp sshd[24683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202  user=david
Oct  1 08:18:08 nativespace-cdp sshd[24683]: Failed password for david from 112.91.139.202 port 37161 ssh2
Oct  1 08:18:08 nativespace-cdp sshd[24683]: Received disconnect from 112.91.139.202 port 37161:11: Bye Bye [preauth]
Oct  1 08:18:08 nativespace-cdp sshd[24683]: Disconnected from 112.91.139.202 port 37161 [preauth]
Oct  1 08:18:24 nativespace-cdp sshd[24746]: Invalid user admin from 223.197.186.7 port 43216
Oct  1 08:18:24 nativespace-cdp sshd[24746]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:18:24 nativespace-cdp sshd[24746]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:18:24 nativespace-cdp sshd[24746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:18:26 nativespace-cdp sshd[24746]: Failed password for invalid user admin from 223.197.186.7 port 43216 ssh2
Oct  1 08:18:30 nativespace-cdp sshd[24746]: Received disconnect from 223.197.186.7 port 43216:11: Bye Bye [preauth]
Oct  1 08:18:30 nativespace-cdp sshd[24746]: Disconnected from 223.197.186.7 port 43216 [preauth]
Oct  1 08:18:42 nativespace-cdp sshd[24805]: Invalid user administrator from 112.91.139.202 port 42074
Oct  1 08:18:42 nativespace-cdp sshd[24805]: input_userauth_request: invalid user administrator [preauth]
Oct  1 08:18:42 nativespace-cdp sshd[24805]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:18:42 nativespace-cdp sshd[24805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.91.139.202
Oct  1 08:18:42 nativespace-cdp sshd[24798]: Connection closed by 45.121.147.47 port 37470 [preauth]
Oct  1 08:18:43 nativespace-cdp sshd[24805]: Failed password for invalid user administrator from 112.91.139.202 port 42074 ssh2
Oct  1 08:18:43 nativespace-cdp sshd[24805]: Received disconnect from 112.91.139.202 port 42074:11: Bye Bye [preauth]
Oct  1 08:18:43 nativespace-cdp sshd[24805]: Disconnected from 112.91.139.202 port 42074 [preauth]
Oct  1 08:19:16 nativespace-cdp sshd[24899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 08:19:16 nativespace-cdp sshd[24899]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:19:17 nativespace-cdp sshd[24899]: Failed password for root from 223.197.186.7 port 55804 ssh2
Oct  1 08:19:20 nativespace-cdp sshd[24899]: Received disconnect from 223.197.186.7 port 55804:11: Bye Bye [preauth]
Oct  1 08:19:20 nativespace-cdp sshd[24899]: Disconnected from 223.197.186.7 port 55804 [preauth]
Oct  1 08:20:05 nativespace-cdp sshd[25326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7  user=root
Oct  1 08:20:05 nativespace-cdp sshd[25326]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:20:08 nativespace-cdp sshd[25326]: Failed password for root from 223.197.186.7 port 40156 ssh2
Oct  1 08:20:08 nativespace-cdp sshd[25326]: Received disconnect from 223.197.186.7 port 40156:11: Bye Bye [preauth]
Oct  1 08:20:08 nativespace-cdp sshd[25326]: Disconnected from 223.197.186.7 port 40156 [preauth]
Oct  1 08:20:58 nativespace-cdp sshd[25568]: Invalid user admin from 223.197.186.7 port 52742
Oct  1 08:20:58 nativespace-cdp sshd[25568]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:20:58 nativespace-cdp sshd[25568]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:20:58 nativespace-cdp sshd[25568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.186.7
Oct  1 08:21:01 nativespace-cdp sshd[25568]: Failed password for invalid user admin from 223.197.186.7 port 52742 ssh2
Oct  1 08:21:01 nativespace-cdp sshd[25568]: Received disconnect from 223.197.186.7 port 52742:11: Bye Bye [preauth]
Oct  1 08:21:01 nativespace-cdp sshd[25568]: Disconnected from 223.197.186.7 port 52742 [preauth]
Oct  1 08:21:36 nativespace-cdp sshd[25657]: Connection closed by 159.100.136.21 port 52782 [preauth]
Oct  1 08:21:54 nativespace-cdp sshd[25770]: Connection closed by 223.197.186.7 port 37096 [preauth]
Oct  1 08:22:38 nativespace-cdp sshd[25884]: Connection closed by 223.197.186.7 port 49680 [preauth]
Oct  1 08:24:34 nativespace-cdp sshd[26246]: Invalid user deploy from 213.6.203.226 port 59256
Oct  1 08:24:34 nativespace-cdp sshd[26246]: input_userauth_request: invalid user deploy [preauth]
Oct  1 08:24:34 nativespace-cdp sshd[26246]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:24:34 nativespace-cdp sshd[26246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:24:36 nativespace-cdp sshd[26246]: Failed password for invalid user deploy from 213.6.203.226 port 59256 ssh2
Oct  1 08:24:38 nativespace-cdp sshd[26246]: Received disconnect from 213.6.203.226 port 59256:11: Bye Bye [preauth]
Oct  1 08:24:38 nativespace-cdp sshd[26246]: Disconnected from 213.6.203.226 port 59256 [preauth]
Oct  1 08:25:00 nativespace-cdp sshd[26321]: Invalid user superman from 146.190.143.102 port 42540
Oct  1 08:25:00 nativespace-cdp sshd[26321]: input_userauth_request: invalid user superman [preauth]
Oct  1 08:25:00 nativespace-cdp sshd[26321]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:25:00 nativespace-cdp sshd[26321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:25:02 nativespace-cdp sshd[26321]: Failed password for invalid user superman from 146.190.143.102 port 42540 ssh2
Oct  1 08:25:02 nativespace-cdp sshd[26321]: Received disconnect from 146.190.143.102 port 42540:11: Bye Bye [preauth]
Oct  1 08:25:02 nativespace-cdp sshd[26321]: Disconnected from 146.190.143.102 port 42540 [preauth]
Oct  1 08:26:34 nativespace-cdp sshd[26736]: Connection closed by 159.100.136.21 port 33694 [preauth]
Oct  1 08:26:45 nativespace-cdp sshd[26850]: Connection closed by 60.188.20.218 port 58754 [preauth]
Oct  1 08:27:13 nativespace-cdp sshd[26933]: Invalid user superman from 103.170.86.94 port 58538
Oct  1 08:27:13 nativespace-cdp sshd[26933]: input_userauth_request: invalid user superman [preauth]
Oct  1 08:27:13 nativespace-cdp sshd[26933]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:27:13 nativespace-cdp sshd[26933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:27:15 nativespace-cdp sshd[26933]: Failed password for invalid user superman from 103.170.86.94 port 58538 ssh2
Oct  1 08:27:15 nativespace-cdp sshd[26933]: Received disconnect from 103.170.86.94 port 58538:11: Bye Bye [preauth]
Oct  1 08:27:15 nativespace-cdp sshd[26933]: Disconnected from 103.170.86.94 port 58538 [preauth]
Oct  1 08:27:46 nativespace-cdp sshd[27013]: Invalid user test from 116.212.135.137 port 47854
Oct  1 08:27:46 nativespace-cdp sshd[27013]: input_userauth_request: invalid user test [preauth]
Oct  1 08:27:46 nativespace-cdp sshd[27013]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:27:46 nativespace-cdp sshd[27013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:27:48 nativespace-cdp sshd[27013]: Failed password for invalid user test from 116.212.135.137 port 47854 ssh2
Oct  1 08:27:48 nativespace-cdp sshd[27013]: Received disconnect from 116.212.135.137 port 47854:11: Bye Bye [preauth]
Oct  1 08:27:48 nativespace-cdp sshd[27013]: Disconnected from 116.212.135.137 port 47854 [preauth]
Oct  1 08:29:05 nativespace-cdp sshd[27205]: Invalid user test from 103.55.49.10 port 52488
Oct  1 08:29:05 nativespace-cdp sshd[27205]: input_userauth_request: invalid user test [preauth]
Oct  1 08:29:05 nativespace-cdp sshd[27205]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:29:05 nativespace-cdp sshd[27205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:29:07 nativespace-cdp sshd[27205]: Failed password for invalid user test from 103.55.49.10 port 52488 ssh2
Oct  1 08:29:07 nativespace-cdp sshd[27205]: Received disconnect from 103.55.49.10 port 52488:11: Bye Bye [preauth]
Oct  1 08:29:07 nativespace-cdp sshd[27205]: Disconnected from 103.55.49.10 port 52488 [preauth]
Oct  1 08:30:11 nativespace-cdp sshd[27523]: Invalid user user from 213.6.203.226 port 35794
Oct  1 08:30:11 nativespace-cdp sshd[27523]: input_userauth_request: invalid user user [preauth]
Oct  1 08:30:11 nativespace-cdp sshd[27523]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:30:11 nativespace-cdp sshd[27523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:30:14 nativespace-cdp sshd[27523]: Failed password for invalid user user from 213.6.203.226 port 35794 ssh2
Oct  1 08:30:14 nativespace-cdp sshd[27523]: Received disconnect from 213.6.203.226 port 35794:11: Bye Bye [preauth]
Oct  1 08:30:14 nativespace-cdp sshd[27523]: Disconnected from 213.6.203.226 port 35794 [preauth]
Oct  1 08:30:16 nativespace-cdp sshd[27539]: Invalid user ubuntu from 146.190.143.102 port 36290
Oct  1 08:30:16 nativespace-cdp sshd[27539]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:30:16 nativespace-cdp sshd[27539]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:30:16 nativespace-cdp sshd[27539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:30:18 nativespace-cdp sshd[27539]: Failed password for invalid user ubuntu from 146.190.143.102 port 36290 ssh2
Oct  1 08:30:19 nativespace-cdp sshd[27539]: Received disconnect from 146.190.143.102 port 36290:11: Bye Bye [preauth]
Oct  1 08:30:19 nativespace-cdp sshd[27539]: Disconnected from 146.190.143.102 port 36290 [preauth]
Oct  1 08:30:28 nativespace-cdp sshd[27561]: Invalid user test from 116.212.135.137 port 46798
Oct  1 08:30:28 nativespace-cdp sshd[27561]: input_userauth_request: invalid user test [preauth]
Oct  1 08:30:28 nativespace-cdp sshd[27561]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:30:28 nativespace-cdp sshd[27561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:30:30 nativespace-cdp sshd[27561]: Failed password for invalid user test from 116.212.135.137 port 46798 ssh2
Oct  1 08:30:32 nativespace-cdp sshd[27561]: Received disconnect from 116.212.135.137 port 46798:11: Bye Bye [preauth]
Oct  1 08:30:32 nativespace-cdp sshd[27561]: Disconnected from 116.212.135.137 port 46798 [preauth]
Oct  1 08:30:47 nativespace-cdp sshd[27604]: Connection closed by 103.170.86.94 port 40294 [preauth]
Oct  1 08:30:50 nativespace-cdp sshd[27626]: Invalid user ubuntu from 213.6.203.226 port 49127
Oct  1 08:30:50 nativespace-cdp sshd[27626]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:30:50 nativespace-cdp sshd[27626]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:30:50 nativespace-cdp sshd[27626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:30:52 nativespace-cdp sshd[27626]: Failed password for invalid user ubuntu from 213.6.203.226 port 49127 ssh2
Oct  1 08:30:52 nativespace-cdp sshd[27626]: Received disconnect from 213.6.203.226 port 49127:11: Bye Bye [preauth]
Oct  1 08:30:52 nativespace-cdp sshd[27626]: Disconnected from 213.6.203.226 port 49127 [preauth]
Oct  1 08:31:01 nativespace-cdp sshd[27717]: Invalid user ubuntu from 103.55.49.10 port 57774
Oct  1 08:31:01 nativespace-cdp sshd[27717]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:31:01 nativespace-cdp sshd[27717]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:31:01 nativespace-cdp sshd[27717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:31:03 nativespace-cdp sshd[27717]: Failed password for invalid user ubuntu from 103.55.49.10 port 57774 ssh2
Oct  1 08:31:03 nativespace-cdp sshd[27717]: Received disconnect from 103.55.49.10 port 57774:11: Bye Bye [preauth]
Oct  1 08:31:03 nativespace-cdp sshd[27717]: Disconnected from 103.55.49.10 port 57774 [preauth]
Oct  1 08:31:18 nativespace-cdp sshd[27781]: Invalid user superman from 116.212.135.137 port 43184
Oct  1 08:31:18 nativespace-cdp sshd[27781]: input_userauth_request: invalid user superman [preauth]
Oct  1 08:31:18 nativespace-cdp sshd[27781]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:31:18 nativespace-cdp sshd[27781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:31:21 nativespace-cdp sshd[27781]: Failed password for invalid user superman from 116.212.135.137 port 43184 ssh2
Oct  1 08:31:21 nativespace-cdp sshd[27781]: Received disconnect from 116.212.135.137 port 43184:11: Bye Bye [preauth]
Oct  1 08:31:21 nativespace-cdp sshd[27781]: Disconnected from 116.212.135.137 port 43184 [preauth]
Oct  1 08:31:32 nativespace-cdp sshd[27821]: Invalid user tomcat from 213.6.203.226 port 59514
Oct  1 08:31:32 nativespace-cdp sshd[27821]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 08:31:32 nativespace-cdp sshd[27821]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:31:32 nativespace-cdp sshd[27821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:31:32 nativespace-cdp sshd[27819]: Invalid user test from 103.170.86.94 port 50022
Oct  1 08:31:32 nativespace-cdp sshd[27819]: input_userauth_request: invalid user test [preauth]
Oct  1 08:31:32 nativespace-cdp sshd[27819]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:31:32 nativespace-cdp sshd[27819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:31:33 nativespace-cdp sshd[27826]: Connection closed by 159.100.136.21 port 43092 [preauth]
Oct  1 08:31:34 nativespace-cdp sshd[27821]: Failed password for invalid user tomcat from 213.6.203.226 port 59514 ssh2
Oct  1 08:31:34 nativespace-cdp sshd[27821]: Received disconnect from 213.6.203.226 port 59514:11: Bye Bye [preauth]
Oct  1 08:31:34 nativespace-cdp sshd[27821]: Disconnected from 213.6.203.226 port 59514 [preauth]
Oct  1 08:31:34 nativespace-cdp sshd[27819]: Failed password for invalid user test from 103.170.86.94 port 50022 ssh2
Oct  1 08:31:34 nativespace-cdp sshd[27819]: Received disconnect from 103.170.86.94 port 50022:11: Bye Bye [preauth]
Oct  1 08:31:34 nativespace-cdp sshd[27819]: Disconnected from 103.170.86.94 port 50022 [preauth]
Oct  1 08:32:06 nativespace-cdp sshd[27990]: Invalid user user from 116.212.135.137 port 52582
Oct  1 08:32:06 nativespace-cdp sshd[27990]: input_userauth_request: invalid user user [preauth]
Oct  1 08:32:06 nativespace-cdp sshd[27990]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:32:06 nativespace-cdp sshd[27990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:32:08 nativespace-cdp sshd[27990]: Failed password for invalid user user from 116.212.135.137 port 52582 ssh2
Oct  1 08:32:08 nativespace-cdp sshd[27990]: Received disconnect from 116.212.135.137 port 52582:11: Bye Bye [preauth]
Oct  1 08:32:08 nativespace-cdp sshd[27990]: Disconnected from 116.212.135.137 port 52582 [preauth]
Oct  1 08:32:11 nativespace-cdp sshd[28000]: Invalid user steam from 146.190.143.102 port 34876
Oct  1 08:32:11 nativespace-cdp sshd[28000]: input_userauth_request: invalid user steam [preauth]
Oct  1 08:32:11 nativespace-cdp sshd[28000]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:32:11 nativespace-cdp sshd[28000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:32:11 nativespace-cdp sshd[28002]: Invalid user usuario from 213.6.203.226 port 47447
Oct  1 08:32:11 nativespace-cdp sshd[28002]: input_userauth_request: invalid user usuario [preauth]
Oct  1 08:32:11 nativespace-cdp sshd[28002]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:32:11 nativespace-cdp sshd[28002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:32:13 nativespace-cdp sshd[28006]: Invalid user ubuntu from 103.170.86.94 port 52912
Oct  1 08:32:13 nativespace-cdp sshd[28006]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:32:13 nativespace-cdp sshd[28006]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:32:13 nativespace-cdp sshd[28006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:32:13 nativespace-cdp sshd[28000]: Failed password for invalid user steam from 146.190.143.102 port 34876 ssh2
Oct  1 08:32:14 nativespace-cdp sshd[28002]: Failed password for invalid user usuario from 213.6.203.226 port 47447 ssh2
Oct  1 08:32:15 nativespace-cdp sshd[28006]: Failed password for invalid user ubuntu from 103.170.86.94 port 52912 ssh2
Oct  1 08:32:17 nativespace-cdp sshd[28000]: Received disconnect from 146.190.143.102 port 34876:11: Bye Bye [preauth]
Oct  1 08:32:17 nativespace-cdp sshd[28000]: Disconnected from 146.190.143.102 port 34876 [preauth]
Oct  1 08:32:17 nativespace-cdp sshd[28006]: Received disconnect from 103.170.86.94 port 52912:11: Bye Bye [preauth]
Oct  1 08:32:17 nativespace-cdp sshd[28006]: Disconnected from 103.170.86.94 port 52912 [preauth]
Oct  1 08:32:18 nativespace-cdp sshd[28002]: Received disconnect from 213.6.203.226 port 47447:11: Bye Bye [preauth]
Oct  1 08:32:18 nativespace-cdp sshd[28002]: Disconnected from 213.6.203.226 port 47447 [preauth]
Oct  1 08:32:23 nativespace-cdp sshd[28079]: Invalid user test from 103.55.49.10 port 40750
Oct  1 08:32:23 nativespace-cdp sshd[28079]: input_userauth_request: invalid user test [preauth]
Oct  1 08:32:23 nativespace-cdp sshd[28079]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:32:23 nativespace-cdp sshd[28079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:32:26 nativespace-cdp sshd[28079]: Failed password for invalid user test from 103.55.49.10 port 40750 ssh2
Oct  1 08:32:29 nativespace-cdp sshd[28079]: Received disconnect from 103.55.49.10 port 40750:11: Bye Bye [preauth]
Oct  1 08:32:29 nativespace-cdp sshd[28079]: Disconnected from 103.55.49.10 port 40750 [preauth]
Oct  1 08:32:51 nativespace-cdp sshd[28216]: Invalid user tg from 213.6.203.226 port 59694
Oct  1 08:32:51 nativespace-cdp sshd[28216]: input_userauth_request: invalid user tg [preauth]
Oct  1 08:32:51 nativespace-cdp sshd[28216]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:32:51 nativespace-cdp sshd[28216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:32:53 nativespace-cdp sshd[28216]: Failed password for invalid user tg from 213.6.203.226 port 59694 ssh2
Oct  1 08:32:55 nativespace-cdp sshd[28216]: Received disconnect from 213.6.203.226 port 59694:11: Bye Bye [preauth]
Oct  1 08:32:55 nativespace-cdp sshd[28216]: Disconnected from 213.6.203.226 port 59694 [preauth]
Oct  1 08:32:59 nativespace-cdp sshd[28226]: Invalid user ubuntu from 103.170.86.94 port 51430
Oct  1 08:32:59 nativespace-cdp sshd[28226]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:32:59 nativespace-cdp sshd[28226]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:32:59 nativespace-cdp sshd[28226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:33:01 nativespace-cdp sshd[28226]: Failed password for invalid user ubuntu from 103.170.86.94 port 51430 ssh2
Oct  1 08:33:01 nativespace-cdp sshd[28226]: Received disconnect from 103.170.86.94 port 51430:11: Bye Bye [preauth]
Oct  1 08:33:01 nativespace-cdp sshd[28226]: Disconnected from 103.170.86.94 port 51430 [preauth]
Oct  1 08:33:34 nativespace-cdp sshd[28359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226  user=root
Oct  1 08:33:34 nativespace-cdp sshd[28359]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:33:36 nativespace-cdp sshd[28359]: Failed password for root from 213.6.203.226 port 53902 ssh2
Oct  1 08:33:36 nativespace-cdp sshd[28359]: Received disconnect from 213.6.203.226 port 53902:11: Bye Bye [preauth]
Oct  1 08:33:36 nativespace-cdp sshd[28359]: Disconnected from 213.6.203.226 port 53902 [preauth]
Oct  1 08:33:42 nativespace-cdp sshd[28388]: Invalid user user from 103.170.86.94 port 59346
Oct  1 08:33:42 nativespace-cdp sshd[28388]: input_userauth_request: invalid user user [preauth]
Oct  1 08:33:42 nativespace-cdp sshd[28388]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:33:42 nativespace-cdp sshd[28388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:33:42 nativespace-cdp sshd[28393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137  user=root
Oct  1 08:33:42 nativespace-cdp sshd[28393]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:33:44 nativespace-cdp sshd[28388]: Failed password for invalid user user from 103.170.86.94 port 59346 ssh2
Oct  1 08:33:45 nativespace-cdp sshd[28388]: Received disconnect from 103.170.86.94 port 59346:11: Bye Bye [preauth]
Oct  1 08:33:45 nativespace-cdp sshd[28388]: Disconnected from 103.170.86.94 port 59346 [preauth]
Oct  1 08:33:45 nativespace-cdp sshd[28393]: Failed password for root from 116.212.135.137 port 37948 ssh2
Oct  1 08:33:45 nativespace-cdp sshd[28393]: Received disconnect from 116.212.135.137 port 37948:11: Bye Bye [preauth]
Oct  1 08:33:45 nativespace-cdp sshd[28393]: Disconnected from 116.212.135.137 port 37948 [preauth]
Oct  1 08:34:12 nativespace-cdp sshd[28460]: Invalid user sopuser from 103.55.49.10 port 41808
Oct  1 08:34:12 nativespace-cdp sshd[28460]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 08:34:12 nativespace-cdp sshd[28460]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:34:12 nativespace-cdp sshd[28460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:34:12 nativespace-cdp sshd[28465]: Invalid user ubuntu from 213.6.203.226 port 34201
Oct  1 08:34:12 nativespace-cdp sshd[28465]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:34:12 nativespace-cdp sshd[28465]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:34:12 nativespace-cdp sshd[28465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:34:14 nativespace-cdp sshd[28460]: Failed password for invalid user sopuser from 103.55.49.10 port 41808 ssh2
Oct  1 08:34:14 nativespace-cdp sshd[28465]: Failed password for invalid user ubuntu from 213.6.203.226 port 34201 ssh2
Oct  1 08:34:17 nativespace-cdp sshd[28460]: Received disconnect from 103.55.49.10 port 41808:11: Bye Bye [preauth]
Oct  1 08:34:17 nativespace-cdp sshd[28460]: Disconnected from 103.55.49.10 port 41808 [preauth]
Oct  1 08:34:23 nativespace-cdp sshd[28465]: Received disconnect from 213.6.203.226 port 34201:11: Bye Bye [preauth]
Oct  1 08:34:23 nativespace-cdp sshd[28465]: Disconnected from 213.6.203.226 port 34201 [preauth]
Oct  1 08:34:25 nativespace-cdp sshd[28495]: Invalid user ubuntu from 103.170.86.94 port 46308
Oct  1 08:34:25 nativespace-cdp sshd[28495]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:34:25 nativespace-cdp sshd[28495]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:34:25 nativespace-cdp sshd[28495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:34:26 nativespace-cdp sshd[28495]: Failed password for invalid user ubuntu from 103.170.86.94 port 46308 ssh2
Oct  1 08:34:27 nativespace-cdp sshd[28495]: Received disconnect from 103.170.86.94 port 46308:11: Bye Bye [preauth]
Oct  1 08:34:27 nativespace-cdp sshd[28495]: Disconnected from 103.170.86.94 port 46308 [preauth]
Oct  1 08:34:28 nativespace-cdp sshd[28508]: Invalid user sopuser from 116.212.135.137 port 54432
Oct  1 08:34:28 nativespace-cdp sshd[28508]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 08:34:28 nativespace-cdp sshd[28508]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:34:28 nativespace-cdp sshd[28508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:34:30 nativespace-cdp sshd[28508]: Failed password for invalid user sopuser from 116.212.135.137 port 54432 ssh2
Oct  1 08:34:38 nativespace-cdp sshd[28508]: Received disconnect from 116.212.135.137 port 54432:11: Bye Bye [preauth]
Oct  1 08:34:38 nativespace-cdp sshd[28508]: Disconnected from 116.212.135.137 port 54432 [preauth]
Oct  1 08:34:51 nativespace-cdp sshd[28728]: Invalid user ubuntu from 213.6.203.226 port 53058
Oct  1 08:34:51 nativespace-cdp sshd[28728]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:34:51 nativespace-cdp sshd[28728]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:34:51 nativespace-cdp sshd[28728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:34:53 nativespace-cdp sshd[28728]: Failed password for invalid user ubuntu from 213.6.203.226 port 53058 ssh2
Oct  1 08:34:53 nativespace-cdp sshd[28728]: Received disconnect from 213.6.203.226 port 53058:11: Bye Bye [preauth]
Oct  1 08:34:53 nativespace-cdp sshd[28728]: Disconnected from 213.6.203.226 port 53058 [preauth]
Oct  1 08:34:54 nativespace-cdp sshd[28824]: Invalid user ubuntu from 146.190.143.102 port 39406
Oct  1 08:34:54 nativespace-cdp sshd[28824]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:34:54 nativespace-cdp sshd[28824]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:34:54 nativespace-cdp sshd[28824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:34:56 nativespace-cdp sshd[28824]: Failed password for invalid user ubuntu from 146.190.143.102 port 39406 ssh2
Oct  1 08:34:58 nativespace-cdp sshd[28824]: Received disconnect from 146.190.143.102 port 39406:11: Bye Bye [preauth]
Oct  1 08:34:58 nativespace-cdp sshd[28824]: Disconnected from 146.190.143.102 port 39406 [preauth]
Oct  1 08:35:09 nativespace-cdp sshd[28969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94  user=root
Oct  1 08:35:09 nativespace-cdp sshd[28969]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:35:09 nativespace-cdp sshd[28964]: Invalid user sysadmin from 103.55.49.10 port 47044
Oct  1 08:35:09 nativespace-cdp sshd[28964]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 08:35:09 nativespace-cdp sshd[28964]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:35:09 nativespace-cdp sshd[28964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:35:11 nativespace-cdp sshd[28969]: Failed password for root from 103.170.86.94 port 46918 ssh2
Oct  1 08:35:11 nativespace-cdp sshd[28964]: Failed password for invalid user sysadmin from 103.55.49.10 port 47044 ssh2
Oct  1 08:35:11 nativespace-cdp sshd[28969]: Received disconnect from 103.170.86.94 port 46918:11: Bye Bye [preauth]
Oct  1 08:35:11 nativespace-cdp sshd[28969]: Disconnected from 103.170.86.94 port 46918 [preauth]
Oct  1 08:35:11 nativespace-cdp sshd[28964]: Received disconnect from 103.55.49.10 port 47044:11: Bye Bye [preauth]
Oct  1 08:35:11 nativespace-cdp sshd[28964]: Disconnected from 103.55.49.10 port 47044 [preauth]
Oct  1 08:35:18 nativespace-cdp sshd[29000]: Invalid user ubuntu from 116.212.135.137 port 51162
Oct  1 08:35:18 nativespace-cdp sshd[29000]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:35:18 nativespace-cdp sshd[29000]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:35:18 nativespace-cdp sshd[29000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:35:20 nativespace-cdp sshd[29000]: Failed password for invalid user ubuntu from 116.212.135.137 port 51162 ssh2
Oct  1 08:35:21 nativespace-cdp sshd[29000]: Received disconnect from 116.212.135.137 port 51162:11: Bye Bye [preauth]
Oct  1 08:35:21 nativespace-cdp sshd[29000]: Disconnected from 116.212.135.137 port 51162 [preauth]
Oct  1 08:35:36 nativespace-cdp sshd[29051]: Invalid user support from 213.6.203.226 port 35996
Oct  1 08:35:36 nativespace-cdp sshd[29051]: input_userauth_request: invalid user support [preauth]
Oct  1 08:35:36 nativespace-cdp sshd[29051]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:35:36 nativespace-cdp sshd[29051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:35:38 nativespace-cdp sshd[29051]: Failed password for invalid user support from 213.6.203.226 port 35996 ssh2
Oct  1 08:35:38 nativespace-cdp sshd[29051]: Received disconnect from 213.6.203.226 port 35996:11: Bye Bye [preauth]
Oct  1 08:35:38 nativespace-cdp sshd[29051]: Disconnected from 213.6.203.226 port 35996 [preauth]
Oct  1 08:35:50 nativespace-cdp sshd[29145]: Invalid user user1 from 103.170.86.94 port 59860
Oct  1 08:35:50 nativespace-cdp sshd[29145]: input_userauth_request: invalid user user1 [preauth]
Oct  1 08:35:50 nativespace-cdp sshd[29145]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:35:50 nativespace-cdp sshd[29145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:35:52 nativespace-cdp sshd[29145]: Failed password for invalid user user1 from 103.170.86.94 port 59860 ssh2
Oct  1 08:35:52 nativespace-cdp sshd[29145]: Received disconnect from 103.170.86.94 port 59860:11: Bye Bye [preauth]
Oct  1 08:35:52 nativespace-cdp sshd[29145]: Disconnected from 103.170.86.94 port 59860 [preauth]
Oct  1 08:36:02 nativespace-cdp sshd[29159]: Invalid user sysadmin from 103.55.49.10 port 32870
Oct  1 08:36:02 nativespace-cdp sshd[29159]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 08:36:02 nativespace-cdp sshd[29159]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:36:02 nativespace-cdp sshd[29159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:36:03 nativespace-cdp sshd[29159]: Failed password for invalid user sysadmin from 103.55.49.10 port 32870 ssh2
Oct  1 08:36:04 nativespace-cdp sshd[29159]: Received disconnect from 103.55.49.10 port 32870:11: Bye Bye [preauth]
Oct  1 08:36:04 nativespace-cdp sshd[29159]: Disconnected from 103.55.49.10 port 32870 [preauth]
Oct  1 08:36:05 nativespace-cdp sshd[29182]: Connection closed by 116.212.135.137 port 41154 [preauth]
Oct  1 08:36:13 nativespace-cdp sshd[29200]: Invalid user testuser from 213.6.203.226 port 52160
Oct  1 08:36:13 nativespace-cdp sshd[29200]: input_userauth_request: invalid user testuser [preauth]
Oct  1 08:36:13 nativespace-cdp sshd[29200]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:36:13 nativespace-cdp sshd[29200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:36:15 nativespace-cdp sshd[29200]: Failed password for invalid user testuser from 213.6.203.226 port 52160 ssh2
Oct  1 08:36:15 nativespace-cdp sshd[29200]: Received disconnect from 213.6.203.226 port 52160:11: Bye Bye [preauth]
Oct  1 08:36:15 nativespace-cdp sshd[29200]: Disconnected from 213.6.203.226 port 52160 [preauth]
Oct  1 08:36:32 nativespace-cdp sshd[29294]: Invalid user username from 103.170.86.94 port 56470
Oct  1 08:36:32 nativespace-cdp sshd[29294]: input_userauth_request: invalid user username [preauth]
Oct  1 08:36:32 nativespace-cdp sshd[29294]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:36:32 nativespace-cdp sshd[29294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:36:33 nativespace-cdp sshd[29302]: Connection closed by 159.100.136.21 port 52868 [preauth]
Oct  1 08:36:34 nativespace-cdp sshd[29294]: Failed password for invalid user username from 103.170.86.94 port 56470 ssh2
Oct  1 08:36:37 nativespace-cdp sshd[29294]: Received disconnect from 103.170.86.94 port 56470:11: Bye Bye [preauth]
Oct  1 08:36:37 nativespace-cdp sshd[29294]: Disconnected from 103.170.86.94 port 56470 [preauth]
Oct  1 08:36:47 nativespace-cdp sshd[29427]: Invalid user user from 146.190.143.102 port 50202
Oct  1 08:36:47 nativespace-cdp sshd[29427]: input_userauth_request: invalid user user [preauth]
Oct  1 08:36:47 nativespace-cdp sshd[29427]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:36:47 nativespace-cdp sshd[29427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:36:48 nativespace-cdp sshd[29431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137  user=root
Oct  1 08:36:48 nativespace-cdp sshd[29431]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:36:49 nativespace-cdp sshd[29427]: Failed password for invalid user user from 146.190.143.102 port 50202 ssh2
Oct  1 08:36:49 nativespace-cdp sshd[29427]: Received disconnect from 146.190.143.102 port 50202:11: Bye Bye [preauth]
Oct  1 08:36:49 nativespace-cdp sshd[29427]: Disconnected from 146.190.143.102 port 50202 [preauth]
Oct  1 08:36:50 nativespace-cdp sshd[29431]: Failed password for root from 116.212.135.137 port 47132 ssh2
Oct  1 08:36:50 nativespace-cdp sshd[29431]: Received disconnect from 116.212.135.137 port 47132:11: Bye Bye [preauth]
Oct  1 08:36:50 nativespace-cdp sshd[29431]: Disconnected from 116.212.135.137 port 47132 [preauth]
Oct  1 08:36:51 nativespace-cdp sshd[29446]: Invalid user test from 213.6.203.226 port 49647
Oct  1 08:36:51 nativespace-cdp sshd[29446]: input_userauth_request: invalid user test [preauth]
Oct  1 08:36:51 nativespace-cdp sshd[29446]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:36:51 nativespace-cdp sshd[29446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:36:53 nativespace-cdp sshd[29446]: Failed password for invalid user test from 213.6.203.226 port 49647 ssh2
Oct  1 08:36:53 nativespace-cdp sshd[29446]: Received disconnect from 213.6.203.226 port 49647:11: Bye Bye [preauth]
Oct  1 08:36:53 nativespace-cdp sshd[29446]: Disconnected from 213.6.203.226 port 49647 [preauth]
Oct  1 08:37:13 nativespace-cdp sshd[29538]: Invalid user testuser from 103.170.86.94 port 36602
Oct  1 08:37:13 nativespace-cdp sshd[29538]: input_userauth_request: invalid user testuser [preauth]
Oct  1 08:37:13 nativespace-cdp sshd[29538]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:37:13 nativespace-cdp sshd[29538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:37:15 nativespace-cdp sshd[29538]: Failed password for invalid user testuser from 103.170.86.94 port 36602 ssh2
Oct  1 08:37:18 nativespace-cdp sshd[29538]: Received disconnect from 103.170.86.94 port 36602:11: Bye Bye [preauth]
Oct  1 08:37:18 nativespace-cdp sshd[29538]: Disconnected from 103.170.86.94 port 36602 [preauth]
Oct  1 08:37:31 nativespace-cdp sshd[29579]: Invalid user test from 213.6.203.226 port 52935
Oct  1 08:37:31 nativespace-cdp sshd[29579]: input_userauth_request: invalid user test [preauth]
Oct  1 08:37:31 nativespace-cdp sshd[29579]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:37:31 nativespace-cdp sshd[29579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:37:32 nativespace-cdp sshd[29592]: Invalid user ubuntu from 116.212.135.137 port 55348
Oct  1 08:37:32 nativespace-cdp sshd[29592]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:37:32 nativespace-cdp sshd[29592]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:37:32 nativespace-cdp sshd[29592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:37:32 nativespace-cdp sshd[29579]: Failed password for invalid user test from 213.6.203.226 port 52935 ssh2
Oct  1 08:37:32 nativespace-cdp sshd[29579]: Received disconnect from 213.6.203.226 port 52935:11: Bye Bye [preauth]
Oct  1 08:37:32 nativespace-cdp sshd[29579]: Disconnected from 213.6.203.226 port 52935 [preauth]
Oct  1 08:37:34 nativespace-cdp sshd[29592]: Failed password for invalid user ubuntu from 116.212.135.137 port 55348 ssh2
Oct  1 08:37:35 nativespace-cdp sshd[29592]: Received disconnect from 116.212.135.137 port 55348:11: Bye Bye [preauth]
Oct  1 08:37:35 nativespace-cdp sshd[29592]: Disconnected from 116.212.135.137 port 55348 [preauth]
Oct  1 08:37:35 nativespace-cdp sshd[29601]: Invalid user admin from 146.190.143.102 port 35474
Oct  1 08:37:35 nativespace-cdp sshd[29601]: input_userauth_request: invalid user admin [preauth]
Oct  1 08:37:35 nativespace-cdp sshd[29601]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:37:35 nativespace-cdp sshd[29601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:37:37 nativespace-cdp sshd[29601]: Failed password for invalid user admin from 146.190.143.102 port 35474 ssh2
Oct  1 08:37:40 nativespace-cdp sshd[29601]: Received disconnect from 146.190.143.102 port 35474:11: Bye Bye [preauth]
Oct  1 08:37:40 nativespace-cdp sshd[29601]: Disconnected from 146.190.143.102 port 35474 [preauth]
Oct  1 08:37:42 nativespace-cdp sshd[29606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10  user=root
Oct  1 08:37:42 nativespace-cdp sshd[29606]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:37:43 nativespace-cdp sshd[29606]: Failed password for root from 103.55.49.10 port 42362 ssh2
Oct  1 08:37:44 nativespace-cdp sshd[29606]: Received disconnect from 103.55.49.10 port 42362:11: Bye Bye [preauth]
Oct  1 08:37:44 nativespace-cdp sshd[29606]: Disconnected from 103.55.49.10 port 42362 [preauth]
Oct  1 08:37:56 nativespace-cdp sshd[29709]: Invalid user sysadmin from 103.170.86.94 port 51192
Oct  1 08:37:56 nativespace-cdp sshd[29709]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 08:37:56 nativespace-cdp sshd[29709]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:37:56 nativespace-cdp sshd[29709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:37:58 nativespace-cdp sshd[29709]: Failed password for invalid user sysadmin from 103.170.86.94 port 51192 ssh2
Oct  1 08:37:58 nativespace-cdp sshd[29709]: Received disconnect from 103.170.86.94 port 51192:11: Bye Bye [preauth]
Oct  1 08:37:58 nativespace-cdp sshd[29709]: Disconnected from 103.170.86.94 port 51192 [preauth]
Oct  1 08:38:08 nativespace-cdp sshd[29752]: Invalid user ubuntu from 213.6.203.226 port 61965
Oct  1 08:38:08 nativespace-cdp sshd[29752]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:38:08 nativespace-cdp sshd[29752]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:38:08 nativespace-cdp sshd[29752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:38:10 nativespace-cdp sshd[29752]: Failed password for invalid user ubuntu from 213.6.203.226 port 61965 ssh2
Oct  1 08:38:10 nativespace-cdp sshd[29752]: Received disconnect from 213.6.203.226 port 61965:11: Bye Bye [preauth]
Oct  1 08:38:10 nativespace-cdp sshd[29752]: Disconnected from 213.6.203.226 port 61965 [preauth]
Oct  1 08:38:21 nativespace-cdp sshd[29844]: Invalid user test_user from 116.212.135.137 port 57050
Oct  1 08:38:21 nativespace-cdp sshd[29844]: input_userauth_request: invalid user test_user [preauth]
Oct  1 08:38:21 nativespace-cdp sshd[29844]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:38:21 nativespace-cdp sshd[29844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:38:23 nativespace-cdp sshd[29844]: Failed password for invalid user test_user from 116.212.135.137 port 57050 ssh2
Oct  1 08:38:23 nativespace-cdp sshd[29844]: Received disconnect from 116.212.135.137 port 57050:11: Bye Bye [preauth]
Oct  1 08:38:23 nativespace-cdp sshd[29844]: Disconnected from 116.212.135.137 port 57050 [preauth]
Oct  1 08:38:32 nativespace-cdp sshd[29870]: Invalid user test from 103.55.49.10 port 55044
Oct  1 08:38:32 nativespace-cdp sshd[29870]: input_userauth_request: invalid user test [preauth]
Oct  1 08:38:32 nativespace-cdp sshd[29870]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:38:32 nativespace-cdp sshd[29870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:38:34 nativespace-cdp sshd[29870]: Failed password for invalid user test from 103.55.49.10 port 55044 ssh2
Oct  1 08:38:39 nativespace-cdp sshd[29889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94  user=root
Oct  1 08:38:39 nativespace-cdp sshd[29889]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:38:40 nativespace-cdp sshd[29870]: Received disconnect from 103.55.49.10 port 55044:11: Bye Bye [preauth]
Oct  1 08:38:40 nativespace-cdp sshd[29870]: Disconnected from 103.55.49.10 port 55044 [preauth]
Oct  1 08:38:41 nativespace-cdp sshd[29889]: Failed password for root from 103.170.86.94 port 60222 ssh2
Oct  1 08:38:41 nativespace-cdp sshd[29889]: Received disconnect from 103.170.86.94 port 60222:11: Bye Bye [preauth]
Oct  1 08:38:41 nativespace-cdp sshd[29889]: Disconnected from 103.170.86.94 port 60222 [preauth]
Oct  1 08:38:50 nativespace-cdp sshd[29921]: Invalid user user from 213.6.203.226 port 57889
Oct  1 08:38:50 nativespace-cdp sshd[29921]: input_userauth_request: invalid user user [preauth]
Oct  1 08:38:50 nativespace-cdp sshd[29921]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:38:50 nativespace-cdp sshd[29921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:38:53 nativespace-cdp sshd[29921]: Failed password for invalid user user from 213.6.203.226 port 57889 ssh2
Oct  1 08:38:53 nativespace-cdp sshd[29921]: Received disconnect from 213.6.203.226 port 57889:11: Bye Bye [preauth]
Oct  1 08:38:53 nativespace-cdp sshd[29921]: Disconnected from 213.6.203.226 port 57889 [preauth]
Oct  1 08:39:04 nativespace-cdp sshd[29968]: Invalid user user from 116.212.135.137 port 57904
Oct  1 08:39:04 nativespace-cdp sshd[29968]: input_userauth_request: invalid user user [preauth]
Oct  1 08:39:04 nativespace-cdp sshd[29968]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:39:04 nativespace-cdp sshd[29968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:39:06 nativespace-cdp sshd[29968]: Failed password for invalid user user from 116.212.135.137 port 57904 ssh2
Oct  1 08:39:06 nativespace-cdp sshd[29968]: Received disconnect from 116.212.135.137 port 57904:11: Bye Bye [preauth]
Oct  1 08:39:06 nativespace-cdp sshd[29968]: Disconnected from 116.212.135.137 port 57904 [preauth]
Oct  1 08:39:27 nativespace-cdp sshd[30015]: Invalid user sopuser from 103.170.86.94 port 51898
Oct  1 08:39:27 nativespace-cdp sshd[30015]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 08:39:27 nativespace-cdp sshd[30015]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:39:27 nativespace-cdp sshd[30015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:39:28 nativespace-cdp sshd[30022]: Invalid user sysadmin from 146.190.143.102 port 60504
Oct  1 08:39:28 nativespace-cdp sshd[30022]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 08:39:28 nativespace-cdp sshd[30022]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:39:28 nativespace-cdp sshd[30022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:39:29 nativespace-cdp sshd[30015]: Failed password for invalid user sopuser from 103.170.86.94 port 51898 ssh2
Oct  1 08:39:29 nativespace-cdp sshd[30015]: Received disconnect from 103.170.86.94 port 51898:11: Bye Bye [preauth]
Oct  1 08:39:29 nativespace-cdp sshd[30015]: Disconnected from 103.170.86.94 port 51898 [preauth]
Oct  1 08:39:30 nativespace-cdp sshd[30022]: Failed password for invalid user sysadmin from 146.190.143.102 port 60504 ssh2
Oct  1 08:39:30 nativespace-cdp sshd[30037]: Invalid user sysadmin from 213.6.203.226 port 61537
Oct  1 08:39:30 nativespace-cdp sshd[30037]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 08:39:30 nativespace-cdp sshd[30037]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:39:30 nativespace-cdp sshd[30037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:39:30 nativespace-cdp sshd[30022]: Received disconnect from 146.190.143.102 port 60504:11: Bye Bye [preauth]
Oct  1 08:39:30 nativespace-cdp sshd[30022]: Disconnected from 146.190.143.102 port 60504 [preauth]
Oct  1 08:39:31 nativespace-cdp sshd[30037]: Failed password for invalid user sysadmin from 213.6.203.226 port 61537 ssh2
Oct  1 08:39:32 nativespace-cdp sshd[30037]: Received disconnect from 213.6.203.226 port 61537:11: Bye Bye [preauth]
Oct  1 08:39:32 nativespace-cdp sshd[30037]: Disconnected from 213.6.203.226 port 61537 [preauth]
Oct  1 08:39:55 nativespace-cdp sshd[30123]: Invalid user tuan from 116.212.135.137 port 50310
Oct  1 08:39:55 nativespace-cdp sshd[30123]: input_userauth_request: invalid user tuan [preauth]
Oct  1 08:39:55 nativespace-cdp sshd[30123]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:39:55 nativespace-cdp sshd[30123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:39:57 nativespace-cdp sshd[30123]: Failed password for invalid user tuan from 116.212.135.137 port 50310 ssh2
Oct  1 08:39:58 nativespace-cdp sshd[30123]: Received disconnect from 116.212.135.137 port 50310:11: Bye Bye [preauth]
Oct  1 08:39:58 nativespace-cdp sshd[30123]: Disconnected from 116.212.135.137 port 50310 [preauth]
Oct  1 08:40:00 nativespace-cdp sshd[30133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10  user=root
Oct  1 08:40:00 nativespace-cdp sshd[30133]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:40:02 nativespace-cdp sshd[30133]: Failed password for root from 103.55.49.10 port 46708 ssh2
Oct  1 08:40:04 nativespace-cdp sshd[30133]: Received disconnect from 103.55.49.10 port 46708:11: Bye Bye [preauth]
Oct  1 08:40:04 nativespace-cdp sshd[30133]: Disconnected from 103.55.49.10 port 46708 [preauth]
Oct  1 08:40:14 nativespace-cdp sshd[30287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226  user=root
Oct  1 08:40:14 nativespace-cdp sshd[30287]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:40:17 nativespace-cdp sshd[30287]: Failed password for root from 213.6.203.226 port 36201 ssh2
Oct  1 08:40:17 nativespace-cdp sshd[30287]: Received disconnect from 213.6.203.226 port 36201:11: Bye Bye [preauth]
Oct  1 08:40:17 nativespace-cdp sshd[30287]: Disconnected from 213.6.203.226 port 36201 [preauth]
Oct  1 08:40:46 nativespace-cdp sshd[30387]: Invalid user usuario from 116.212.135.137 port 53788
Oct  1 08:40:46 nativespace-cdp sshd[30387]: input_userauth_request: invalid user usuario [preauth]
Oct  1 08:40:46 nativespace-cdp sshd[30387]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:40:46 nativespace-cdp sshd[30387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:40:48 nativespace-cdp sshd[30387]: Failed password for invalid user usuario from 116.212.135.137 port 53788 ssh2
Oct  1 08:40:48 nativespace-cdp sshd[30387]: Received disconnect from 116.212.135.137 port 53788:11: Bye Bye [preauth]
Oct  1 08:40:48 nativespace-cdp sshd[30387]: Disconnected from 116.212.135.137 port 53788 [preauth]
Oct  1 08:40:50 nativespace-cdp sshd[30401]: Invalid user abhishek from 103.170.86.94 port 58250
Oct  1 08:40:50 nativespace-cdp sshd[30401]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 08:40:50 nativespace-cdp sshd[30401]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:40:50 nativespace-cdp sshd[30401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:40:51 nativespace-cdp sshd[30409]: Invalid user test from 213.6.203.226 port 60211
Oct  1 08:40:51 nativespace-cdp sshd[30409]: input_userauth_request: invalid user test [preauth]
Oct  1 08:40:51 nativespace-cdp sshd[30409]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:40:51 nativespace-cdp sshd[30409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:40:52 nativespace-cdp sshd[30401]: Failed password for invalid user abhishek from 103.170.86.94 port 58250 ssh2
Oct  1 08:40:52 nativespace-cdp sshd[30401]: Received disconnect from 103.170.86.94 port 58250:11: Bye Bye [preauth]
Oct  1 08:40:52 nativespace-cdp sshd[30401]: Disconnected from 103.170.86.94 port 58250 [preauth]
Oct  1 08:40:53 nativespace-cdp sshd[30409]: Failed password for invalid user test from 213.6.203.226 port 60211 ssh2
Oct  1 08:40:57 nativespace-cdp sshd[30409]: Received disconnect from 213.6.203.226 port 60211:11: Bye Bye [preauth]
Oct  1 08:40:57 nativespace-cdp sshd[30409]: Disconnected from 213.6.203.226 port 60211 [preauth]
Oct  1 08:40:57 nativespace-cdp sshd[30467]: Connection closed by 103.55.49.10 port 50748 [preauth]
Oct  1 08:41:24 nativespace-cdp sshd[30535]: Connection closed by 146.190.143.102 port 56374 [preauth]
Oct  1 08:41:30 nativespace-cdp sshd[30563]: Invalid user ubuntu from 213.6.203.226 port 35769
Oct  1 08:41:30 nativespace-cdp sshd[30563]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:41:30 nativespace-cdp sshd[30561]: Invalid user svn from 116.212.135.137 port 59278
Oct  1 08:41:30 nativespace-cdp sshd[30561]: input_userauth_request: invalid user svn [preauth]
Oct  1 08:41:30 nativespace-cdp sshd[30563]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:41:30 nativespace-cdp sshd[30563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:41:30 nativespace-cdp sshd[30561]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:41:30 nativespace-cdp sshd[30561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:41:32 nativespace-cdp sshd[30563]: Failed password for invalid user ubuntu from 213.6.203.226 port 35769 ssh2
Oct  1 08:41:32 nativespace-cdp sshd[30561]: Failed password for invalid user svn from 116.212.135.137 port 59278 ssh2
Oct  1 08:41:32 nativespace-cdp sshd[30563]: Received disconnect from 213.6.203.226 port 35769:11: Bye Bye [preauth]
Oct  1 08:41:32 nativespace-cdp sshd[30563]: Disconnected from 213.6.203.226 port 35769 [preauth]
Oct  1 08:41:32 nativespace-cdp sshd[30561]: Received disconnect from 116.212.135.137 port 59278:11: Bye Bye [preauth]
Oct  1 08:41:32 nativespace-cdp sshd[30561]: Disconnected from 116.212.135.137 port 59278 [preauth]
Oct  1 08:41:33 nativespace-cdp sshd[30568]: Connection closed by 159.100.136.21 port 33948 [preauth]
Oct  1 08:41:40 nativespace-cdp sshd[30584]: Invalid user tg from 103.170.86.94 port 54302
Oct  1 08:41:40 nativespace-cdp sshd[30584]: input_userauth_request: invalid user tg [preauth]
Oct  1 08:41:40 nativespace-cdp sshd[30584]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:41:40 nativespace-cdp sshd[30584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:41:42 nativespace-cdp sshd[30584]: Failed password for invalid user tg from 103.170.86.94 port 54302 ssh2
Oct  1 08:41:42 nativespace-cdp sshd[30584]: Received disconnect from 103.170.86.94 port 54302:11: Bye Bye [preauth]
Oct  1 08:41:42 nativespace-cdp sshd[30584]: Disconnected from 103.170.86.94 port 54302 [preauth]
Oct  1 08:41:51 nativespace-cdp sshd[30705]: Invalid user ubuntu from 103.55.49.10 port 44964
Oct  1 08:41:51 nativespace-cdp sshd[30705]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:41:51 nativespace-cdp sshd[30705]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:41:51 nativespace-cdp sshd[30705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:41:53 nativespace-cdp sshd[30705]: Failed password for invalid user ubuntu from 103.55.49.10 port 44964 ssh2
Oct  1 08:41:54 nativespace-cdp sshd[30705]: Received disconnect from 103.55.49.10 port 44964:11: Bye Bye [preauth]
Oct  1 08:41:54 nativespace-cdp sshd[30705]: Disconnected from 103.55.49.10 port 44964 [preauth]
Oct  1 08:42:11 nativespace-cdp sshd[30753]: Invalid user user1 from 213.6.203.226 port 47360
Oct  1 08:42:11 nativespace-cdp sshd[30753]: input_userauth_request: invalid user user1 [preauth]
Oct  1 08:42:11 nativespace-cdp sshd[30753]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:42:11 nativespace-cdp sshd[30753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:42:12 nativespace-cdp sshd[30753]: Failed password for invalid user user1 from 213.6.203.226 port 47360 ssh2
Oct  1 08:42:13 nativespace-cdp sshd[30753]: Received disconnect from 213.6.203.226 port 47360:11: Bye Bye [preauth]
Oct  1 08:42:13 nativespace-cdp sshd[30753]: Disconnected from 213.6.203.226 port 47360 [preauth]
Oct  1 08:42:16 nativespace-cdp sshd[30768]: Invalid user ubuntu from 146.190.143.102 port 53250
Oct  1 08:42:16 nativespace-cdp sshd[30768]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:42:16 nativespace-cdp sshd[30768]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:42:16 nativespace-cdp sshd[30768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:42:18 nativespace-cdp sshd[30768]: Failed password for invalid user ubuntu from 146.190.143.102 port 53250 ssh2
Oct  1 08:42:18 nativespace-cdp sshd[30768]: Received disconnect from 146.190.143.102 port 53250:11: Bye Bye [preauth]
Oct  1 08:42:18 nativespace-cdp sshd[30768]: Disconnected from 146.190.143.102 port 53250 [preauth]
Oct  1 08:42:19 nativespace-cdp sshd[30776]: Invalid user user from 103.170.86.94 port 36880
Oct  1 08:42:19 nativespace-cdp sshd[30776]: input_userauth_request: invalid user user [preauth]
Oct  1 08:42:19 nativespace-cdp sshd[30776]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:42:19 nativespace-cdp sshd[30776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:42:19 nativespace-cdp sshd[30778]: Invalid user acer from 116.212.135.137 port 38226
Oct  1 08:42:19 nativespace-cdp sshd[30778]: input_userauth_request: invalid user acer [preauth]
Oct  1 08:42:19 nativespace-cdp sshd[30778]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:42:19 nativespace-cdp sshd[30778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:42:21 nativespace-cdp sshd[30776]: Failed password for invalid user user from 103.170.86.94 port 36880 ssh2
Oct  1 08:42:21 nativespace-cdp sshd[30776]: Received disconnect from 103.170.86.94 port 36880:11: Bye Bye [preauth]
Oct  1 08:42:21 nativespace-cdp sshd[30776]: Disconnected from 103.170.86.94 port 36880 [preauth]
Oct  1 08:42:21 nativespace-cdp sshd[30778]: Failed password for invalid user acer from 116.212.135.137 port 38226 ssh2
Oct  1 08:42:21 nativespace-cdp sshd[30778]: Received disconnect from 116.212.135.137 port 38226:11: Bye Bye [preauth]
Oct  1 08:42:21 nativespace-cdp sshd[30778]: Disconnected from 116.212.135.137 port 38226 [preauth]
Oct  1 08:42:50 nativespace-cdp sshd[30885]: Invalid user user from 213.6.203.226 port 54351
Oct  1 08:42:50 nativespace-cdp sshd[30885]: input_userauth_request: invalid user user [preauth]
Oct  1 08:42:50 nativespace-cdp sshd[30885]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:42:50 nativespace-cdp sshd[30885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:42:51 nativespace-cdp sshd[30883]: Invalid user thomas from 103.55.49.10 port 54444
Oct  1 08:42:51 nativespace-cdp sshd[30883]: input_userauth_request: invalid user thomas [preauth]
Oct  1 08:42:51 nativespace-cdp sshd[30883]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:42:51 nativespace-cdp sshd[30883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:42:52 nativespace-cdp sshd[30885]: Failed password for invalid user user from 213.6.203.226 port 54351 ssh2
Oct  1 08:42:52 nativespace-cdp sshd[30885]: Received disconnect from 213.6.203.226 port 54351:11: Bye Bye [preauth]
Oct  1 08:42:52 nativespace-cdp sshd[30885]: Disconnected from 213.6.203.226 port 54351 [preauth]
Oct  1 08:42:53 nativespace-cdp sshd[30883]: Failed password for invalid user thomas from 103.55.49.10 port 54444 ssh2
Oct  1 08:42:54 nativespace-cdp sshd[30883]: Received disconnect from 103.55.49.10 port 54444:11: Bye Bye [preauth]
Oct  1 08:42:54 nativespace-cdp sshd[30883]: Disconnected from 103.55.49.10 port 54444 [preauth]
Oct  1 08:43:08 nativespace-cdp sshd[30935]: Invalid user user from 103.170.86.94 port 53050
Oct  1 08:43:08 nativespace-cdp sshd[30935]: input_userauth_request: invalid user user [preauth]
Oct  1 08:43:08 nativespace-cdp sshd[30935]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:43:08 nativespace-cdp sshd[30935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:43:10 nativespace-cdp sshd[30935]: Failed password for invalid user user from 103.170.86.94 port 53050 ssh2
Oct  1 08:43:12 nativespace-cdp sshd[30935]: Received disconnect from 103.170.86.94 port 53050:11: Bye Bye [preauth]
Oct  1 08:43:12 nativespace-cdp sshd[30935]: Disconnected from 103.170.86.94 port 53050 [preauth]
Oct  1 08:43:12 nativespace-cdp sshd[30941]: Connection closed by 116.212.135.137 port 58254 [preauth]
Oct  1 08:43:31 nativespace-cdp sshd[30989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226  user=root
Oct  1 08:43:31 nativespace-cdp sshd[30989]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:43:33 nativespace-cdp sshd[30989]: Failed password for root from 213.6.203.226 port 36930 ssh2
Oct  1 08:43:33 nativespace-cdp sshd[30989]: Received disconnect from 213.6.203.226 port 36930:11: Bye Bye [preauth]
Oct  1 08:43:33 nativespace-cdp sshd[30989]: Disconnected from 213.6.203.226 port 36930 [preauth]
Oct  1 08:43:47 nativespace-cdp sshd[31029]: Invalid user user from 103.170.86.94 port 47534
Oct  1 08:43:47 nativespace-cdp sshd[31029]: input_userauth_request: invalid user user [preauth]
Oct  1 08:43:47 nativespace-cdp sshd[31029]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:43:47 nativespace-cdp sshd[31029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:43:49 nativespace-cdp sshd[31029]: Failed password for invalid user user from 103.170.86.94 port 47534 ssh2
Oct  1 08:43:49 nativespace-cdp sshd[31029]: Received disconnect from 103.170.86.94 port 47534:11: Bye Bye [preauth]
Oct  1 08:43:49 nativespace-cdp sshd[31029]: Disconnected from 103.170.86.94 port 47534 [preauth]
Oct  1 08:43:50 nativespace-cdp sshd[31035]: Invalid user ubuntu from 103.55.49.10 port 46594
Oct  1 08:43:50 nativespace-cdp sshd[31035]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:43:50 nativespace-cdp sshd[31035]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:43:50 nativespace-cdp sshd[31035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:43:53 nativespace-cdp sshd[31035]: Failed password for invalid user ubuntu from 103.55.49.10 port 46594 ssh2
Oct  1 08:43:53 nativespace-cdp sshd[31035]: Received disconnect from 103.55.49.10 port 46594:11: Bye Bye [preauth]
Oct  1 08:43:53 nativespace-cdp sshd[31035]: Disconnected from 103.55.49.10 port 46594 [preauth]
Oct  1 08:43:59 nativespace-cdp sshd[31045]: Invalid user support from 116.212.135.137 port 60666
Oct  1 08:43:59 nativespace-cdp sshd[31045]: input_userauth_request: invalid user support [preauth]
Oct  1 08:43:59 nativespace-cdp sshd[31045]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:43:59 nativespace-cdp sshd[31045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:44:01 nativespace-cdp sshd[31045]: Failed password for invalid user support from 116.212.135.137 port 60666 ssh2
Oct  1 08:44:01 nativespace-cdp sshd[31045]: Received disconnect from 116.212.135.137 port 60666:11: Bye Bye [preauth]
Oct  1 08:44:01 nativespace-cdp sshd[31045]: Disconnected from 116.212.135.137 port 60666 [preauth]
Oct  1 08:44:14 nativespace-cdp sshd[31130]: Invalid user test from 146.190.143.102 port 38068
Oct  1 08:44:14 nativespace-cdp sshd[31130]: input_userauth_request: invalid user test [preauth]
Oct  1 08:44:14 nativespace-cdp sshd[31130]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:44:14 nativespace-cdp sshd[31130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:44:16 nativespace-cdp sshd[31130]: Failed password for invalid user test from 146.190.143.102 port 38068 ssh2
Oct  1 08:44:16 nativespace-cdp sshd[31130]: Received disconnect from 146.190.143.102 port 38068:11: Bye Bye [preauth]
Oct  1 08:44:16 nativespace-cdp sshd[31130]: Disconnected from 146.190.143.102 port 38068 [preauth]
Oct  1 08:44:34 nativespace-cdp sshd[31170]: Invalid user test_user from 103.170.86.94 port 47274
Oct  1 08:44:34 nativespace-cdp sshd[31170]: input_userauth_request: invalid user test_user [preauth]
Oct  1 08:44:34 nativespace-cdp sshd[31170]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:44:34 nativespace-cdp sshd[31170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:44:37 nativespace-cdp sshd[31170]: Failed password for invalid user test_user from 103.170.86.94 port 47274 ssh2
Oct  1 08:44:37 nativespace-cdp sshd[31170]: Received disconnect from 103.170.86.94 port 47274:11: Bye Bye [preauth]
Oct  1 08:44:37 nativespace-cdp sshd[31170]: Disconnected from 103.170.86.94 port 47274 [preauth]
Oct  1 08:44:42 nativespace-cdp sshd[31195]: Invalid user steam from 116.212.135.137 port 39662
Oct  1 08:44:42 nativespace-cdp sshd[31195]: input_userauth_request: invalid user steam [preauth]
Oct  1 08:44:42 nativespace-cdp sshd[31195]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:44:42 nativespace-cdp sshd[31195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:44:44 nativespace-cdp sshd[31195]: Failed password for invalid user steam from 116.212.135.137 port 39662 ssh2
Oct  1 08:44:44 nativespace-cdp sshd[31195]: Received disconnect from 116.212.135.137 port 39662:11: Bye Bye [preauth]
Oct  1 08:44:44 nativespace-cdp sshd[31195]: Disconnected from 116.212.135.137 port 39662 [preauth]
Oct  1 08:44:50 nativespace-cdp sshd[31218]: Invalid user user from 213.6.203.226 port 37902
Oct  1 08:44:50 nativespace-cdp sshd[31218]: input_userauth_request: invalid user user [preauth]
Oct  1 08:44:50 nativespace-cdp sshd[31218]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:44:50 nativespace-cdp sshd[31218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:44:52 nativespace-cdp sshd[31218]: Failed password for invalid user user from 213.6.203.226 port 37902 ssh2
Oct  1 08:44:52 nativespace-cdp sshd[31218]: Received disconnect from 213.6.203.226 port 37902:11: Bye Bye [preauth]
Oct  1 08:44:52 nativespace-cdp sshd[31218]: Disconnected from 213.6.203.226 port 37902 [preauth]
Oct  1 08:44:53 nativespace-cdp sshd[31227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10  user=root
Oct  1 08:44:53 nativespace-cdp sshd[31227]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:44:55 nativespace-cdp sshd[31227]: Failed password for root from 103.55.49.10 port 57666 ssh2
Oct  1 08:44:55 nativespace-cdp sshd[31227]: Received disconnect from 103.55.49.10 port 57666:11: Bye Bye [preauth]
Oct  1 08:44:55 nativespace-cdp sshd[31227]: Disconnected from 103.55.49.10 port 57666 [preauth]
Oct  1 08:45:36 nativespace-cdp sshd[31469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137  user=root
Oct  1 08:45:36 nativespace-cdp sshd[31469]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:45:38 nativespace-cdp sshd[31469]: Failed password for root from 116.212.135.137 port 41384 ssh2
Oct  1 08:45:38 nativespace-cdp sshd[31469]: Received disconnect from 116.212.135.137 port 41384:11: Bye Bye [preauth]
Oct  1 08:45:38 nativespace-cdp sshd[31469]: Disconnected from 116.212.135.137 port 41384 [preauth]
Oct  1 08:46:08 nativespace-cdp sshd[31620]: Invalid user ubuntu from 103.170.86.94 port 55466
Oct  1 08:46:08 nativespace-cdp sshd[31620]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:46:08 nativespace-cdp sshd[31620]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:46:08 nativespace-cdp sshd[31620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:46:09 nativespace-cdp sshd[31625]: Invalid user odoo from 146.190.143.102 port 56710
Oct  1 08:46:09 nativespace-cdp sshd[31625]: input_userauth_request: invalid user odoo [preauth]
Oct  1 08:46:09 nativespace-cdp sshd[31625]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:46:09 nativespace-cdp sshd[31625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:46:10 nativespace-cdp sshd[31620]: Failed password for invalid user ubuntu from 103.170.86.94 port 55466 ssh2
Oct  1 08:46:10 nativespace-cdp sshd[31620]: Received disconnect from 103.170.86.94 port 55466:11: Bye Bye [preauth]
Oct  1 08:46:10 nativespace-cdp sshd[31620]: Disconnected from 103.170.86.94 port 55466 [preauth]
Oct  1 08:46:11 nativespace-cdp sshd[31625]: Failed password for invalid user odoo from 146.190.143.102 port 56710 ssh2
Oct  1 08:46:15 nativespace-cdp sshd[31625]: Received disconnect from 146.190.143.102 port 56710:11: Bye Bye [preauth]
Oct  1 08:46:15 nativespace-cdp sshd[31625]: Disconnected from 146.190.143.102 port 56710 [preauth]
Oct  1 08:46:23 nativespace-cdp sshd[31660]: Invalid user user from 116.212.135.137 port 54782
Oct  1 08:46:23 nativespace-cdp sshd[31660]: input_userauth_request: invalid user user [preauth]
Oct  1 08:46:23 nativespace-cdp sshd[31660]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:46:23 nativespace-cdp sshd[31660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:46:26 nativespace-cdp sshd[31660]: Failed password for invalid user user from 116.212.135.137 port 54782 ssh2
Oct  1 08:46:26 nativespace-cdp sshd[31660]: Received disconnect from 116.212.135.137 port 54782:11: Bye Bye [preauth]
Oct  1 08:46:26 nativespace-cdp sshd[31660]: Disconnected from 116.212.135.137 port 54782 [preauth]
Oct  1 08:46:36 nativespace-cdp sshd[31695]: Connection closed by 159.100.136.21 port 43240 [preauth]
Oct  1 08:46:55 nativespace-cdp sshd[31834]: Invalid user test_user from 213.6.203.226 port 61996
Oct  1 08:46:55 nativespace-cdp sshd[31834]: input_userauth_request: invalid user test_user [preauth]
Oct  1 08:46:55 nativespace-cdp sshd[31834]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:46:55 nativespace-cdp sshd[31834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:46:55 nativespace-cdp sshd[31833]: Invalid user svn from 103.170.86.94 port 55918
Oct  1 08:46:55 nativespace-cdp sshd[31833]: input_userauth_request: invalid user svn [preauth]
Oct  1 08:46:55 nativespace-cdp sshd[31833]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:46:55 nativespace-cdp sshd[31833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:46:56 nativespace-cdp sshd[31834]: Failed password for invalid user test_user from 213.6.203.226 port 61996 ssh2
Oct  1 08:46:56 nativespace-cdp sshd[31834]: Received disconnect from 213.6.203.226 port 61996:11: Bye Bye [preauth]
Oct  1 08:46:56 nativespace-cdp sshd[31834]: Disconnected from 213.6.203.226 port 61996 [preauth]
Oct  1 08:46:57 nativespace-cdp sshd[31833]: Failed password for invalid user svn from 103.170.86.94 port 55918 ssh2
Oct  1 08:46:57 nativespace-cdp sshd[31833]: Received disconnect from 103.170.86.94 port 55918:11: Bye Bye [preauth]
Oct  1 08:46:57 nativespace-cdp sshd[31833]: Disconnected from 103.170.86.94 port 55918 [preauth]
Oct  1 08:47:04 nativespace-cdp sshd[31929]: Invalid user support from 146.190.143.102 port 37916
Oct  1 08:47:04 nativespace-cdp sshd[31929]: input_userauth_request: invalid user support [preauth]
Oct  1 08:47:04 nativespace-cdp sshd[31929]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:47:04 nativespace-cdp sshd[31929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:47:06 nativespace-cdp sshd[31929]: Failed password for invalid user support from 146.190.143.102 port 37916 ssh2
Oct  1 08:47:07 nativespace-cdp sshd[31929]: Received disconnect from 146.190.143.102 port 37916:11: Bye Bye [preauth]
Oct  1 08:47:07 nativespace-cdp sshd[31929]: Disconnected from 146.190.143.102 port 37916 [preauth]
Oct  1 08:47:08 nativespace-cdp sshd[31935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10  user=root
Oct  1 08:47:08 nativespace-cdp sshd[31935]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:47:09 nativespace-cdp sshd[31949]: Bad protocol version identification '\026\003\001' from 47.254.33.164 port 32120
Oct  1 08:47:09 nativespace-cdp sshd[31935]: Failed password for root from 103.55.49.10 port 48368 ssh2
Oct  1 08:47:10 nativespace-cdp sshd[31935]: Received disconnect from 103.55.49.10 port 48368:11: Bye Bye [preauth]
Oct  1 08:47:10 nativespace-cdp sshd[31935]: Disconnected from 103.55.49.10 port 48368 [preauth]
Oct  1 08:47:10 nativespace-cdp sshd[31951]: Invalid user  from 47.254.33.164 port 32134
Oct  1 08:47:10 nativespace-cdp sshd[31951]: input_userauth_request: invalid user  [preauth]
Oct  1 08:47:10 nativespace-cdp sshd[31951]: Connection closed by 47.254.33.164 port 32134 [preauth]
Oct  1 08:47:11 nativespace-cdp sshd[31957]: Invalid user test from 116.212.135.137 port 47252
Oct  1 08:47:11 nativespace-cdp sshd[31957]: input_userauth_request: invalid user test [preauth]
Oct  1 08:47:11 nativespace-cdp sshd[31957]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:47:11 nativespace-cdp sshd[31957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:47:13 nativespace-cdp sshd[31957]: Failed password for invalid user test from 116.212.135.137 port 47252 ssh2
Oct  1 08:47:15 nativespace-cdp sshd[31957]: Received disconnect from 116.212.135.137 port 47252:11: Bye Bye [preauth]
Oct  1 08:47:15 nativespace-cdp sshd[31957]: Disconnected from 116.212.135.137 port 47252 [preauth]
Oct  1 08:47:38 nativespace-cdp sshd[32029]: Invalid user ubuntu from 213.6.203.226 port 59646
Oct  1 08:47:38 nativespace-cdp sshd[32029]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:47:38 nativespace-cdp sshd[32029]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:47:38 nativespace-cdp sshd[32029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:47:40 nativespace-cdp sshd[32029]: Failed password for invalid user ubuntu from 213.6.203.226 port 59646 ssh2
Oct  1 08:47:40 nativespace-cdp sshd[32029]: Received disconnect from 213.6.203.226 port 59646:11: Bye Bye [preauth]
Oct  1 08:47:40 nativespace-cdp sshd[32029]: Disconnected from 213.6.203.226 port 59646 [preauth]
Oct  1 08:47:40 nativespace-cdp sshd[32045]: Invalid user test from 103.170.86.94 port 38070
Oct  1 08:47:40 nativespace-cdp sshd[32045]: input_userauth_request: invalid user test [preauth]
Oct  1 08:47:40 nativespace-cdp sshd[32045]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:47:40 nativespace-cdp sshd[32045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:47:42 nativespace-cdp sshd[32045]: Failed password for invalid user test from 103.170.86.94 port 38070 ssh2
Oct  1 08:47:42 nativespace-cdp sshd[32045]: Received disconnect from 103.170.86.94 port 38070:11: Bye Bye [preauth]
Oct  1 08:47:42 nativespace-cdp sshd[32045]: Disconnected from 103.170.86.94 port 38070 [preauth]
Oct  1 08:47:59 nativespace-cdp sshd[32074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137  user=root
Oct  1 08:47:59 nativespace-cdp sshd[32074]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:48:01 nativespace-cdp sshd[32074]: Failed password for root from 116.212.135.137 port 39442 ssh2
Oct  1 08:48:01 nativespace-cdp sshd[32074]: Received disconnect from 116.212.135.137 port 39442:11: Bye Bye [preauth]
Oct  1 08:48:01 nativespace-cdp sshd[32074]: Disconnected from 116.212.135.137 port 39442 [preauth]
Oct  1 08:48:06 nativespace-cdp sshd[32103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10  user=root
Oct  1 08:48:06 nativespace-cdp sshd[32103]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:48:07 nativespace-cdp sshd[32103]: Failed password for root from 103.55.49.10 port 44154 ssh2
Oct  1 08:48:08 nativespace-cdp sshd[32103]: Received disconnect from 103.55.49.10 port 44154:11: Bye Bye [preauth]
Oct  1 08:48:08 nativespace-cdp sshd[32103]: Disconnected from 103.55.49.10 port 44154 [preauth]
Oct  1 08:48:18 nativespace-cdp sshd[32127]: Invalid user svn from 213.6.203.226 port 42566
Oct  1 08:48:18 nativespace-cdp sshd[32127]: input_userauth_request: invalid user svn [preauth]
Oct  1 08:48:18 nativespace-cdp sshd[32127]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:48:18 nativespace-cdp sshd[32127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:48:19 nativespace-cdp sshd[32127]: Failed password for invalid user svn from 213.6.203.226 port 42566 ssh2
Oct  1 08:48:19 nativespace-cdp sshd[32127]: Received disconnect from 213.6.203.226 port 42566:11: Bye Bye [preauth]
Oct  1 08:48:19 nativespace-cdp sshd[32127]: Disconnected from 213.6.203.226 port 42566 [preauth]
Oct  1 08:48:25 nativespace-cdp sshd[32152]: Invalid user ubuntu from 103.170.86.94 port 42182
Oct  1 08:48:25 nativespace-cdp sshd[32152]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:48:25 nativespace-cdp sshd[32152]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:48:25 nativespace-cdp sshd[32152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:48:27 nativespace-cdp sshd[32152]: Failed password for invalid user ubuntu from 103.170.86.94 port 42182 ssh2
Oct  1 08:48:27 nativespace-cdp sshd[32152]: Received disconnect from 103.170.86.94 port 42182:11: Bye Bye [preauth]
Oct  1 08:48:27 nativespace-cdp sshd[32152]: Disconnected from 103.170.86.94 port 42182 [preauth]
Oct  1 08:48:45 nativespace-cdp sshd[32200]: Invalid user tomcat from 116.212.135.137 port 58684
Oct  1 08:48:45 nativespace-cdp sshd[32200]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 08:48:45 nativespace-cdp sshd[32200]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:48:45 nativespace-cdp sshd[32200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:48:48 nativespace-cdp sshd[32200]: Failed password for invalid user tomcat from 116.212.135.137 port 58684 ssh2
Oct  1 08:48:48 nativespace-cdp sshd[32200]: Received disconnect from 116.212.135.137 port 58684:11: Bye Bye [preauth]
Oct  1 08:48:48 nativespace-cdp sshd[32200]: Disconnected from 116.212.135.137 port 58684 [preauth]
Oct  1 08:48:57 nativespace-cdp sshd[32233]: Invalid user thomas from 213.6.203.226 port 47819
Oct  1 08:48:57 nativespace-cdp sshd[32233]: input_userauth_request: invalid user thomas [preauth]
Oct  1 08:48:57 nativespace-cdp sshd[32233]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:48:57 nativespace-cdp sshd[32233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:49:00 nativespace-cdp sshd[32233]: Failed password for invalid user thomas from 213.6.203.226 port 47819 ssh2
Oct  1 08:49:00 nativespace-cdp sshd[32233]: Received disconnect from 213.6.203.226 port 47819:11: Bye Bye [preauth]
Oct  1 08:49:00 nativespace-cdp sshd[32233]: Disconnected from 213.6.203.226 port 47819 [preauth]
Oct  1 08:49:06 nativespace-cdp sshd[32266]: Invalid user test from 103.55.49.10 port 46760
Oct  1 08:49:06 nativespace-cdp sshd[32266]: input_userauth_request: invalid user test [preauth]
Oct  1 08:49:06 nativespace-cdp sshd[32266]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:49:06 nativespace-cdp sshd[32266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:49:08 nativespace-cdp sshd[32266]: Failed password for invalid user test from 103.55.49.10 port 46760 ssh2
Oct  1 08:49:09 nativespace-cdp sshd[32266]: Received disconnect from 103.55.49.10 port 46760:11: Bye Bye [preauth]
Oct  1 08:49:09 nativespace-cdp sshd[32266]: Disconnected from 103.55.49.10 port 46760 [preauth]
Oct  1 08:49:11 nativespace-cdp sshd[32282]: Invalid user thomas from 103.170.86.94 port 50696
Oct  1 08:49:11 nativespace-cdp sshd[32282]: input_userauth_request: invalid user thomas [preauth]
Oct  1 08:49:11 nativespace-cdp sshd[32282]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:49:11 nativespace-cdp sshd[32282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:49:12 nativespace-cdp sshd[32282]: Failed password for invalid user thomas from 103.170.86.94 port 50696 ssh2
Oct  1 08:49:13 nativespace-cdp sshd[32282]: Received disconnect from 103.170.86.94 port 50696:11: Bye Bye [preauth]
Oct  1 08:49:13 nativespace-cdp sshd[32282]: Disconnected from 103.170.86.94 port 50696 [preauth]
Oct  1 08:49:31 nativespace-cdp sshd[32320]: Invalid user ubuntu from 116.212.135.137 port 36028
Oct  1 08:49:31 nativespace-cdp sshd[32320]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:49:31 nativespace-cdp sshd[32320]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:49:31 nativespace-cdp sshd[32320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:49:31 nativespace-cdp sshd[32327]: Invalid user odoo from 213.6.203.226 port 58622
Oct  1 08:49:31 nativespace-cdp sshd[32327]: input_userauth_request: invalid user odoo [preauth]
Oct  1 08:49:31 nativespace-cdp sshd[32327]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:49:31 nativespace-cdp sshd[32327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:49:33 nativespace-cdp sshd[32320]: Failed password for invalid user ubuntu from 116.212.135.137 port 36028 ssh2
Oct  1 08:49:33 nativespace-cdp sshd[32327]: Failed password for invalid user odoo from 213.6.203.226 port 58622 ssh2
Oct  1 08:49:33 nativespace-cdp sshd[32327]: Received disconnect from 213.6.203.226 port 58622:11: Bye Bye [preauth]
Oct  1 08:49:33 nativespace-cdp sshd[32327]: Disconnected from 213.6.203.226 port 58622 [preauth]
Oct  1 08:49:33 nativespace-cdp sshd[32320]: Received disconnect from 116.212.135.137 port 36028:11: Bye Bye [preauth]
Oct  1 08:49:33 nativespace-cdp sshd[32320]: Disconnected from 116.212.135.137 port 36028 [preauth]
Oct  1 08:49:50 nativespace-cdp sshd[32418]: Invalid user user from 103.170.86.94 port 34622
Oct  1 08:49:50 nativespace-cdp sshd[32418]: input_userauth_request: invalid user user [preauth]
Oct  1 08:49:50 nativespace-cdp sshd[32418]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:49:50 nativespace-cdp sshd[32418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:49:52 nativespace-cdp sshd[32418]: Failed password for invalid user user from 103.170.86.94 port 34622 ssh2
Oct  1 08:49:52 nativespace-cdp sshd[32418]: Received disconnect from 103.170.86.94 port 34622:11: Bye Bye [preauth]
Oct  1 08:49:52 nativespace-cdp sshd[32418]: Disconnected from 103.170.86.94 port 34622 [preauth]
Oct  1 08:50:09 nativespace-cdp sshd[32585]: Invalid user test01 from 213.6.203.226 port 38344
Oct  1 08:50:09 nativespace-cdp sshd[32585]: input_userauth_request: invalid user test01 [preauth]
Oct  1 08:50:09 nativespace-cdp sshd[32585]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:50:09 nativespace-cdp sshd[32585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:50:11 nativespace-cdp sshd[32585]: Failed password for invalid user test01 from 213.6.203.226 port 38344 ssh2
Oct  1 08:50:11 nativespace-cdp sshd[32585]: Received disconnect from 213.6.203.226 port 38344:11: Bye Bye [preauth]
Oct  1 08:50:11 nativespace-cdp sshd[32585]: Disconnected from 213.6.203.226 port 38344 [preauth]
Oct  1 08:50:16 nativespace-cdp sshd[32647]: Invalid user deploy from 116.212.135.137 port 56740
Oct  1 08:50:16 nativespace-cdp sshd[32647]: input_userauth_request: invalid user deploy [preauth]
Oct  1 08:50:16 nativespace-cdp sshd[32647]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:50:16 nativespace-cdp sshd[32647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:50:19 nativespace-cdp sshd[32647]: Failed password for invalid user deploy from 116.212.135.137 port 56740 ssh2
Oct  1 08:50:21 nativespace-cdp sshd[32647]: Received disconnect from 116.212.135.137 port 56740:11: Bye Bye [preauth]
Oct  1 08:50:21 nativespace-cdp sshd[32647]: Disconnected from 116.212.135.137 port 56740 [preauth]
Oct  1 08:50:34 nativespace-cdp sshd[32681]: Invalid user ubuntu from 103.170.86.94 port 45666
Oct  1 08:50:34 nativespace-cdp sshd[32681]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:50:34 nativespace-cdp sshd[32681]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:50:34 nativespace-cdp sshd[32681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:50:36 nativespace-cdp sshd[32681]: Failed password for invalid user ubuntu from 103.170.86.94 port 45666 ssh2
Oct  1 08:50:36 nativespace-cdp sshd[32681]: Received disconnect from 103.170.86.94 port 45666:11: Bye Bye [preauth]
Oct  1 08:50:36 nativespace-cdp sshd[32681]: Disconnected from 103.170.86.94 port 45666 [preauth]
Oct  1 08:50:39 nativespace-cdp sshd[32705]: Invalid user tg from 103.55.49.10 port 42200
Oct  1 08:50:39 nativespace-cdp sshd[32705]: input_userauth_request: invalid user tg [preauth]
Oct  1 08:50:39 nativespace-cdp sshd[32705]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:50:39 nativespace-cdp sshd[32705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:50:41 nativespace-cdp sshd[32705]: Failed password for invalid user tg from 103.55.49.10 port 42200 ssh2
Oct  1 08:50:47 nativespace-cdp sshd[32705]: Received disconnect from 103.55.49.10 port 42200:11: Bye Bye [preauth]
Oct  1 08:50:47 nativespace-cdp sshd[32705]: Disconnected from 103.55.49.10 port 42200 [preauth]
Oct  1 08:50:48 nativespace-cdp sshd[32727]: Invalid user test from 146.190.143.102 port 33964
Oct  1 08:50:48 nativespace-cdp sshd[32727]: input_userauth_request: invalid user test [preauth]
Oct  1 08:50:48 nativespace-cdp sshd[32727]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:50:48 nativespace-cdp sshd[32727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:50:50 nativespace-cdp sshd[32727]: Failed password for invalid user test from 146.190.143.102 port 33964 ssh2
Oct  1 08:50:50 nativespace-cdp sshd[323]: Invalid user ubuntu from 213.6.203.226 port 42327
Oct  1 08:50:50 nativespace-cdp sshd[323]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:50:50 nativespace-cdp sshd[323]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:50:50 nativespace-cdp sshd[323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:50:50 nativespace-cdp sshd[32727]: Received disconnect from 146.190.143.102 port 33964:11: Bye Bye [preauth]
Oct  1 08:50:50 nativespace-cdp sshd[32727]: Disconnected from 146.190.143.102 port 33964 [preauth]
Oct  1 08:50:52 nativespace-cdp sshd[323]: Failed password for invalid user ubuntu from 213.6.203.226 port 42327 ssh2
Oct  1 08:50:56 nativespace-cdp sshd[323]: Received disconnect from 213.6.203.226 port 42327:11: Bye Bye [preauth]
Oct  1 08:50:56 nativespace-cdp sshd[323]: Disconnected from 213.6.203.226 port 42327 [preauth]
Oct  1 08:51:06 nativespace-cdp sshd[366]: Invalid user tg from 116.212.135.137 port 38394
Oct  1 08:51:06 nativespace-cdp sshd[366]: input_userauth_request: invalid user tg [preauth]
Oct  1 08:51:06 nativespace-cdp sshd[366]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:51:06 nativespace-cdp sshd[366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:51:08 nativespace-cdp sshd[366]: Failed password for invalid user tg from 116.212.135.137 port 38394 ssh2
Oct  1 08:51:08 nativespace-cdp sshd[366]: Received disconnect from 116.212.135.137 port 38394:11: Bye Bye [preauth]
Oct  1 08:51:08 nativespace-cdp sshd[366]: Disconnected from 116.212.135.137 port 38394 [preauth]
Oct  1 08:51:19 nativespace-cdp sshd[433]: Invalid user test from 103.170.86.94 port 38064
Oct  1 08:51:19 nativespace-cdp sshd[433]: input_userauth_request: invalid user test [preauth]
Oct  1 08:51:19 nativespace-cdp sshd[433]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:51:19 nativespace-cdp sshd[433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:51:21 nativespace-cdp sshd[433]: Failed password for invalid user test from 103.170.86.94 port 38064 ssh2
Oct  1 08:51:21 nativespace-cdp sshd[433]: Received disconnect from 103.170.86.94 port 38064:11: Bye Bye [preauth]
Oct  1 08:51:21 nativespace-cdp sshd[433]: Disconnected from 103.170.86.94 port 38064 [preauth]
Oct  1 08:51:29 nativespace-cdp sshd[485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226  user=root
Oct  1 08:51:29 nativespace-cdp sshd[485]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:51:30 nativespace-cdp sshd[485]: Failed password for root from 213.6.203.226 port 44987 ssh2
Oct  1 08:51:30 nativespace-cdp sshd[485]: Received disconnect from 213.6.203.226 port 44987:11: Bye Bye [preauth]
Oct  1 08:51:30 nativespace-cdp sshd[485]: Disconnected from 213.6.203.226 port 44987 [preauth]
Oct  1 08:51:36 nativespace-cdp sshd[557]: Connection closed by 159.100.136.21 port 52820 [preauth]
Oct  1 08:51:40 nativespace-cdp sshd[553]: Connection closed by 103.55.49.10 port 42302 [preauth]
Oct  1 08:51:42 nativespace-cdp sshd[601]: Invalid user ubuntu from 146.190.143.102 port 44146
Oct  1 08:51:42 nativespace-cdp sshd[601]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:51:42 nativespace-cdp sshd[601]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:51:42 nativespace-cdp sshd[601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:51:44 nativespace-cdp sshd[601]: Failed password for invalid user ubuntu from 146.190.143.102 port 44146 ssh2
Oct  1 08:51:47 nativespace-cdp sshd[601]: Received disconnect from 146.190.143.102 port 44146:11: Bye Bye [preauth]
Oct  1 08:51:47 nativespace-cdp sshd[601]: Disconnected from 146.190.143.102 port 44146 [preauth]
Oct  1 08:51:51 nativespace-cdp sshd[730]: Invalid user odoo from 116.212.135.137 port 40608
Oct  1 08:51:51 nativespace-cdp sshd[730]: input_userauth_request: invalid user odoo [preauth]
Oct  1 08:51:51 nativespace-cdp sshd[730]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:51:51 nativespace-cdp sshd[730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:51:53 nativespace-cdp sshd[730]: Failed password for invalid user odoo from 116.212.135.137 port 40608 ssh2
Oct  1 08:51:53 nativespace-cdp sshd[730]: Received disconnect from 116.212.135.137 port 40608:11: Bye Bye [preauth]
Oct  1 08:51:53 nativespace-cdp sshd[730]: Disconnected from 116.212.135.137 port 40608 [preauth]
Oct  1 08:51:59 nativespace-cdp sshd[857]: Invalid user acer from 103.170.86.94 port 48176
Oct  1 08:51:59 nativespace-cdp sshd[857]: input_userauth_request: invalid user acer [preauth]
Oct  1 08:51:59 nativespace-cdp sshd[857]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:51:59 nativespace-cdp sshd[857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:52:01 nativespace-cdp sshd[857]: Failed password for invalid user acer from 103.170.86.94 port 48176 ssh2
Oct  1 08:52:03 nativespace-cdp sshd[857]: Received disconnect from 103.170.86.94 port 48176:11: Bye Bye [preauth]
Oct  1 08:52:03 nativespace-cdp sshd[857]: Disconnected from 103.170.86.94 port 48176 [preauth]
Oct  1 08:52:13 nativespace-cdp sshd[1003]: Invalid user acer from 213.6.203.226 port 37583
Oct  1 08:52:13 nativespace-cdp sshd[1003]: input_userauth_request: invalid user acer [preauth]
Oct  1 08:52:13 nativespace-cdp sshd[1003]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:52:13 nativespace-cdp sshd[1003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:52:15 nativespace-cdp sshd[1003]: Failed password for invalid user acer from 213.6.203.226 port 37583 ssh2
Oct  1 08:52:15 nativespace-cdp sshd[1003]: Received disconnect from 213.6.203.226 port 37583:11: Bye Bye [preauth]
Oct  1 08:52:15 nativespace-cdp sshd[1003]: Disconnected from 213.6.203.226 port 37583 [preauth]
Oct  1 08:52:39 nativespace-cdp sshd[1224]: Invalid user ubuntu from 146.190.143.102 port 52464
Oct  1 08:52:39 nativespace-cdp sshd[1224]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:52:39 nativespace-cdp sshd[1224]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:52:39 nativespace-cdp sshd[1224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:52:39 nativespace-cdp sshd[1227]: Invalid user sysadmin from 116.212.135.137 port 46546
Oct  1 08:52:39 nativespace-cdp sshd[1227]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 08:52:39 nativespace-cdp sshd[1227]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:52:39 nativespace-cdp sshd[1227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:52:41 nativespace-cdp sshd[1224]: Failed password for invalid user ubuntu from 146.190.143.102 port 52464 ssh2
Oct  1 08:52:41 nativespace-cdp sshd[1224]: Received disconnect from 146.190.143.102 port 52464:11: Bye Bye [preauth]
Oct  1 08:52:41 nativespace-cdp sshd[1224]: Disconnected from 146.190.143.102 port 52464 [preauth]
Oct  1 08:52:42 nativespace-cdp sshd[1227]: Failed password for invalid user sysadmin from 116.212.135.137 port 46546 ssh2
Oct  1 08:52:42 nativespace-cdp sshd[1227]: Received disconnect from 116.212.135.137 port 46546:11: Bye Bye [preauth]
Oct  1 08:52:42 nativespace-cdp sshd[1227]: Disconnected from 116.212.135.137 port 46546 [preauth]
Oct  1 08:52:47 nativespace-cdp sshd[1279]: Invalid user ubuntu from 103.170.86.94 port 40404
Oct  1 08:52:47 nativespace-cdp sshd[1279]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:52:47 nativespace-cdp sshd[1279]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:52:47 nativespace-cdp sshd[1279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:52:48 nativespace-cdp sshd[1279]: Failed password for invalid user ubuntu from 103.170.86.94 port 40404 ssh2
Oct  1 08:52:48 nativespace-cdp sshd[1279]: Received disconnect from 103.170.86.94 port 40404:11: Bye Bye [preauth]
Oct  1 08:52:48 nativespace-cdp sshd[1279]: Disconnected from 103.170.86.94 port 40404 [preauth]
Oct  1 08:52:56 nativespace-cdp sshd[1338]: Invalid user user from 213.6.203.226 port 46212
Oct  1 08:52:56 nativespace-cdp sshd[1338]: input_userauth_request: invalid user user [preauth]
Oct  1 08:52:56 nativespace-cdp sshd[1338]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:52:56 nativespace-cdp sshd[1338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:52:59 nativespace-cdp sshd[1338]: Failed password for invalid user user from 213.6.203.226 port 46212 ssh2
Oct  1 08:52:59 nativespace-cdp sshd[1338]: Received disconnect from 213.6.203.226 port 46212:11: Bye Bye [preauth]
Oct  1 08:52:59 nativespace-cdp sshd[1338]: Disconnected from 213.6.203.226 port 46212 [preauth]
Oct  1 08:53:28 nativespace-cdp sshd[1554]: Invalid user support from 103.170.86.94 port 35728
Oct  1 08:53:28 nativespace-cdp sshd[1554]: input_userauth_request: invalid user support [preauth]
Oct  1 08:53:28 nativespace-cdp sshd[1554]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:53:28 nativespace-cdp sshd[1554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:53:28 nativespace-cdp sshd[1552]: Invalid user user1 from 116.212.135.137 port 57994
Oct  1 08:53:28 nativespace-cdp sshd[1552]: input_userauth_request: invalid user user1 [preauth]
Oct  1 08:53:28 nativespace-cdp sshd[1552]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:53:28 nativespace-cdp sshd[1552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:53:29 nativespace-cdp sshd[1550]: Invalid user odoo from 103.55.49.10 port 36874
Oct  1 08:53:29 nativespace-cdp sshd[1550]: input_userauth_request: invalid user odoo [preauth]
Oct  1 08:53:29 nativespace-cdp sshd[1550]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:53:29 nativespace-cdp sshd[1550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:53:30 nativespace-cdp sshd[1550]: Failed password for invalid user odoo from 103.55.49.10 port 36874 ssh2
Oct  1 08:53:30 nativespace-cdp sshd[1554]: Failed password for invalid user support from 103.170.86.94 port 35728 ssh2
Oct  1 08:53:30 nativespace-cdp sshd[1554]: Received disconnect from 103.170.86.94 port 35728:11: Bye Bye [preauth]
Oct  1 08:53:30 nativespace-cdp sshd[1554]: Disconnected from 103.170.86.94 port 35728 [preauth]
Oct  1 08:53:30 nativespace-cdp sshd[1552]: Failed password for invalid user user1 from 116.212.135.137 port 57994 ssh2
Oct  1 08:53:31 nativespace-cdp sshd[1550]: Received disconnect from 103.55.49.10 port 36874:11: Bye Bye [preauth]
Oct  1 08:53:31 nativespace-cdp sshd[1550]: Disconnected from 103.55.49.10 port 36874 [preauth]
Oct  1 08:53:31 nativespace-cdp sshd[1552]: Received disconnect from 116.212.135.137 port 57994:11: Bye Bye [preauth]
Oct  1 08:53:31 nativespace-cdp sshd[1552]: Disconnected from 116.212.135.137 port 57994 [preauth]
Oct  1 08:53:36 nativespace-cdp sshd[1670]: Invalid user test from 213.6.203.226 port 39325
Oct  1 08:53:36 nativespace-cdp sshd[1670]: input_userauth_request: invalid user test [preauth]
Oct  1 08:53:36 nativespace-cdp sshd[1670]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:53:36 nativespace-cdp sshd[1670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:53:38 nativespace-cdp sshd[1670]: Failed password for invalid user test from 213.6.203.226 port 39325 ssh2
Oct  1 08:53:43 nativespace-cdp sshd[1670]: Received disconnect from 213.6.203.226 port 39325:11: Bye Bye [preauth]
Oct  1 08:53:43 nativespace-cdp sshd[1670]: Disconnected from 213.6.203.226 port 39325 [preauth]
Oct  1 08:54:17 nativespace-cdp sshd[1870]: Invalid user superman from 213.6.203.226 port 46244
Oct  1 08:54:17 nativespace-cdp sshd[1870]: input_userauth_request: invalid user superman [preauth]
Oct  1 08:54:17 nativespace-cdp sshd[1870]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:54:17 nativespace-cdp sshd[1870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:54:18 nativespace-cdp sshd[1874]: Invalid user user from 116.212.135.137 port 54448
Oct  1 08:54:18 nativespace-cdp sshd[1874]: input_userauth_request: invalid user user [preauth]
Oct  1 08:54:18 nativespace-cdp sshd[1874]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:54:18 nativespace-cdp sshd[1874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:54:19 nativespace-cdp sshd[1870]: Failed password for invalid user superman from 213.6.203.226 port 46244 ssh2
Oct  1 08:54:19 nativespace-cdp sshd[1870]: Received disconnect from 213.6.203.226 port 46244:11: Bye Bye [preauth]
Oct  1 08:54:19 nativespace-cdp sshd[1870]: Disconnected from 213.6.203.226 port 46244 [preauth]
Oct  1 08:54:20 nativespace-cdp sshd[1874]: Failed password for invalid user user from 116.212.135.137 port 54448 ssh2
Oct  1 08:54:24 nativespace-cdp sshd[1874]: Received disconnect from 116.212.135.137 port 54448:11: Bye Bye [preauth]
Oct  1 08:54:24 nativespace-cdp sshd[1874]: Disconnected from 116.212.135.137 port 54448 [preauth]
Oct  1 08:54:27 nativespace-cdp sshd[1929]: Invalid user user from 103.55.49.10 port 59982
Oct  1 08:54:27 nativespace-cdp sshd[1929]: input_userauth_request: invalid user user [preauth]
Oct  1 08:54:27 nativespace-cdp sshd[1929]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:54:27 nativespace-cdp sshd[1929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:54:29 nativespace-cdp sshd[1929]: Failed password for invalid user user from 103.55.49.10 port 59982 ssh2
Oct  1 08:54:29 nativespace-cdp sshd[1929]: Received disconnect from 103.55.49.10 port 59982:11: Bye Bye [preauth]
Oct  1 08:54:29 nativespace-cdp sshd[1929]: Disconnected from 103.55.49.10 port 59982 [preauth]
Oct  1 08:54:35 nativespace-cdp sshd[2012]: Invalid user testuser from 146.190.143.102 port 59294
Oct  1 08:54:35 nativespace-cdp sshd[2012]: input_userauth_request: invalid user testuser [preauth]
Oct  1 08:54:35 nativespace-cdp sshd[2012]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:54:35 nativespace-cdp sshd[2012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:54:37 nativespace-cdp sshd[2012]: Failed password for invalid user testuser from 146.190.143.102 port 59294 ssh2
Oct  1 08:54:38 nativespace-cdp sshd[2012]: Received disconnect from 146.190.143.102 port 59294:11: Bye Bye [preauth]
Oct  1 08:54:38 nativespace-cdp sshd[2012]: Disconnected from 146.190.143.102 port 59294 [preauth]
Oct  1 08:54:59 nativespace-cdp sshd[2188]: Invalid user abhishek from 213.6.203.226 port 32882
Oct  1 08:54:59 nativespace-cdp sshd[2188]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 08:54:59 nativespace-cdp sshd[2188]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:54:59 nativespace-cdp sshd[2188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:55:01 nativespace-cdp sshd[2188]: Failed password for invalid user abhishek from 213.6.203.226 port 32882 ssh2
Oct  1 08:55:01 nativespace-cdp sshd[2188]: Received disconnect from 213.6.203.226 port 32882:11: Bye Bye [preauth]
Oct  1 08:55:01 nativespace-cdp sshd[2188]: Disconnected from 213.6.203.226 port 32882 [preauth]
Oct  1 08:55:08 nativespace-cdp sshd[2298]: Invalid user test from 116.212.135.137 port 34534
Oct  1 08:55:08 nativespace-cdp sshd[2298]: input_userauth_request: invalid user test [preauth]
Oct  1 08:55:08 nativespace-cdp sshd[2298]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:55:08 nativespace-cdp sshd[2298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:55:10 nativespace-cdp sshd[2298]: Failed password for invalid user test from 116.212.135.137 port 34534 ssh2
Oct  1 08:55:10 nativespace-cdp sshd[2298]: Received disconnect from 116.212.135.137 port 34534:11: Bye Bye [preauth]
Oct  1 08:55:10 nativespace-cdp sshd[2298]: Disconnected from 116.212.135.137 port 34534 [preauth]
Oct  1 08:55:38 nativespace-cdp sshd[2368]: Invalid user support from 213.6.203.226 port 58605
Oct  1 08:55:38 nativespace-cdp sshd[2368]: input_userauth_request: invalid user support [preauth]
Oct  1 08:55:38 nativespace-cdp sshd[2368]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:55:38 nativespace-cdp sshd[2368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:55:38 nativespace-cdp sshd[2382]: Invalid user tuan from 103.170.86.94 port 34174
Oct  1 08:55:38 nativespace-cdp sshd[2382]: input_userauth_request: invalid user tuan [preauth]
Oct  1 08:55:38 nativespace-cdp sshd[2382]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:55:38 nativespace-cdp sshd[2382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:55:40 nativespace-cdp sshd[2368]: Failed password for invalid user support from 213.6.203.226 port 58605 ssh2
Oct  1 08:55:40 nativespace-cdp sshd[2368]: Received disconnect from 213.6.203.226 port 58605:11: Bye Bye [preauth]
Oct  1 08:55:40 nativespace-cdp sshd[2368]: Disconnected from 213.6.203.226 port 58605 [preauth]
Oct  1 08:55:40 nativespace-cdp sshd[2382]: Failed password for invalid user tuan from 103.170.86.94 port 34174 ssh2
Oct  1 08:55:46 nativespace-cdp sshd[2382]: Received disconnect from 103.170.86.94 port 34174:11: Bye Bye [preauth]
Oct  1 08:55:46 nativespace-cdp sshd[2382]: Disconnected from 103.170.86.94 port 34174 [preauth]
Oct  1 08:55:58 nativespace-cdp sshd[2422]: Connection closed by 116.212.135.137 port 35022 [preauth]
Oct  1 08:56:21 nativespace-cdp sshd[2564]: Invalid user test from 103.170.86.94 port 38962
Oct  1 08:56:21 nativespace-cdp sshd[2564]: input_userauth_request: invalid user test [preauth]
Oct  1 08:56:21 nativespace-cdp sshd[2564]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:56:21 nativespace-cdp sshd[2564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:56:21 nativespace-cdp sshd[2549]: Invalid user steam from 213.6.203.226 port 49192
Oct  1 08:56:21 nativespace-cdp sshd[2549]: input_userauth_request: invalid user steam [preauth]
Oct  1 08:56:21 nativespace-cdp sshd[2549]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:56:21 nativespace-cdp sshd[2549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:56:23 nativespace-cdp sshd[2564]: Failed password for invalid user test from 103.170.86.94 port 38962 ssh2
Oct  1 08:56:23 nativespace-cdp sshd[2564]: Received disconnect from 103.170.86.94 port 38962:11: Bye Bye [preauth]
Oct  1 08:56:23 nativespace-cdp sshd[2564]: Disconnected from 103.170.86.94 port 38962 [preauth]
Oct  1 08:56:23 nativespace-cdp sshd[2549]: Failed password for invalid user steam from 213.6.203.226 port 49192 ssh2
Oct  1 08:56:23 nativespace-cdp sshd[2549]: Received disconnect from 213.6.203.226 port 49192:11: Bye Bye [preauth]
Oct  1 08:56:23 nativespace-cdp sshd[2549]: Disconnected from 213.6.203.226 port 49192 [preauth]
Oct  1 08:56:28 nativespace-cdp sshd[2580]: Invalid user abhishek from 146.190.143.102 port 37892
Oct  1 08:56:28 nativespace-cdp sshd[2580]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 08:56:28 nativespace-cdp sshd[2580]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:56:28 nativespace-cdp sshd[2580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:56:29 nativespace-cdp sshd[2583]: Invalid user airflow from 103.55.49.10 port 54714
Oct  1 08:56:29 nativespace-cdp sshd[2583]: input_userauth_request: invalid user airflow [preauth]
Oct  1 08:56:29 nativespace-cdp sshd[2583]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:56:29 nativespace-cdp sshd[2583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:56:30 nativespace-cdp sshd[2580]: Failed password for invalid user abhishek from 146.190.143.102 port 37892 ssh2
Oct  1 08:56:30 nativespace-cdp sshd[2580]: Received disconnect from 146.190.143.102 port 37892:11: Bye Bye [preauth]
Oct  1 08:56:30 nativespace-cdp sshd[2580]: Disconnected from 146.190.143.102 port 37892 [preauth]
Oct  1 08:56:31 nativespace-cdp sshd[2583]: Failed password for invalid user airflow from 103.55.49.10 port 54714 ssh2
Oct  1 08:56:32 nativespace-cdp sshd[2583]: Received disconnect from 103.55.49.10 port 54714:11: Bye Bye [preauth]
Oct  1 08:56:32 nativespace-cdp sshd[2583]: Disconnected from 103.55.49.10 port 54714 [preauth]
Oct  1 08:56:37 nativespace-cdp sshd[2607]: Connection closed by 159.100.136.21 port 34504 [preauth]
Oct  1 08:56:42 nativespace-cdp sshd[2621]: Invalid user thomas from 116.212.135.137 port 58374
Oct  1 08:56:42 nativespace-cdp sshd[2621]: input_userauth_request: invalid user thomas [preauth]
Oct  1 08:56:42 nativespace-cdp sshd[2621]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:56:42 nativespace-cdp sshd[2621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:56:44 nativespace-cdp sshd[2621]: Failed password for invalid user thomas from 116.212.135.137 port 58374 ssh2
Oct  1 08:56:48 nativespace-cdp sshd[2621]: Received disconnect from 116.212.135.137 port 58374:11: Bye Bye [preauth]
Oct  1 08:56:48 nativespace-cdp sshd[2621]: Disconnected from 116.212.135.137 port 58374 [preauth]
Oct  1 08:56:55 nativespace-cdp sshd[2744]: Invalid user ubuntu from 213.6.203.226 port 60126
Oct  1 08:56:55 nativespace-cdp sshd[2744]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:56:55 nativespace-cdp sshd[2744]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:56:55 nativespace-cdp sshd[2744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:56:57 nativespace-cdp sshd[2744]: Failed password for invalid user ubuntu from 213.6.203.226 port 60126 ssh2
Oct  1 08:56:58 nativespace-cdp sshd[2744]: Received disconnect from 213.6.203.226 port 60126:11: Bye Bye [preauth]
Oct  1 08:56:58 nativespace-cdp sshd[2744]: Disconnected from 213.6.203.226 port 60126 [preauth]
Oct  1 08:57:04 nativespace-cdp sshd[2779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94  user=root
Oct  1 08:57:04 nativespace-cdp sshd[2779]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:57:06 nativespace-cdp sshd[2779]: Failed password for root from 103.170.86.94 port 40148 ssh2
Oct  1 08:57:06 nativespace-cdp sshd[2779]: Received disconnect from 103.170.86.94 port 40148:11: Bye Bye [preauth]
Oct  1 08:57:06 nativespace-cdp sshd[2779]: Disconnected from 103.170.86.94 port 40148 [preauth]
Oct  1 08:57:21 nativespace-cdp sshd[2834]: Invalid user tg from 146.190.143.102 port 56316
Oct  1 08:57:21 nativespace-cdp sshd[2834]: input_userauth_request: invalid user tg [preauth]
Oct  1 08:57:21 nativespace-cdp sshd[2834]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:57:21 nativespace-cdp sshd[2834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:57:24 nativespace-cdp sshd[2834]: Failed password for invalid user tg from 146.190.143.102 port 56316 ssh2
Oct  1 08:57:24 nativespace-cdp sshd[2834]: Received disconnect from 146.190.143.102 port 56316:11: Bye Bye [preauth]
Oct  1 08:57:24 nativespace-cdp sshd[2834]: Disconnected from 146.190.143.102 port 56316 [preauth]
Oct  1 08:57:34 nativespace-cdp sshd[2869]: Connection closed by 103.55.49.10 port 40334 [preauth]
Oct  1 08:57:35 nativespace-cdp sshd[2880]: Invalid user tuan from 213.6.203.226 port 37468
Oct  1 08:57:35 nativespace-cdp sshd[2880]: input_userauth_request: invalid user tuan [preauth]
Oct  1 08:57:35 nativespace-cdp sshd[2880]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:57:35 nativespace-cdp sshd[2880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:57:36 nativespace-cdp sshd[2870]: Connection closed by 116.212.135.137 port 56264 [preauth]
Oct  1 08:57:37 nativespace-cdp sshd[2880]: Failed password for invalid user tuan from 213.6.203.226 port 37468 ssh2
Oct  1 08:57:42 nativespace-cdp sshd[2880]: Received disconnect from 213.6.203.226 port 37468:11: Bye Bye [preauth]
Oct  1 08:57:42 nativespace-cdp sshd[2880]: Disconnected from 213.6.203.226 port 37468 [preauth]
Oct  1 08:57:48 nativespace-cdp sshd[2989]: Invalid user ubuntu from 103.170.86.94 port 52520
Oct  1 08:57:48 nativespace-cdp sshd[2989]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:57:48 nativespace-cdp sshd[2989]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:57:48 nativespace-cdp sshd[2989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:57:50 nativespace-cdp sshd[2989]: Failed password for invalid user ubuntu from 103.170.86.94 port 52520 ssh2
Oct  1 08:57:50 nativespace-cdp sshd[2989]: Received disconnect from 103.170.86.94 port 52520:11: Bye Bye [preauth]
Oct  1 08:57:50 nativespace-cdp sshd[2989]: Disconnected from 103.170.86.94 port 52520 [preauth]
Oct  1 08:58:16 nativespace-cdp sshd[3062]: Invalid user ubuntu from 213.6.203.226 port 50822
Oct  1 08:58:16 nativespace-cdp sshd[3062]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:58:16 nativespace-cdp sshd[3062]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:58:16 nativespace-cdp sshd[3062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:58:17 nativespace-cdp sshd[3059]: Invalid user nexus from 116.212.135.137 port 53592
Oct  1 08:58:17 nativespace-cdp sshd[3059]: input_userauth_request: invalid user nexus [preauth]
Oct  1 08:58:17 nativespace-cdp sshd[3059]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:58:17 nativespace-cdp sshd[3059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:58:18 nativespace-cdp sshd[3059]: Failed password for invalid user nexus from 116.212.135.137 port 53592 ssh2
Oct  1 08:58:19 nativespace-cdp sshd[3062]: Failed password for invalid user ubuntu from 213.6.203.226 port 50822 ssh2
Oct  1 08:58:19 nativespace-cdp sshd[3062]: Received disconnect from 213.6.203.226 port 50822:11: Bye Bye [preauth]
Oct  1 08:58:19 nativespace-cdp sshd[3062]: Disconnected from 213.6.203.226 port 50822 [preauth]
Oct  1 08:58:19 nativespace-cdp sshd[3059]: Received disconnect from 116.212.135.137 port 53592:11: Bye Bye [preauth]
Oct  1 08:58:19 nativespace-cdp sshd[3059]: Disconnected from 116.212.135.137 port 53592 [preauth]
Oct  1 08:58:23 nativespace-cdp sshd[3074]: Invalid user tomcat from 146.190.143.102 port 56214
Oct  1 08:58:23 nativespace-cdp sshd[3074]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 08:58:23 nativespace-cdp sshd[3074]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:58:23 nativespace-cdp sshd[3074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 08:58:25 nativespace-cdp sshd[3074]: Failed password for invalid user tomcat from 146.190.143.102 port 56214 ssh2
Oct  1 08:58:25 nativespace-cdp sshd[3074]: Received disconnect from 146.190.143.102 port 56214:11: Bye Bye [preauth]
Oct  1 08:58:25 nativespace-cdp sshd[3074]: Disconnected from 146.190.143.102 port 56214 [preauth]
Oct  1 08:58:27 nativespace-cdp sshd[3088]: Invalid user ubuntu from 103.55.49.10 port 33090
Oct  1 08:58:27 nativespace-cdp sshd[3088]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:58:27 nativespace-cdp sshd[3088]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:58:27 nativespace-cdp sshd[3088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:58:30 nativespace-cdp sshd[3088]: Failed password for invalid user ubuntu from 103.55.49.10 port 33090 ssh2
Oct  1 08:58:30 nativespace-cdp sshd[3088]: Received disconnect from 103.55.49.10 port 33090:11: Bye Bye [preauth]
Oct  1 08:58:30 nativespace-cdp sshd[3088]: Disconnected from 103.55.49.10 port 33090 [preauth]
Oct  1 08:58:33 nativespace-cdp sshd[3109]: Invalid user test from 103.170.86.94 port 56886
Oct  1 08:58:33 nativespace-cdp sshd[3109]: input_userauth_request: invalid user test [preauth]
Oct  1 08:58:33 nativespace-cdp sshd[3109]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:58:33 nativespace-cdp sshd[3109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:58:35 nativespace-cdp sshd[3109]: Failed password for invalid user test from 103.170.86.94 port 56886 ssh2
Oct  1 08:58:36 nativespace-cdp sshd[3109]: Received disconnect from 103.170.86.94 port 56886:11: Bye Bye [preauth]
Oct  1 08:58:36 nativespace-cdp sshd[3109]: Disconnected from 103.170.86.94 port 56886 [preauth]
Oct  1 08:58:57 nativespace-cdp sshd[3167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226  user=root
Oct  1 08:58:57 nativespace-cdp sshd[3167]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:58:59 nativespace-cdp sshd[3167]: Failed password for root from 213.6.203.226 port 56160 ssh2
Oct  1 08:58:59 nativespace-cdp sshd[3167]: Received disconnect from 213.6.203.226 port 56160:11: Bye Bye [preauth]
Oct  1 08:58:59 nativespace-cdp sshd[3167]: Disconnected from 213.6.203.226 port 56160 [preauth]
Oct  1 08:59:03 nativespace-cdp sshd[3213]: Invalid user sysadmin from 116.212.135.137 port 45342
Oct  1 08:59:03 nativespace-cdp sshd[3213]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 08:59:03 nativespace-cdp sshd[3213]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:59:03 nativespace-cdp sshd[3213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:59:06 nativespace-cdp sshd[3213]: Failed password for invalid user sysadmin from 116.212.135.137 port 45342 ssh2
Oct  1 08:59:10 nativespace-cdp sshd[3213]: Received disconnect from 116.212.135.137 port 45342:11: Bye Bye [preauth]
Oct  1 08:59:10 nativespace-cdp sshd[3213]: Disconnected from 116.212.135.137 port 45342 [preauth]
Oct  1 08:59:18 nativespace-cdp sshd[3255]: Invalid user tomcat from 103.170.86.94 port 47804
Oct  1 08:59:18 nativespace-cdp sshd[3255]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 08:59:18 nativespace-cdp sshd[3255]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:59:18 nativespace-cdp sshd[3255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 08:59:20 nativespace-cdp sshd[3255]: Failed password for invalid user tomcat from 103.170.86.94 port 47804 ssh2
Oct  1 08:59:20 nativespace-cdp sshd[3260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102  user=root
Oct  1 08:59:20 nativespace-cdp sshd[3260]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 08:59:20 nativespace-cdp sshd[3255]: Received disconnect from 103.170.86.94 port 47804:11: Bye Bye [preauth]
Oct  1 08:59:20 nativespace-cdp sshd[3255]: Disconnected from 103.170.86.94 port 47804 [preauth]
Oct  1 08:59:22 nativespace-cdp sshd[3260]: Failed password for root from 146.190.143.102 port 51830 ssh2
Oct  1 08:59:22 nativespace-cdp sshd[3260]: Received disconnect from 146.190.143.102 port 51830:11: Bye Bye [preauth]
Oct  1 08:59:22 nativespace-cdp sshd[3260]: Disconnected from 146.190.143.102 port 51830 [preauth]
Oct  1 08:59:26 nativespace-cdp sshd[3280]: Invalid user superman from 103.55.49.10 port 38772
Oct  1 08:59:26 nativespace-cdp sshd[3280]: input_userauth_request: invalid user superman [preauth]
Oct  1 08:59:26 nativespace-cdp sshd[3280]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:59:26 nativespace-cdp sshd[3280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 08:59:27 nativespace-cdp sshd[3280]: Failed password for invalid user superman from 103.55.49.10 port 38772 ssh2
Oct  1 08:59:28 nativespace-cdp sshd[3280]: Received disconnect from 103.55.49.10 port 38772:11: Bye Bye [preauth]
Oct  1 08:59:28 nativespace-cdp sshd[3280]: Disconnected from 103.55.49.10 port 38772 [preauth]
Oct  1 08:59:37 nativespace-cdp sshd[3319]: Invalid user sysadmin from 213.6.203.226 port 42056
Oct  1 08:59:37 nativespace-cdp sshd[3319]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 08:59:37 nativespace-cdp sshd[3319]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:59:37 nativespace-cdp sshd[3319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 08:59:39 nativespace-cdp sshd[3319]: Failed password for invalid user sysadmin from 213.6.203.226 port 42056 ssh2
Oct  1 08:59:39 nativespace-cdp sshd[3319]: Received disconnect from 213.6.203.226 port 42056:11: Bye Bye [preauth]
Oct  1 08:59:39 nativespace-cdp sshd[3319]: Disconnected from 213.6.203.226 port 42056 [preauth]
Oct  1 08:59:52 nativespace-cdp sshd[3353]: Invalid user ubuntu from 116.212.135.137 port 44352
Oct  1 08:59:52 nativespace-cdp sshd[3353]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 08:59:52 nativespace-cdp sshd[3353]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 08:59:52 nativespace-cdp sshd[3353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 08:59:55 nativespace-cdp sshd[3353]: Failed password for invalid user ubuntu from 116.212.135.137 port 44352 ssh2
Oct  1 08:59:55 nativespace-cdp sshd[3353]: Received disconnect from 116.212.135.137 port 44352:11: Bye Bye [preauth]
Oct  1 08:59:55 nativespace-cdp sshd[3353]: Disconnected from 116.212.135.137 port 44352 [preauth]
Oct  1 09:00:03 nativespace-cdp sshd[3517]: Invalid user nexus from 103.170.86.94 port 44316
Oct  1 09:00:03 nativespace-cdp sshd[3517]: input_userauth_request: invalid user nexus [preauth]
Oct  1 09:00:03 nativespace-cdp sshd[3517]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:00:03 nativespace-cdp sshd[3517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 09:00:06 nativespace-cdp sshd[3517]: Failed password for invalid user nexus from 103.170.86.94 port 44316 ssh2
Oct  1 09:00:12 nativespace-cdp sshd[3517]: Received disconnect from 103.170.86.94 port 44316:11: Bye Bye [preauth]
Oct  1 09:00:12 nativespace-cdp sshd[3517]: Disconnected from 103.170.86.94 port 44316 [preauth]
Oct  1 09:00:18 nativespace-cdp sshd[3642]: Invalid user test from 213.6.203.226 port 61325
Oct  1 09:00:18 nativespace-cdp sshd[3642]: input_userauth_request: invalid user test [preauth]
Oct  1 09:00:18 nativespace-cdp sshd[3642]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:00:18 nativespace-cdp sshd[3642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 09:00:20 nativespace-cdp sshd[3642]: Failed password for invalid user test from 213.6.203.226 port 61325 ssh2
Oct  1 09:00:21 nativespace-cdp sshd[3642]: Received disconnect from 213.6.203.226 port 61325:11: Bye Bye [preauth]
Oct  1 09:00:21 nativespace-cdp sshd[3642]: Disconnected from 213.6.203.226 port 61325 [preauth]
Oct  1 09:00:24 nativespace-cdp sshd[3653]: Invalid user usuario from 103.55.49.10 port 55114
Oct  1 09:00:24 nativespace-cdp sshd[3653]: input_userauth_request: invalid user usuario [preauth]
Oct  1 09:00:24 nativespace-cdp sshd[3653]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:00:24 nativespace-cdp sshd[3653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:00:25 nativespace-cdp sshd[3653]: Failed password for invalid user usuario from 103.55.49.10 port 55114 ssh2
Oct  1 09:00:27 nativespace-cdp sshd[3653]: Received disconnect from 103.55.49.10 port 55114:11: Bye Bye [preauth]
Oct  1 09:00:27 nativespace-cdp sshd[3653]: Disconnected from 103.55.49.10 port 55114 [preauth]
Oct  1 09:00:37 nativespace-cdp sshd[3699]: Invalid user username from 116.212.135.137 port 59574
Oct  1 09:00:37 nativespace-cdp sshd[3699]: input_userauth_request: invalid user username [preauth]
Oct  1 09:00:37 nativespace-cdp sshd[3699]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:00:37 nativespace-cdp sshd[3699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 09:00:39 nativespace-cdp sshd[3699]: Failed password for invalid user username from 116.212.135.137 port 59574 ssh2
Oct  1 09:00:39 nativespace-cdp sshd[3699]: Received disconnect from 116.212.135.137 port 59574:11: Bye Bye [preauth]
Oct  1 09:00:39 nativespace-cdp sshd[3699]: Disconnected from 116.212.135.137 port 59574 [preauth]
Oct  1 09:00:49 nativespace-cdp sshd[3743]: Invalid user deploy from 103.170.86.94 port 56270
Oct  1 09:00:49 nativespace-cdp sshd[3743]: input_userauth_request: invalid user deploy [preauth]
Oct  1 09:00:49 nativespace-cdp sshd[3743]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:00:49 nativespace-cdp sshd[3743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 09:00:51 nativespace-cdp sshd[3743]: Failed password for invalid user deploy from 103.170.86.94 port 56270 ssh2
Oct  1 09:00:51 nativespace-cdp sshd[3743]: Received disconnect from 103.170.86.94 port 56270:11: Bye Bye [preauth]
Oct  1 09:00:51 nativespace-cdp sshd[3743]: Disconnected from 103.170.86.94 port 56270 [preauth]
Oct  1 09:00:59 nativespace-cdp sshd[3766]: Invalid user sopuser from 213.6.203.226 port 58775
Oct  1 09:00:59 nativespace-cdp sshd[3766]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 09:00:59 nativespace-cdp sshd[3766]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:00:59 nativespace-cdp sshd[3766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 09:01:02 nativespace-cdp sshd[3766]: Failed password for invalid user sopuser from 213.6.203.226 port 58775 ssh2
Oct  1 09:01:02 nativespace-cdp sshd[3766]: Received disconnect from 213.6.203.226 port 58775:11: Bye Bye [preauth]
Oct  1 09:01:02 nativespace-cdp sshd[3766]: Disconnected from 213.6.203.226 port 58775 [preauth]
Oct  1 09:01:22 nativespace-cdp sshd[3847]: Invalid user test from 103.55.49.10 port 60726
Oct  1 09:01:22 nativespace-cdp sshd[3847]: input_userauth_request: invalid user test [preauth]
Oct  1 09:01:22 nativespace-cdp sshd[3847]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:01:22 nativespace-cdp sshd[3847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:01:23 nativespace-cdp sshd[3854]: Invalid user ubuntu from 116.212.135.137 port 34380
Oct  1 09:01:23 nativespace-cdp sshd[3854]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:01:23 nativespace-cdp sshd[3854]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:01:23 nativespace-cdp sshd[3854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 09:01:24 nativespace-cdp sshd[3847]: Failed password for invalid user test from 103.55.49.10 port 60726 ssh2
Oct  1 09:01:24 nativespace-cdp sshd[3847]: Received disconnect from 103.55.49.10 port 60726:11: Bye Bye [preauth]
Oct  1 09:01:24 nativespace-cdp sshd[3847]: Disconnected from 103.55.49.10 port 60726 [preauth]
Oct  1 09:01:25 nativespace-cdp sshd[3854]: Failed password for invalid user ubuntu from 116.212.135.137 port 34380 ssh2
Oct  1 09:01:25 nativespace-cdp sshd[3854]: Received disconnect from 116.212.135.137 port 34380:11: Bye Bye [preauth]
Oct  1 09:01:25 nativespace-cdp sshd[3854]: Disconnected from 116.212.135.137 port 34380 [preauth]
Oct  1 09:01:30 nativespace-cdp sshd[3879]: Invalid user test from 103.170.86.94 port 39210
Oct  1 09:01:30 nativespace-cdp sshd[3879]: input_userauth_request: invalid user test [preauth]
Oct  1 09:01:30 nativespace-cdp sshd[3879]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:01:30 nativespace-cdp sshd[3879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 09:01:32 nativespace-cdp sshd[3879]: Failed password for invalid user test from 103.170.86.94 port 39210 ssh2
Oct  1 09:01:32 nativespace-cdp sshd[3879]: Received disconnect from 103.170.86.94 port 39210:11: Bye Bye [preauth]
Oct  1 09:01:32 nativespace-cdp sshd[3879]: Disconnected from 103.170.86.94 port 39210 [preauth]
Oct  1 09:01:33 nativespace-cdp sshd[3909]: Connection closed by 159.100.136.21 port 44048 [preauth]
Oct  1 09:01:36 nativespace-cdp sshd[3916]: Invalid user nexus from 213.6.203.226 port 49468
Oct  1 09:01:36 nativespace-cdp sshd[3916]: input_userauth_request: invalid user nexus [preauth]
Oct  1 09:01:36 nativespace-cdp sshd[3916]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:01:36 nativespace-cdp sshd[3916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.203.226
Oct  1 09:01:38 nativespace-cdp sshd[3916]: Failed password for invalid user nexus from 213.6.203.226 port 49468 ssh2
Oct  1 09:01:38 nativespace-cdp sshd[3916]: Received disconnect from 213.6.203.226 port 49468:11: Bye Bye [preauth]
Oct  1 09:01:38 nativespace-cdp sshd[3916]: Disconnected from 213.6.203.226 port 49468 [preauth]
Oct  1 09:02:10 nativespace-cdp sshd[4096]: Invalid user abhishek from 116.212.135.137 port 34812
Oct  1 09:02:10 nativespace-cdp sshd[4096]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 09:02:10 nativespace-cdp sshd[4096]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:02:10 nativespace-cdp sshd[4096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 09:02:11 nativespace-cdp sshd[4106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94  user=root
Oct  1 09:02:11 nativespace-cdp sshd[4106]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:02:12 nativespace-cdp sshd[4096]: Failed password for invalid user abhishek from 116.212.135.137 port 34812 ssh2
Oct  1 09:02:13 nativespace-cdp sshd[4106]: Failed password for root from 103.170.86.94 port 42750 ssh2
Oct  1 09:02:15 nativespace-cdp sshd[4106]: Received disconnect from 103.170.86.94 port 42750:11: Bye Bye [preauth]
Oct  1 09:02:15 nativespace-cdp sshd[4106]: Disconnected from 103.170.86.94 port 42750 [preauth]
Oct  1 09:02:16 nativespace-cdp sshd[4096]: Received disconnect from 116.212.135.137 port 34812:11: Bye Bye [preauth]
Oct  1 09:02:16 nativespace-cdp sshd[4096]: Disconnected from 116.212.135.137 port 34812 [preauth]
Oct  1 09:02:20 nativespace-cdp sshd[4128]: Connection closed by 103.55.49.10 port 56092 [preauth]
Oct  1 09:02:54 nativespace-cdp sshd[4288]: Invalid user test01 from 103.170.86.94 port 54966
Oct  1 09:02:54 nativespace-cdp sshd[4288]: input_userauth_request: invalid user test01 [preauth]
Oct  1 09:02:54 nativespace-cdp sshd[4288]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:02:54 nativespace-cdp sshd[4288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 09:02:54 nativespace-cdp sshd[4286]: Invalid user ubuntu from 116.212.135.137 port 59040
Oct  1 09:02:54 nativespace-cdp sshd[4286]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:02:54 nativespace-cdp sshd[4286]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:02:54 nativespace-cdp sshd[4286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 09:02:56 nativespace-cdp sshd[4288]: Failed password for invalid user test01 from 103.170.86.94 port 54966 ssh2
Oct  1 09:02:56 nativespace-cdp sshd[4286]: Failed password for invalid user ubuntu from 116.212.135.137 port 59040 ssh2
Oct  1 09:02:56 nativespace-cdp sshd[4288]: Received disconnect from 103.170.86.94 port 54966:11: Bye Bye [preauth]
Oct  1 09:02:56 nativespace-cdp sshd[4288]: Disconnected from 103.170.86.94 port 54966 [preauth]
Oct  1 09:02:56 nativespace-cdp sshd[4286]: Received disconnect from 116.212.135.137 port 59040:11: Bye Bye [preauth]
Oct  1 09:02:56 nativespace-cdp sshd[4286]: Disconnected from 116.212.135.137 port 59040 [preauth]
Oct  1 09:03:02 nativespace-cdp sshd[4306]: Invalid user test_user from 146.190.143.102 port 34238
Oct  1 09:03:02 nativespace-cdp sshd[4306]: input_userauth_request: invalid user test_user [preauth]
Oct  1 09:03:02 nativespace-cdp sshd[4306]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:03:02 nativespace-cdp sshd[4306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 09:03:04 nativespace-cdp sshd[4306]: Failed password for invalid user test_user from 146.190.143.102 port 34238 ssh2
Oct  1 09:03:04 nativespace-cdp sshd[4306]: Received disconnect from 146.190.143.102 port 34238:11: Bye Bye [preauth]
Oct  1 09:03:04 nativespace-cdp sshd[4306]: Disconnected from 146.190.143.102 port 34238 [preauth]
Oct  1 09:03:15 nativespace-cdp sshd[4341]: Invalid user ubuntu from 103.55.49.10 port 48784
Oct  1 09:03:15 nativespace-cdp sshd[4341]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:03:15 nativespace-cdp sshd[4341]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:03:15 nativespace-cdp sshd[4341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:03:17 nativespace-cdp sshd[4341]: Failed password for invalid user ubuntu from 103.55.49.10 port 48784 ssh2
Oct  1 09:03:17 nativespace-cdp sshd[4341]: Received disconnect from 103.55.49.10 port 48784:11: Bye Bye [preauth]
Oct  1 09:03:17 nativespace-cdp sshd[4341]: Disconnected from 103.55.49.10 port 48784 [preauth]
Oct  1 09:03:41 nativespace-cdp sshd[4503]: Invalid user usuario from 103.170.86.94 port 37694
Oct  1 09:03:41 nativespace-cdp sshd[4503]: input_userauth_request: invalid user usuario [preauth]
Oct  1 09:03:41 nativespace-cdp sshd[4503]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:03:41 nativespace-cdp sshd[4503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 09:03:42 nativespace-cdp sshd[4512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137  user=root
Oct  1 09:03:42 nativespace-cdp sshd[4512]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:03:43 nativespace-cdp sshd[4503]: Failed password for invalid user usuario from 103.170.86.94 port 37694 ssh2
Oct  1 09:03:44 nativespace-cdp sshd[4503]: Received disconnect from 103.170.86.94 port 37694:11: Bye Bye [preauth]
Oct  1 09:03:44 nativespace-cdp sshd[4503]: Disconnected from 103.170.86.94 port 37694 [preauth]
Oct  1 09:03:44 nativespace-cdp sshd[4512]: Failed password for root from 116.212.135.137 port 49694 ssh2
Oct  1 09:03:45 nativespace-cdp sshd[4512]: Received disconnect from 116.212.135.137 port 49694:11: Bye Bye [preauth]
Oct  1 09:03:45 nativespace-cdp sshd[4512]: Disconnected from 116.212.135.137 port 49694 [preauth]
Oct  1 09:04:00 nativespace-cdp sshd[4539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102  user=root
Oct  1 09:04:00 nativespace-cdp sshd[4539]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:04:02 nativespace-cdp sshd[4539]: Failed password for root from 146.190.143.102 port 55588 ssh2
Oct  1 09:04:02 nativespace-cdp sshd[4539]: Received disconnect from 146.190.143.102 port 55588:11: Bye Bye [preauth]
Oct  1 09:04:02 nativespace-cdp sshd[4539]: Disconnected from 146.190.143.102 port 55588 [preauth]
Oct  1 09:04:11 nativespace-cdp sshd[4581]: Invalid user deploy from 103.55.49.10 port 51502
Oct  1 09:04:11 nativespace-cdp sshd[4581]: input_userauth_request: invalid user deploy [preauth]
Oct  1 09:04:11 nativespace-cdp sshd[4581]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:04:11 nativespace-cdp sshd[4581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:04:13 nativespace-cdp sshd[4581]: Failed password for invalid user deploy from 103.55.49.10 port 51502 ssh2
Oct  1 09:04:15 nativespace-cdp sshd[4581]: Received disconnect from 103.55.49.10 port 51502:11: Bye Bye [preauth]
Oct  1 09:04:15 nativespace-cdp sshd[4581]: Disconnected from 103.55.49.10 port 51502 [preauth]
Oct  1 09:04:21 nativespace-cdp sshd[4615]: Invalid user steam from 103.170.86.94 port 51284
Oct  1 09:04:21 nativespace-cdp sshd[4615]: input_userauth_request: invalid user steam [preauth]
Oct  1 09:04:21 nativespace-cdp sshd[4615]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:04:21 nativespace-cdp sshd[4615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 09:04:24 nativespace-cdp sshd[4615]: Failed password for invalid user steam from 103.170.86.94 port 51284 ssh2
Oct  1 09:04:27 nativespace-cdp sshd[4615]: Received disconnect from 103.170.86.94 port 51284:11: Bye Bye [preauth]
Oct  1 09:04:27 nativespace-cdp sshd[4615]: Disconnected from 103.170.86.94 port 51284 [preauth]
Oct  1 09:04:31 nativespace-cdp sshd[4632]: Invalid user ubuntu from 116.212.135.137 port 38134
Oct  1 09:04:31 nativespace-cdp sshd[4632]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:04:31 nativespace-cdp sshd[4632]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:04:31 nativespace-cdp sshd[4632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 09:04:33 nativespace-cdp sshd[4632]: Failed password for invalid user ubuntu from 116.212.135.137 port 38134 ssh2
Oct  1 09:04:33 nativespace-cdp sshd[4632]: Received disconnect from 116.212.135.137 port 38134:11: Bye Bye [preauth]
Oct  1 09:04:33 nativespace-cdp sshd[4632]: Disconnected from 116.212.135.137 port 38134 [preauth]
Oct  1 09:05:06 nativespace-cdp sshd[5083]: Invalid user odoo from 103.170.86.94 port 33712
Oct  1 09:05:06 nativespace-cdp sshd[5083]: input_userauth_request: invalid user odoo [preauth]
Oct  1 09:05:06 nativespace-cdp sshd[5083]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:05:06 nativespace-cdp sshd[5083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.170.86.94
Oct  1 09:05:09 nativespace-cdp sshd[5083]: Failed password for invalid user odoo from 103.170.86.94 port 33712 ssh2
Oct  1 09:05:10 nativespace-cdp sshd[5083]: Received disconnect from 103.170.86.94 port 33712:11: Bye Bye [preauth]
Oct  1 09:05:10 nativespace-cdp sshd[5083]: Disconnected from 103.170.86.94 port 33712 [preauth]
Oct  1 09:05:12 nativespace-cdp sshd[5091]: Invalid user user from 103.55.49.10 port 50456
Oct  1 09:05:12 nativespace-cdp sshd[5091]: input_userauth_request: invalid user user [preauth]
Oct  1 09:05:12 nativespace-cdp sshd[5091]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:05:12 nativespace-cdp sshd[5091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:05:14 nativespace-cdp sshd[5091]: Failed password for invalid user user from 103.55.49.10 port 50456 ssh2
Oct  1 09:05:14 nativespace-cdp sshd[5091]: Received disconnect from 103.55.49.10 port 50456:11: Bye Bye [preauth]
Oct  1 09:05:14 nativespace-cdp sshd[5091]: Disconnected from 103.55.49.10 port 50456 [preauth]
Oct  1 09:05:21 nativespace-cdp sshd[5128]: Invalid user user from 116.212.135.137 port 49482
Oct  1 09:05:21 nativespace-cdp sshd[5128]: input_userauth_request: invalid user user [preauth]
Oct  1 09:05:21 nativespace-cdp sshd[5128]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:05:21 nativespace-cdp sshd[5128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 09:05:23 nativespace-cdp sshd[5128]: Failed password for invalid user user from 116.212.135.137 port 49482 ssh2
Oct  1 09:05:27 nativespace-cdp sshd[5128]: Received disconnect from 116.212.135.137 port 49482:11: Bye Bye [preauth]
Oct  1 09:05:27 nativespace-cdp sshd[5128]: Disconnected from 116.212.135.137 port 49482 [preauth]
Oct  1 09:05:49 nativespace-cdp sshd[5260]: Invalid user thomas from 146.190.143.102 port 50568
Oct  1 09:05:49 nativespace-cdp sshd[5260]: input_userauth_request: invalid user thomas [preauth]
Oct  1 09:05:49 nativespace-cdp sshd[5260]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:05:49 nativespace-cdp sshd[5260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 09:05:51 nativespace-cdp sshd[5260]: Failed password for invalid user thomas from 146.190.143.102 port 50568 ssh2
Oct  1 09:05:52 nativespace-cdp sshd[5260]: Received disconnect from 146.190.143.102 port 50568:11: Bye Bye [preauth]
Oct  1 09:05:52 nativespace-cdp sshd[5260]: Disconnected from 146.190.143.102 port 50568 [preauth]
Oct  1 09:06:12 nativespace-cdp sshd[5325]: Invalid user local from 103.55.49.10 port 50908
Oct  1 09:06:12 nativespace-cdp sshd[5325]: input_userauth_request: invalid user local [preauth]
Oct  1 09:06:12 nativespace-cdp sshd[5325]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:06:12 nativespace-cdp sshd[5325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:06:12 nativespace-cdp sshd[5331]: Invalid user support from 116.212.135.137 port 36002
Oct  1 09:06:12 nativespace-cdp sshd[5331]: input_userauth_request: invalid user support [preauth]
Oct  1 09:06:12 nativespace-cdp sshd[5331]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:06:12 nativespace-cdp sshd[5331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 09:06:14 nativespace-cdp sshd[5325]: Failed password for invalid user local from 103.55.49.10 port 50908 ssh2
Oct  1 09:06:14 nativespace-cdp sshd[5331]: Failed password for invalid user support from 116.212.135.137 port 36002 ssh2
Oct  1 09:06:14 nativespace-cdp sshd[5325]: Received disconnect from 103.55.49.10 port 50908:11: Bye Bye [preauth]
Oct  1 09:06:14 nativespace-cdp sshd[5325]: Disconnected from 103.55.49.10 port 50908 [preauth]
Oct  1 09:06:14 nativespace-cdp sshd[5331]: Received disconnect from 116.212.135.137 port 36002:11: Bye Bye [preauth]
Oct  1 09:06:14 nativespace-cdp sshd[5331]: Disconnected from 116.212.135.137 port 36002 [preauth]
Oct  1 09:06:33 nativespace-cdp sshd[5378]: Connection closed by 159.100.136.21 port 53798 [preauth]
Oct  1 09:06:47 nativespace-cdp sshd[5428]: Invalid user user from 146.190.143.102 port 36644
Oct  1 09:06:47 nativespace-cdp sshd[5428]: input_userauth_request: invalid user user [preauth]
Oct  1 09:06:47 nativespace-cdp sshd[5428]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:06:47 nativespace-cdp sshd[5428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 09:06:49 nativespace-cdp sshd[5428]: Failed password for invalid user user from 146.190.143.102 port 36644 ssh2
Oct  1 09:06:49 nativespace-cdp sshd[5428]: Received disconnect from 146.190.143.102 port 36644:11: Bye Bye [preauth]
Oct  1 09:06:49 nativespace-cdp sshd[5428]: Disconnected from 146.190.143.102 port 36644 [preauth]
Oct  1 09:07:05 nativespace-cdp sshd[5538]: Connection closed by 116.212.135.137 port 46730 [preauth]
Oct  1 09:07:11 nativespace-cdp sshd[5587]: Invalid user test_user from 103.55.49.10 port 47466
Oct  1 09:07:11 nativespace-cdp sshd[5587]: input_userauth_request: invalid user test_user [preauth]
Oct  1 09:07:11 nativespace-cdp sshd[5587]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:07:11 nativespace-cdp sshd[5587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:07:13 nativespace-cdp sshd[5587]: Failed password for invalid user test_user from 103.55.49.10 port 47466 ssh2
Oct  1 09:07:13 nativespace-cdp sshd[5587]: Received disconnect from 103.55.49.10 port 47466:11: Bye Bye [preauth]
Oct  1 09:07:13 nativespace-cdp sshd[5587]: Disconnected from 103.55.49.10 port 47466 [preauth]
Oct  1 09:07:33 nativespace-cdp sshd[5639]: Invalid user master from 8.222.184.144 port 43710
Oct  1 09:07:33 nativespace-cdp sshd[5639]: input_userauth_request: invalid user master [preauth]
Oct  1 09:07:33 nativespace-cdp sshd[5639]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:07:33 nativespace-cdp sshd[5639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:07:35 nativespace-cdp sshd[5639]: Failed password for invalid user master from 8.222.184.144 port 43710 ssh2
Oct  1 09:07:35 nativespace-cdp sshd[5639]: Received disconnect from 8.222.184.144 port 43710:11: Bye Bye [preauth]
Oct  1 09:07:35 nativespace-cdp sshd[5639]: Disconnected from 8.222.184.144 port 43710 [preauth]
Oct  1 09:07:46 nativespace-cdp sshd[5805]: Invalid user test01 from 116.212.135.137 port 57682
Oct  1 09:07:46 nativespace-cdp sshd[5805]: input_userauth_request: invalid user test01 [preauth]
Oct  1 09:07:46 nativespace-cdp sshd[5805]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:07:46 nativespace-cdp sshd[5805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.212.135.137
Oct  1 09:07:48 nativespace-cdp sshd[5805]: Failed password for invalid user test01 from 116.212.135.137 port 57682 ssh2
Oct  1 09:07:48 nativespace-cdp sshd[5805]: Received disconnect from 116.212.135.137 port 57682:11: Bye Bye [preauth]
Oct  1 09:07:48 nativespace-cdp sshd[5805]: Disconnected from 116.212.135.137 port 57682 [preauth]
Oct  1 09:07:48 nativespace-cdp sshd[5821]: Invalid user jboss from 146.190.143.102 port 43846
Oct  1 09:07:48 nativespace-cdp sshd[5821]: input_userauth_request: invalid user jboss [preauth]
Oct  1 09:07:48 nativespace-cdp sshd[5821]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:07:48 nativespace-cdp sshd[5821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 09:07:50 nativespace-cdp sshd[5821]: Failed password for invalid user jboss from 146.190.143.102 port 43846 ssh2
Oct  1 09:07:50 nativespace-cdp sshd[5821]: Received disconnect from 146.190.143.102 port 43846:11: Bye Bye [preauth]
Oct  1 09:07:50 nativespace-cdp sshd[5821]: Disconnected from 146.190.143.102 port 43846 [preauth]
Oct  1 09:07:53 nativespace-cdp sshd[5859]: Invalid user daniel from 47.103.88.18 port 48858
Oct  1 09:07:53 nativespace-cdp sshd[5859]: input_userauth_request: invalid user daniel [preauth]
Oct  1 09:07:53 nativespace-cdp sshd[5859]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:07:53 nativespace-cdp sshd[5859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:07:55 nativespace-cdp sshd[5859]: Failed password for invalid user daniel from 47.103.88.18 port 48858 ssh2
Oct  1 09:07:55 nativespace-cdp sshd[5859]: Received disconnect from 47.103.88.18 port 48858:11: Bye Bye [preauth]
Oct  1 09:07:55 nativespace-cdp sshd[5859]: Disconnected from 47.103.88.18 port 48858 [preauth]
Oct  1 09:08:11 nativespace-cdp sshd[5922]: Invalid user steam from 103.55.49.10 port 41588
Oct  1 09:08:11 nativespace-cdp sshd[5922]: input_userauth_request: invalid user steam [preauth]
Oct  1 09:08:11 nativespace-cdp sshd[5922]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:08:11 nativespace-cdp sshd[5922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:08:13 nativespace-cdp sshd[5922]: Failed password for invalid user steam from 103.55.49.10 port 41588 ssh2
Oct  1 09:08:13 nativespace-cdp sshd[5922]: Received disconnect from 103.55.49.10 port 41588:11: Bye Bye [preauth]
Oct  1 09:08:13 nativespace-cdp sshd[5922]: Disconnected from 103.55.49.10 port 41588 [preauth]
Oct  1 09:08:40 nativespace-cdp sshd[6016]: Invalid user tuan from 146.190.143.102 port 32878
Oct  1 09:08:40 nativespace-cdp sshd[6016]: input_userauth_request: invalid user tuan [preauth]
Oct  1 09:08:40 nativespace-cdp sshd[6016]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:08:40 nativespace-cdp sshd[6016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 09:08:41 nativespace-cdp sshd[6033]: Invalid user adminftp from 45.116.79.186 port 42092
Oct  1 09:08:41 nativespace-cdp sshd[6033]: input_userauth_request: invalid user adminftp [preauth]
Oct  1 09:08:41 nativespace-cdp sshd[6033]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:08:41 nativespace-cdp sshd[6033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:08:42 nativespace-cdp sshd[6016]: Failed password for invalid user tuan from 146.190.143.102 port 32878 ssh2
Oct  1 09:08:42 nativespace-cdp sshd[6016]: Received disconnect from 146.190.143.102 port 32878:11: Bye Bye [preauth]
Oct  1 09:08:42 nativespace-cdp sshd[6016]: Disconnected from 146.190.143.102 port 32878 [preauth]
Oct  1 09:08:43 nativespace-cdp sshd[6033]: Failed password for invalid user adminftp from 45.116.79.186 port 42092 ssh2
Oct  1 09:08:44 nativespace-cdp sshd[6033]: Received disconnect from 45.116.79.186 port 42092:11: Bye Bye [preauth]
Oct  1 09:08:44 nativespace-cdp sshd[6033]: Disconnected from 45.116.79.186 port 42092 [preauth]
Oct  1 09:09:11 nativespace-cdp sshd[6145]: Invalid user abhishek from 103.55.49.10 port 43224
Oct  1 09:09:11 nativespace-cdp sshd[6145]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 09:09:11 nativespace-cdp sshd[6145]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:09:11 nativespace-cdp sshd[6145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:09:13 nativespace-cdp sshd[6145]: Failed password for invalid user abhishek from 103.55.49.10 port 43224 ssh2
Oct  1 09:09:13 nativespace-cdp sshd[6145]: Received disconnect from 103.55.49.10 port 43224:11: Bye Bye [preauth]
Oct  1 09:09:13 nativespace-cdp sshd[6145]: Disconnected from 103.55.49.10 port 43224 [preauth]
Oct  1 09:09:36 nativespace-cdp sshd[6223]: Invalid user deploy from 146.190.143.102 port 33796
Oct  1 09:09:36 nativespace-cdp sshd[6223]: input_userauth_request: invalid user deploy [preauth]
Oct  1 09:09:36 nativespace-cdp sshd[6223]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:09:36 nativespace-cdp sshd[6223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 09:09:38 nativespace-cdp sshd[6223]: Failed password for invalid user deploy from 146.190.143.102 port 33796 ssh2
Oct  1 09:09:38 nativespace-cdp sshd[6223]: Received disconnect from 146.190.143.102 port 33796:11: Bye Bye [preauth]
Oct  1 09:09:38 nativespace-cdp sshd[6223]: Disconnected from 146.190.143.102 port 33796 [preauth]
Oct  1 09:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 09:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:09:59 nativespace-cdp sudo[6302]: pam_unix(sudo:session): session closed for user root
Oct  1 09:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 09:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:09:59 nativespace-cdp sudo[6305]: pam_unix(sudo:session): session closed for user root
Oct  1 09:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 09:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:01 nativespace-cdp sudo[6308]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 09:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:01 nativespace-cdp sudo[6316]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 09:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:10 nativespace-cdp sudo[6340]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 09:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:11 nativespace-cdp sudo[6488]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 09:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:11 nativespace-cdp sudo[6493]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 09:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:11 nativespace-cdp sshd[6482]: Invalid user tuan from 103.55.49.10 port 49532
Oct  1 09:10:11 nativespace-cdp sudo[6498]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:11 nativespace-cdp sshd[6482]: input_userauth_request: invalid user tuan [preauth]
Oct  1 09:10:11 nativespace-cdp sshd[6482]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:10:11 nativespace-cdp sshd[6482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 09:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:11 nativespace-cdp sudo[6501]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 09:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:11 nativespace-cdp sudo[6504]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 09:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:11 nativespace-cdp sudo[6510]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:13 nativespace-cdp sshd[6482]: Failed password for invalid user tuan from 103.55.49.10 port 49532 ssh2
Oct  1 09:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 09:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:13 nativespace-cdp sshd[6482]: Received disconnect from 103.55.49.10 port 49532:11: Bye Bye [preauth]
Oct  1 09:10:13 nativespace-cdp sshd[6482]: Disconnected from 103.55.49.10 port 49532 [preauth]
Oct  1 09:10:14 nativespace-cdp sudo[6523]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 09:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:17 nativespace-cdp sudo[6531]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=sibtoncc user-2=asandcoc user-3=steve user-4=bwppodcast user-5=zebrapho user-6=nsceres user-7=fawcettd user-8=burydropin user-9=dhyana user-10=beauty user-11=darkstar user-12=eatspam user-13=lkpier user-14=donnychicago user-15=steakbridieme user-16=firstre5 user-17=philmcph user-18=ctedorgu user-19=nscdp user-20=leftie user-21=foods user-22=health2045 user-23=fortunaz user-24=nomistakes user-25=hidden user-26=tigerlet user-27=barbersh user-28=smrszyqg user-29=isleofwi user-30=cwsocial user-31=paulmca1 user-32=pugwash user-33=howardon user-34=cathski user-35=cambria1 user-36=reliable user-37=ninejimm user-38=eugincou user-39=courseme user-40=hirefootballgame user-41=jennimil user-42=tomandle user-43=david user-44=careers user-45=nbhavers user-46=chrisdal user-47=mcdermos user-48=onlycont
Oct  1 09:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=lucy user-50=attlebor user-51=romaldki user-52=ranxterc user-53=outdoorc user-54=hodgsonmail user-55=branko user-56=boldover user-57=nove user-58=bakery user-59=crrtipdl user-60=sosevalu user-61=havantho user-62=cath user-63=sketchy user-64=nvihkvu user-65=oubpgvbx user-66=tstardom user-67=what user-68=design user-69=stagingerris user-70=dancinggardener user-71=ladburyp user-72=kategilpin user-73=vantagep user-74=athenare user-75=connect9 user-76=lbscrmod user-77=maflemin user-78=markward user-79=booff user-80=foundation user-81=ulsukarm user-82=spectrum user-83=theblack user-84=hodgesonweb user-85=jarvisin user-86=stephani user-87=leereyn1 user-88=agproduc user-89=still user-90=strathar user-91=atestord user-92=sarafoundation user-93=lakesan1 user-94=brmrjxl user-95=megacards user-96=musorguk user-97=wilsonsw user-98=dickemery123 user-99=ptkxhsbt user-100=martsblo user-101=magichat user-102=hhdugcor
Oct  1 09:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=lbhyisi user-104=opaiscyx user-105=coursemc user-106=ultbcrra user-107=seftvta user-108=jonhartl user-109=firstres user-110=firstred user-111=highlegh user-112=southlon user-113=clarkass user-114=firstrel user-115=costestimatorco user-116=hubmaster user-117=fetch user-118=carsinyo user-119=gilpin user-120=milloyco user-121=elecleis user-122=connectedshoppin user-123=thqkgnbz user-124=accooper user-125=ianrayne user-126=vivienn1 user-127=firstre2 user-128=oneoarco user-129=battlere user-130=nstriton user-131=brighto1 user-132=newstoda user-133=ggaaorgu user-134=belle user-135=bemadonn user-136=bedfords user-137=skyfirec user-138=alexadmin user-139=nativene user-140=innovat1 user-141=askhform user-142=stuartge feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 09:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 09:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:19 nativespace-cdp sudo[6542]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 09:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:20 nativespace-cdp sudo[6552]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-81SoOib4XMgwitna.~
Oct  1 09:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:21 nativespace-cdp sudo[6555]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-81SoOib4XMgwitna.~'
Oct  1 09:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:21 nativespace-cdp sudo[6558]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-81SoOib4XMgwitna.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 09:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:21 nativespace-cdp sudo[6562]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 09:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:21 nativespace-cdp sudo[6565]: pam_unix(sudo:session): session closed for user root
Oct  1 09:10:35 nativespace-cdp sshd[6697]: Invalid user user from 146.190.143.102 port 44400
Oct  1 09:10:35 nativespace-cdp sshd[6697]: input_userauth_request: invalid user user [preauth]
Oct  1 09:10:35 nativespace-cdp sshd[6697]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:10:35 nativespace-cdp sshd[6697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 09:10:37 nativespace-cdp sshd[6697]: Failed password for invalid user user from 146.190.143.102 port 44400 ssh2
Oct  1 09:10:40 nativespace-cdp sshd[6697]: Received disconnect from 146.190.143.102 port 44400:11: Bye Bye [preauth]
Oct  1 09:10:40 nativespace-cdp sshd[6697]: Disconnected from 146.190.143.102 port 44400 [preauth]
Oct  1 09:10:40 nativespace-cdp sshd[6718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:10:40 nativespace-cdp sshd[6718]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:10:42 nativespace-cdp sshd[6718]: Failed password for root from 47.106.171.75 port 33192 ssh2
Oct  1 09:10:42 nativespace-cdp sshd[6718]: Received disconnect from 47.106.171.75 port 33192:11: Bye Bye [preauth]
Oct  1 09:10:42 nativespace-cdp sshd[6718]: Disconnected from 47.106.171.75 port 33192 [preauth]
Oct  1 09:10:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 09:10:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 09:10:45 nativespace-cdp sudo[6754]: pam_unix(sudo:session): session closed for user root
Oct  1 09:11:11 nativespace-cdp sshd[6846]: Invalid user user from 103.55.49.10 port 40322
Oct  1 09:11:11 nativespace-cdp sshd[6846]: input_userauth_request: invalid user user [preauth]
Oct  1 09:11:11 nativespace-cdp sshd[6846]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:11:11 nativespace-cdp sshd[6846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:11:14 nativespace-cdp sshd[6846]: Failed password for invalid user user from 103.55.49.10 port 40322 ssh2
Oct  1 09:11:17 nativespace-cdp sshd[6846]: Received disconnect from 103.55.49.10 port 40322:11: Bye Bye [preauth]
Oct  1 09:11:17 nativespace-cdp sshd[6846]: Disconnected from 103.55.49.10 port 40322 [preauth]
Oct  1 09:11:33 nativespace-cdp sshd[6917]: Connection closed by 159.100.136.21 port 35298 [preauth]
Oct  1 09:11:34 nativespace-cdp sshd[6910]: Invalid user ubuntu from 146.190.143.102 port 47664
Oct  1 09:11:34 nativespace-cdp sshd[6910]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:11:34 nativespace-cdp sshd[6910]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:11:34 nativespace-cdp sshd[6910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 09:11:36 nativespace-cdp sshd[6910]: Failed password for invalid user ubuntu from 146.190.143.102 port 47664 ssh2
Oct  1 09:11:36 nativespace-cdp sshd[6910]: Received disconnect from 146.190.143.102 port 47664:11: Bye Bye [preauth]
Oct  1 09:11:36 nativespace-cdp sshd[6910]: Disconnected from 146.190.143.102 port 47664 [preauth]
Oct  1 09:12:28 nativespace-cdp sshd[7174]: Invalid user nexus from 146.190.143.102 port 51702
Oct  1 09:12:28 nativespace-cdp sshd[7174]: input_userauth_request: invalid user nexus [preauth]
Oct  1 09:12:28 nativespace-cdp sshd[7174]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:12:28 nativespace-cdp sshd[7174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.143.102
Oct  1 09:12:30 nativespace-cdp sshd[7174]: Failed password for invalid user nexus from 146.190.143.102 port 51702 ssh2
Oct  1 09:12:30 nativespace-cdp sshd[7174]: Received disconnect from 146.190.143.102 port 51702:11: Bye Bye [preauth]
Oct  1 09:12:30 nativespace-cdp sshd[7174]: Disconnected from 146.190.143.102 port 51702 [preauth]
Oct  1 09:13:26 nativespace-cdp sshd[7337]: Invalid user support from 103.55.49.10 port 51698
Oct  1 09:13:26 nativespace-cdp sshd[7337]: input_userauth_request: invalid user support [preauth]
Oct  1 09:13:26 nativespace-cdp sshd[7337]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:13:26 nativespace-cdp sshd[7337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:13:28 nativespace-cdp sshd[7337]: Failed password for invalid user support from 103.55.49.10 port 51698 ssh2
Oct  1 09:13:29 nativespace-cdp sshd[7337]: Received disconnect from 103.55.49.10 port 51698:11: Bye Bye [preauth]
Oct  1 09:13:29 nativespace-cdp sshd[7337]: Disconnected from 103.55.49.10 port 51698 [preauth]
Oct  1 09:14:39 nativespace-cdp sshd[7594]: Invalid user nisec from 8.222.184.144 port 58468
Oct  1 09:14:39 nativespace-cdp sshd[7594]: input_userauth_request: invalid user nisec [preauth]
Oct  1 09:14:39 nativespace-cdp sshd[7594]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:14:39 nativespace-cdp sshd[7594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:14:41 nativespace-cdp sshd[7594]: Failed password for invalid user nisec from 8.222.184.144 port 58468 ssh2
Oct  1 09:14:43 nativespace-cdp sshd[7594]: Received disconnect from 8.222.184.144 port 58468:11: Bye Bye [preauth]
Oct  1 09:14:43 nativespace-cdp sshd[7594]: Disconnected from 8.222.184.144 port 58468 [preauth]
Oct  1 09:14:48 nativespace-cdp sshd[7619]: Invalid user acer from 103.55.49.10 port 37110
Oct  1 09:14:48 nativespace-cdp sshd[7619]: input_userauth_request: invalid user acer [preauth]
Oct  1 09:14:48 nativespace-cdp sshd[7619]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:14:48 nativespace-cdp sshd[7619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:14:50 nativespace-cdp sshd[7619]: Failed password for invalid user acer from 103.55.49.10 port 37110 ssh2
Oct  1 09:14:53 nativespace-cdp sshd[7619]: Received disconnect from 103.55.49.10 port 37110:11: Bye Bye [preauth]
Oct  1 09:14:53 nativespace-cdp sshd[7619]: Disconnected from 103.55.49.10 port 37110 [preauth]
Oct  1 09:14:56 nativespace-cdp sshd[7649]: Invalid user anand from 8.222.184.144 port 60032
Oct  1 09:14:56 nativespace-cdp sshd[7649]: input_userauth_request: invalid user anand [preauth]
Oct  1 09:14:56 nativespace-cdp sshd[7649]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:14:56 nativespace-cdp sshd[7649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:14:58 nativespace-cdp sshd[7649]: Failed password for invalid user anand from 8.222.184.144 port 60032 ssh2
Oct  1 09:14:58 nativespace-cdp sshd[7649]: Received disconnect from 8.222.184.144 port 60032:11: Bye Bye [preauth]
Oct  1 09:14:58 nativespace-cdp sshd[7649]: Disconnected from 8.222.184.144 port 60032 [preauth]
Oct  1 09:15:12 nativespace-cdp sshd[7856]: Invalid user daniel from 45.116.79.186 port 33830
Oct  1 09:15:12 nativespace-cdp sshd[7856]: input_userauth_request: invalid user daniel [preauth]
Oct  1 09:15:12 nativespace-cdp sshd[7856]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:15:12 nativespace-cdp sshd[7856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:15:14 nativespace-cdp sshd[7856]: Failed password for invalid user daniel from 45.116.79.186 port 33830 ssh2
Oct  1 09:15:15 nativespace-cdp sshd[7856]: Received disconnect from 45.116.79.186 port 33830:11: Bye Bye [preauth]
Oct  1 09:15:15 nativespace-cdp sshd[7856]: Disconnected from 45.116.79.186 port 33830 [preauth]
Oct  1 09:15:15 nativespace-cdp sshd[7866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:15:15 nativespace-cdp sshd[7866]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:15:17 nativespace-cdp sshd[7866]: Failed password for root from 8.222.184.144 port 34298 ssh2
Oct  1 09:15:17 nativespace-cdp sshd[7866]: Received disconnect from 8.222.184.144 port 34298:11: Bye Bye [preauth]
Oct  1 09:15:17 nativespace-cdp sshd[7866]: Disconnected from 8.222.184.144 port 34298 [preauth]
Oct  1 09:15:24 nativespace-cdp sshd[7934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:15:24 nativespace-cdp sshd[7934]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:15:27 nativespace-cdp sshd[7934]: Failed password for root from 45.116.79.186 port 35484 ssh2
Oct  1 09:15:27 nativespace-cdp sshd[7934]: Received disconnect from 45.116.79.186 port 35484:11: Bye Bye [preauth]
Oct  1 09:15:27 nativespace-cdp sshd[7934]: Disconnected from 45.116.79.186 port 35484 [preauth]
Oct  1 09:15:29 nativespace-cdp sshd[7956]: Invalid user chris from 45.116.79.186 port 37456
Oct  1 09:15:29 nativespace-cdp sshd[7956]: input_userauth_request: invalid user chris [preauth]
Oct  1 09:15:29 nativespace-cdp sshd[7956]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:15:29 nativespace-cdp sshd[7956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:15:32 nativespace-cdp sshd[7956]: Failed password for invalid user chris from 45.116.79.186 port 37456 ssh2
Oct  1 09:15:36 nativespace-cdp sshd[7956]: Received disconnect from 45.116.79.186 port 37456:11: Bye Bye [preauth]
Oct  1 09:15:36 nativespace-cdp sshd[7956]: Disconnected from 45.116.79.186 port 37456 [preauth]
Oct  1 09:15:39 nativespace-cdp sshd[7964]: Connection closed by 8.222.184.144 port 56534 [preauth]
Oct  1 09:15:40 nativespace-cdp sshd[8011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:15:40 nativespace-cdp sshd[8011]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:15:43 nativespace-cdp sshd[8011]: Failed password for root from 45.116.79.186 port 39192 ssh2
Oct  1 09:15:47 nativespace-cdp sshd[8011]: Received disconnect from 45.116.79.186 port 39192:11: Bye Bye [preauth]
Oct  1 09:15:47 nativespace-cdp sshd[8011]: Disconnected from 45.116.79.186 port 39192 [preauth]
Oct  1 09:15:47 nativespace-cdp sshd[8026]: Invalid user tomcat from 103.55.49.10 port 59200
Oct  1 09:15:47 nativespace-cdp sshd[8026]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 09:15:47 nativespace-cdp sshd[8026]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:15:47 nativespace-cdp sshd[8026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:15:49 nativespace-cdp sshd[8026]: Failed password for invalid user tomcat from 103.55.49.10 port 59200 ssh2
Oct  1 09:15:49 nativespace-cdp sshd[8026]: Received disconnect from 103.55.49.10 port 59200:11: Bye Bye [preauth]
Oct  1 09:15:49 nativespace-cdp sshd[8026]: Disconnected from 103.55.49.10 port 59200 [preauth]
Oct  1 09:15:51 nativespace-cdp sshd[8043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:15:51 nativespace-cdp sshd[8043]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:15:53 nativespace-cdp sshd[8043]: Failed password for root from 8.222.184.144 port 47850 ssh2
Oct  1 09:15:53 nativespace-cdp sshd[8043]: Received disconnect from 8.222.184.144 port 47850:11: Bye Bye [preauth]
Oct  1 09:15:53 nativespace-cdp sshd[8043]: Disconnected from 8.222.184.144 port 47850 [preauth]
Oct  1 09:15:54 nativespace-cdp sshd[8051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=ftp
Oct  1 09:15:54 nativespace-cdp sshd[8051]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "ftp"
Oct  1 09:15:56 nativespace-cdp sshd[8051]: Failed password for ftp from 45.116.79.186 port 41706 ssh2
Oct  1 09:15:59 nativespace-cdp sshd[8051]: Received disconnect from 45.116.79.186 port 41706:11: Bye Bye [preauth]
Oct  1 09:15:59 nativespace-cdp sshd[8051]: Disconnected from 45.116.79.186 port 41706 [preauth]
Oct  1 09:16:04 nativespace-cdp sshd[8101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:16:04 nativespace-cdp sshd[8101]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:16:06 nativespace-cdp sshd[8101]: Failed password for root from 45.116.79.186 port 43484 ssh2
Oct  1 09:16:07 nativespace-cdp sshd[8101]: Received disconnect from 45.116.79.186 port 43484:11: Bye Bye [preauth]
Oct  1 09:16:07 nativespace-cdp sshd[8101]: Disconnected from 45.116.79.186 port 43484 [preauth]
Oct  1 09:16:12 nativespace-cdp sshd[8123]: Invalid user debianuser from 47.103.88.18 port 48802
Oct  1 09:16:12 nativespace-cdp sshd[8123]: input_userauth_request: invalid user debianuser [preauth]
Oct  1 09:16:12 nativespace-cdp sshd[8123]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:16:12 nativespace-cdp sshd[8123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:16:13 nativespace-cdp sshd[8115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=david
Oct  1 09:16:14 nativespace-cdp sshd[8132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:16:14 nativespace-cdp sshd[8132]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:16:14 nativespace-cdp sshd[8123]: Failed password for invalid user debianuser from 47.103.88.18 port 48802 ssh2
Oct  1 09:16:14 nativespace-cdp sshd[8123]: Received disconnect from 47.103.88.18 port 48802:11: Bye Bye [preauth]
Oct  1 09:16:14 nativespace-cdp sshd[8123]: Disconnected from 47.103.88.18 port 48802 [preauth]
Oct  1 09:16:15 nativespace-cdp sshd[8115]: Failed password for david from 8.222.184.144 port 58928 ssh2
Oct  1 09:16:15 nativespace-cdp sshd[8132]: Failed password for root from 45.116.79.186 port 44628 ssh2
Oct  1 09:16:15 nativespace-cdp sshd[8132]: Received disconnect from 45.116.79.186 port 44628:11: Bye Bye [preauth]
Oct  1 09:16:15 nativespace-cdp sshd[8132]: Disconnected from 45.116.79.186 port 44628 [preauth]
Oct  1 09:16:15 nativespace-cdp sshd[8115]: Received disconnect from 8.222.184.144 port 58928:11: Bye Bye [preauth]
Oct  1 09:16:15 nativespace-cdp sshd[8115]: Disconnected from 8.222.184.144 port 58928 [preauth]
Oct  1 09:16:27 nativespace-cdp sshd[8175]: Invalid user newuser from 45.116.79.186 port 46884
Oct  1 09:16:27 nativespace-cdp sshd[8175]: input_userauth_request: invalid user newuser [preauth]
Oct  1 09:16:27 nativespace-cdp sshd[8175]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:16:27 nativespace-cdp sshd[8175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:16:27 nativespace-cdp sshd[8177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:16:27 nativespace-cdp sshd[8177]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:16:29 nativespace-cdp sshd[8175]: Failed password for invalid user newuser from 45.116.79.186 port 46884 ssh2
Oct  1 09:16:29 nativespace-cdp sshd[8175]: Received disconnect from 45.116.79.186 port 46884:11: Bye Bye [preauth]
Oct  1 09:16:29 nativespace-cdp sshd[8175]: Disconnected from 45.116.79.186 port 46884 [preauth]
Oct  1 09:16:29 nativespace-cdp sshd[8177]: Failed password for root from 8.222.184.144 port 37278 ssh2
Oct  1 09:16:30 nativespace-cdp sshd[8177]: Received disconnect from 8.222.184.144 port 37278:11: Bye Bye [preauth]
Oct  1 09:16:30 nativespace-cdp sshd[8177]: Disconnected from 8.222.184.144 port 37278 [preauth]
Oct  1 09:16:34 nativespace-cdp sshd[8198]: Connection closed by 159.100.136.21 port 45158 [preauth]
Oct  1 09:16:37 nativespace-cdp sshd[8191]: Connection closed by 45.116.79.186 port 48082 [preauth]
Oct  1 09:16:40 nativespace-cdp sshd[8215]: Invalid user admin from 45.116.79.186 port 49802
Oct  1 09:16:40 nativespace-cdp sshd[8215]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:16:40 nativespace-cdp sshd[8215]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:16:40 nativespace-cdp sshd[8215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:16:42 nativespace-cdp sshd[8215]: Failed password for invalid user admin from 45.116.79.186 port 49802 ssh2
Oct  1 09:16:46 nativespace-cdp sshd[8215]: Received disconnect from 45.116.79.186 port 49802:11: Bye Bye [preauth]
Oct  1 09:16:46 nativespace-cdp sshd[8215]: Disconnected from 45.116.79.186 port 49802 [preauth]
Oct  1 09:16:47 nativespace-cdp sshd[8239]: Invalid user basesystem from 8.222.184.144 port 34918
Oct  1 09:16:47 nativespace-cdp sshd[8239]: input_userauth_request: invalid user basesystem [preauth]
Oct  1 09:16:47 nativespace-cdp sshd[8239]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:16:47 nativespace-cdp sshd[8239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:16:49 nativespace-cdp sshd[8247]: Invalid user administrator from 45.116.79.186 port 51172
Oct  1 09:16:49 nativespace-cdp sshd[8247]: input_userauth_request: invalid user administrator [preauth]
Oct  1 09:16:49 nativespace-cdp sshd[8247]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:16:49 nativespace-cdp sshd[8247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:16:49 nativespace-cdp sshd[8239]: Failed password for invalid user basesystem from 8.222.184.144 port 34918 ssh2
Oct  1 09:16:49 nativespace-cdp sshd[8239]: Received disconnect from 8.222.184.144 port 34918:11: Bye Bye [preauth]
Oct  1 09:16:49 nativespace-cdp sshd[8239]: Disconnected from 8.222.184.144 port 34918 [preauth]
Oct  1 09:16:51 nativespace-cdp sshd[8247]: Failed password for invalid user administrator from 45.116.79.186 port 51172 ssh2
Oct  1 09:16:51 nativespace-cdp sshd[8247]: Received disconnect from 45.116.79.186 port 51172:11: Bye Bye [preauth]
Oct  1 09:16:51 nativespace-cdp sshd[8247]: Disconnected from 45.116.79.186 port 51172 [preauth]
Oct  1 09:16:58 nativespace-cdp sshd[8358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=david
Oct  1 09:17:00 nativespace-cdp sshd[8358]: Failed password for david from 45.116.79.186 port 52356 ssh2
Oct  1 09:17:00 nativespace-cdp sshd[8358]: Received disconnect from 45.116.79.186 port 52356:11: Bye Bye [preauth]
Oct  1 09:17:00 nativespace-cdp sshd[8358]: Disconnected from 45.116.79.186 port 52356 [preauth]
Oct  1 09:17:03 nativespace-cdp sshd[8386]: Invalid user newuser from 8.222.184.144 port 42242
Oct  1 09:17:03 nativespace-cdp sshd[8386]: input_userauth_request: invalid user newuser [preauth]
Oct  1 09:17:03 nativespace-cdp sshd[8386]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:17:03 nativespace-cdp sshd[8386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:17:04 nativespace-cdp sshd[8386]: Failed password for invalid user newuser from 8.222.184.144 port 42242 ssh2
Oct  1 09:17:05 nativespace-cdp sshd[8386]: Received disconnect from 8.222.184.144 port 42242:11: Bye Bye [preauth]
Oct  1 09:17:05 nativespace-cdp sshd[8386]: Disconnected from 8.222.184.144 port 42242 [preauth]
Oct  1 09:17:05 nativespace-cdp sshd[8407]: Invalid user hadoop from 47.103.88.18 port 33954
Oct  1 09:17:05 nativespace-cdp sshd[8407]: input_userauth_request: invalid user hadoop [preauth]
Oct  1 09:17:05 nativespace-cdp sshd[8407]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:17:05 nativespace-cdp sshd[8407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:17:07 nativespace-cdp sshd[8435]: Invalid user master from 45.116.79.186 port 53858
Oct  1 09:17:07 nativespace-cdp sshd[8435]: input_userauth_request: invalid user master [preauth]
Oct  1 09:17:07 nativespace-cdp sshd[8435]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:17:07 nativespace-cdp sshd[8435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:17:07 nativespace-cdp sshd[8407]: Failed password for invalid user hadoop from 47.103.88.18 port 33954 ssh2
Oct  1 09:17:08 nativespace-cdp sshd[8407]: Received disconnect from 47.103.88.18 port 33954:11: Bye Bye [preauth]
Oct  1 09:17:08 nativespace-cdp sshd[8407]: Disconnected from 47.103.88.18 port 33954 [preauth]
Oct  1 09:17:09 nativespace-cdp sshd[8435]: Failed password for invalid user master from 45.116.79.186 port 53858 ssh2
Oct  1 09:17:09 nativespace-cdp sshd[8435]: Received disconnect from 45.116.79.186 port 53858:11: Bye Bye [preauth]
Oct  1 09:17:09 nativespace-cdp sshd[8435]: Disconnected from 45.116.79.186 port 53858 [preauth]
Oct  1 09:17:16 nativespace-cdp sshd[8464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:17:16 nativespace-cdp sshd[8464]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:17:18 nativespace-cdp sshd[8464]: Failed password for root from 45.116.79.186 port 55244 ssh2
Oct  1 09:17:19 nativespace-cdp sshd[8464]: Received disconnect from 45.116.79.186 port 55244:11: Bye Bye [preauth]
Oct  1 09:17:19 nativespace-cdp sshd[8464]: Disconnected from 45.116.79.186 port 55244 [preauth]
Oct  1 09:17:22 nativespace-cdp sshd[8473]: Invalid user admin from 8.222.184.144 port 34352
Oct  1 09:17:22 nativespace-cdp sshd[8473]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:17:22 nativespace-cdp sshd[8473]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:17:22 nativespace-cdp sshd[8473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:17:24 nativespace-cdp sshd[8473]: Failed password for invalid user admin from 8.222.184.144 port 34352 ssh2
Oct  1 09:17:24 nativespace-cdp sshd[8473]: Received disconnect from 8.222.184.144 port 34352:11: Bye Bye [preauth]
Oct  1 09:17:24 nativespace-cdp sshd[8473]: Disconnected from 8.222.184.144 port 34352 [preauth]
Oct  1 09:17:25 nativespace-cdp sshd[8481]: Invalid user debianuser from 45.116.79.186 port 56870
Oct  1 09:17:25 nativespace-cdp sshd[8481]: input_userauth_request: invalid user debianuser [preauth]
Oct  1 09:17:25 nativespace-cdp sshd[8481]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:17:25 nativespace-cdp sshd[8481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:17:27 nativespace-cdp sshd[8481]: Failed password for invalid user debianuser from 45.116.79.186 port 56870 ssh2
Oct  1 09:17:34 nativespace-cdp sshd[8515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:17:34 nativespace-cdp sshd[8515]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:17:34 nativespace-cdp sshd[8481]: Received disconnect from 45.116.79.186 port 56870:11: Bye Bye [preauth]
Oct  1 09:17:34 nativespace-cdp sshd[8481]: Disconnected from 45.116.79.186 port 56870 [preauth]
Oct  1 09:17:36 nativespace-cdp sshd[8515]: Failed password for root from 45.116.79.186 port 58318 ssh2
Oct  1 09:17:36 nativespace-cdp sshd[8515]: Received disconnect from 45.116.79.186 port 58318:11: Bye Bye [preauth]
Oct  1 09:17:36 nativespace-cdp sshd[8515]: Disconnected from 45.116.79.186 port 58318 [preauth]
Oct  1 09:17:40 nativespace-cdp sshd[8531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=ftp
Oct  1 09:17:40 nativespace-cdp sshd[8531]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "ftp"
Oct  1 09:17:42 nativespace-cdp sshd[8531]: Failed password for ftp from 8.222.184.144 port 35556 ssh2
Oct  1 09:17:52 nativespace-cdp sshd[8531]: Received disconnect from 8.222.184.144 port 35556:11: Bye Bye [preauth]
Oct  1 09:17:52 nativespace-cdp sshd[8531]: Disconnected from 8.222.184.144 port 35556 [preauth]
Oct  1 09:17:52 nativespace-cdp sshd[8569]: Invalid user administrator from 45.116.79.186 port 33420
Oct  1 09:17:52 nativespace-cdp sshd[8569]: input_userauth_request: invalid user administrator [preauth]
Oct  1 09:17:52 nativespace-cdp sshd[8569]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:17:52 nativespace-cdp sshd[8569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:17:55 nativespace-cdp sshd[8569]: Failed password for invalid user administrator from 45.116.79.186 port 33420 ssh2
Oct  1 09:17:56 nativespace-cdp sshd[8569]: Received disconnect from 45.116.79.186 port 33420:11: Bye Bye [preauth]
Oct  1 09:17:56 nativespace-cdp sshd[8569]: Disconnected from 45.116.79.186 port 33420 [preauth]
Oct  1 09:17:57 nativespace-cdp sshd[8576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:17:57 nativespace-cdp sshd[8576]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:17:58 nativespace-cdp sshd[8582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:17:58 nativespace-cdp sshd[8582]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:17:58 nativespace-cdp sshd[8585]: Invalid user test from 103.55.49.10 port 51406
Oct  1 09:17:58 nativespace-cdp sshd[8585]: input_userauth_request: invalid user test [preauth]
Oct  1 09:17:58 nativespace-cdp sshd[8585]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:17:58 nativespace-cdp sshd[8585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:17:59 nativespace-cdp sshd[8576]: Failed password for root from 47.106.171.75 port 45284 ssh2
Oct  1 09:17:59 nativespace-cdp sshd[8576]: Received disconnect from 47.106.171.75 port 45284:11: Bye Bye [preauth]
Oct  1 09:17:59 nativespace-cdp sshd[8576]: Disconnected from 47.106.171.75 port 45284 [preauth]
Oct  1 09:18:00 nativespace-cdp sshd[8582]: Failed password for root from 8.222.184.144 port 46238 ssh2
Oct  1 09:18:00 nativespace-cdp sshd[8582]: Received disconnect from 8.222.184.144 port 46238:11: Bye Bye [preauth]
Oct  1 09:18:00 nativespace-cdp sshd[8582]: Disconnected from 8.222.184.144 port 46238 [preauth]
Oct  1 09:18:00 nativespace-cdp sshd[8585]: Failed password for invalid user test from 103.55.49.10 port 51406 ssh2
Oct  1 09:18:01 nativespace-cdp sshd[8585]: Received disconnect from 103.55.49.10 port 51406:11: Bye Bye [preauth]
Oct  1 09:18:01 nativespace-cdp sshd[8585]: Disconnected from 103.55.49.10 port 51406 [preauth]
Oct  1 09:18:01 nativespace-cdp sshd[8597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:18:01 nativespace-cdp sshd[8597]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:18:03 nativespace-cdp sshd[8597]: Failed password for root from 45.116.79.186 port 34814 ssh2
Oct  1 09:18:03 nativespace-cdp sshd[8597]: Received disconnect from 45.116.79.186 port 34814:11: Bye Bye [preauth]
Oct  1 09:18:03 nativespace-cdp sshd[8597]: Disconnected from 45.116.79.186 port 34814 [preauth]
Oct  1 09:18:10 nativespace-cdp sshd[8626]: Invalid user debian from 45.116.79.186 port 36136
Oct  1 09:18:10 nativespace-cdp sshd[8626]: input_userauth_request: invalid user debian [preauth]
Oct  1 09:18:10 nativespace-cdp sshd[8626]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:18:10 nativespace-cdp sshd[8626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:18:12 nativespace-cdp sshd[8626]: Failed password for invalid user debian from 45.116.79.186 port 36136 ssh2
Oct  1 09:18:13 nativespace-cdp sshd[8626]: Received disconnect from 45.116.79.186 port 36136:11: Bye Bye [preauth]
Oct  1 09:18:13 nativespace-cdp sshd[8626]: Disconnected from 45.116.79.186 port 36136 [preauth]
Oct  1 09:18:16 nativespace-cdp sshd[8642]: Invalid user administrator from 8.222.184.144 port 38116
Oct  1 09:18:16 nativespace-cdp sshd[8642]: input_userauth_request: invalid user administrator [preauth]
Oct  1 09:18:16 nativespace-cdp sshd[8642]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:18:16 nativespace-cdp sshd[8642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:18:17 nativespace-cdp sshd[8645]: Invalid user administrator from 47.103.88.18 port 47332
Oct  1 09:18:17 nativespace-cdp sshd[8645]: input_userauth_request: invalid user administrator [preauth]
Oct  1 09:18:17 nativespace-cdp sshd[8645]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:18:17 nativespace-cdp sshd[8645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:18:18 nativespace-cdp sshd[8642]: Failed password for invalid user administrator from 8.222.184.144 port 38116 ssh2
Oct  1 09:18:18 nativespace-cdp sshd[8642]: Received disconnect from 8.222.184.144 port 38116:11: Bye Bye [preauth]
Oct  1 09:18:18 nativespace-cdp sshd[8642]: Disconnected from 8.222.184.144 port 38116 [preauth]
Oct  1 09:18:19 nativespace-cdp sshd[8645]: Failed password for invalid user administrator from 47.103.88.18 port 47332 ssh2
Oct  1 09:18:23 nativespace-cdp sshd[8654]: Invalid user admin from 45.116.79.186 port 37734
Oct  1 09:18:23 nativespace-cdp sshd[8654]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:18:23 nativespace-cdp sshd[8654]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:18:23 nativespace-cdp sshd[8654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:18:24 nativespace-cdp sshd[8645]: Received disconnect from 47.103.88.18 port 47332:11: Bye Bye [preauth]
Oct  1 09:18:24 nativespace-cdp sshd[8645]: Disconnected from 47.103.88.18 port 47332 [preauth]
Oct  1 09:18:26 nativespace-cdp sshd[8654]: Failed password for invalid user admin from 45.116.79.186 port 37734 ssh2
Oct  1 09:18:26 nativespace-cdp sshd[8654]: Received disconnect from 45.116.79.186 port 37734:11: Bye Bye [preauth]
Oct  1 09:18:26 nativespace-cdp sshd[8654]: Disconnected from 45.116.79.186 port 37734 [preauth]
Oct  1 09:18:27 nativespace-cdp sshd[8667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=david
Oct  1 09:18:29 nativespace-cdp sshd[8672]: Invalid user admin from 45.116.79.186 port 39844
Oct  1 09:18:29 nativespace-cdp sshd[8672]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:18:29 nativespace-cdp sshd[8672]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:18:29 nativespace-cdp sshd[8672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:18:29 nativespace-cdp sshd[8667]: Failed password for david from 47.106.171.75 port 48620 ssh2
Oct  1 09:18:31 nativespace-cdp sshd[8672]: Failed password for invalid user admin from 45.116.79.186 port 39844 ssh2
Oct  1 09:18:32 nativespace-cdp sshd[8672]: Received disconnect from 45.116.79.186 port 39844:11: Bye Bye [preauth]
Oct  1 09:18:32 nativespace-cdp sshd[8672]: Disconnected from 45.116.79.186 port 39844 [preauth]
Oct  1 09:18:37 nativespace-cdp sshd[8697]: Invalid user basesystem from 45.116.79.186 port 41266
Oct  1 09:18:37 nativespace-cdp sshd[8697]: input_userauth_request: invalid user basesystem [preauth]
Oct  1 09:18:37 nativespace-cdp sshd[8697]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:18:37 nativespace-cdp sshd[8697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:18:38 nativespace-cdp sshd[8667]: Received disconnect from 47.106.171.75 port 48620:11: Bye Bye [preauth]
Oct  1 09:18:38 nativespace-cdp sshd[8667]: Disconnected from 47.106.171.75 port 48620 [preauth]
Oct  1 09:18:39 nativespace-cdp sshd[8687]: Invalid user debianuser from 8.222.184.144 port 41740
Oct  1 09:18:39 nativespace-cdp sshd[8687]: input_userauth_request: invalid user debianuser [preauth]
Oct  1 09:18:39 nativespace-cdp sshd[8687]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:18:39 nativespace-cdp sshd[8687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:18:40 nativespace-cdp sshd[8697]: Failed password for invalid user basesystem from 45.116.79.186 port 41266 ssh2
Oct  1 09:18:40 nativespace-cdp sshd[8697]: Received disconnect from 45.116.79.186 port 41266:11: Bye Bye [preauth]
Oct  1 09:18:40 nativespace-cdp sshd[8697]: Disconnected from 45.116.79.186 port 41266 [preauth]
Oct  1 09:18:41 nativespace-cdp sshd[8687]: Failed password for invalid user debianuser from 8.222.184.144 port 41740 ssh2
Oct  1 09:18:42 nativespace-cdp sshd[8687]: Received disconnect from 8.222.184.144 port 41740:11: Bye Bye [preauth]
Oct  1 09:18:42 nativespace-cdp sshd[8687]: Disconnected from 8.222.184.144 port 41740 [preauth]
Oct  1 09:18:47 nativespace-cdp sshd[8744]: Invalid user admin from 45.116.79.186 port 42430
Oct  1 09:18:47 nativespace-cdp sshd[8744]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:18:47 nativespace-cdp sshd[8744]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:18:47 nativespace-cdp sshd[8744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:18:49 nativespace-cdp sshd[8744]: Failed password for invalid user admin from 45.116.79.186 port 42430 ssh2
Oct  1 09:18:49 nativespace-cdp sshd[8744]: Received disconnect from 45.116.79.186 port 42430:11: Bye Bye [preauth]
Oct  1 09:18:49 nativespace-cdp sshd[8744]: Disconnected from 45.116.79.186 port 42430 [preauth]
Oct  1 09:18:59 nativespace-cdp sshd[8784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:18:59 nativespace-cdp sshd[8784]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:18:59 nativespace-cdp sshd[8803]: Invalid user firefart from 45.116.79.186 port 43752
Oct  1 09:18:59 nativespace-cdp sshd[8803]: input_userauth_request: invalid user firefart [preauth]
Oct  1 09:18:59 nativespace-cdp sshd[8803]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:18:59 nativespace-cdp sshd[8803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:19:00 nativespace-cdp sshd[8801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:19:00 nativespace-cdp sshd[8801]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:19:00 nativespace-cdp sshd[8795]: Invalid user ubuntu from 103.55.49.10 port 36300
Oct  1 09:19:00 nativespace-cdp sshd[8795]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:19:00 nativespace-cdp sshd[8795]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:00 nativespace-cdp sshd[8795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:19:01 nativespace-cdp sshd[8784]: Failed password for root from 8.222.184.144 port 50044 ssh2
Oct  1 09:19:01 nativespace-cdp sshd[8803]: Failed password for invalid user firefart from 45.116.79.186 port 43752 ssh2
Oct  1 09:19:01 nativespace-cdp sshd[8803]: Received disconnect from 45.116.79.186 port 43752:11: Bye Bye [preauth]
Oct  1 09:19:01 nativespace-cdp sshd[8803]: Disconnected from 45.116.79.186 port 43752 [preauth]
Oct  1 09:19:01 nativespace-cdp sshd[8784]: Received disconnect from 8.222.184.144 port 50044:11: Bye Bye [preauth]
Oct  1 09:19:01 nativespace-cdp sshd[8784]: Disconnected from 8.222.184.144 port 50044 [preauth]
Oct  1 09:19:02 nativespace-cdp sshd[8801]: Failed password for root from 47.106.171.75 port 51958 ssh2
Oct  1 09:19:03 nativespace-cdp sshd[8801]: Received disconnect from 47.106.171.75 port 51958:11: Bye Bye [preauth]
Oct  1 09:19:03 nativespace-cdp sshd[8801]: Disconnected from 47.106.171.75 port 51958 [preauth]
Oct  1 09:19:03 nativespace-cdp sshd[8795]: Failed password for invalid user ubuntu from 103.55.49.10 port 36300 ssh2
Oct  1 09:19:03 nativespace-cdp sshd[8795]: Received disconnect from 103.55.49.10 port 36300:11: Bye Bye [preauth]
Oct  1 09:19:03 nativespace-cdp sshd[8795]: Disconnected from 103.55.49.10 port 36300 [preauth]
Oct  1 09:19:08 nativespace-cdp sshd[8839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:19:08 nativespace-cdp sshd[8839]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:19:09 nativespace-cdp sshd[8839]: Failed password for root from 45.116.79.186 port 45294 ssh2
Oct  1 09:19:09 nativespace-cdp sshd[8839]: Received disconnect from 45.116.79.186 port 45294:11: Bye Bye [preauth]
Oct  1 09:19:09 nativespace-cdp sshd[8839]: Disconnected from 45.116.79.186 port 45294 [preauth]
Oct  1 09:19:11 nativespace-cdp sshd[8844]: Invalid user virl from 8.222.184.144 port 50218
Oct  1 09:19:11 nativespace-cdp sshd[8844]: input_userauth_request: invalid user virl [preauth]
Oct  1 09:19:11 nativespace-cdp sshd[8844]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:11 nativespace-cdp sshd[8844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:19:13 nativespace-cdp sshd[8844]: Failed password for invalid user virl from 8.222.184.144 port 50218 ssh2
Oct  1 09:19:13 nativespace-cdp sshd[8856]: Invalid user admin from 45.116.79.186 port 47312
Oct  1 09:19:13 nativespace-cdp sshd[8856]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:19:13 nativespace-cdp sshd[8856]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:13 nativespace-cdp sshd[8856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:19:13 nativespace-cdp sshd[8844]: Received disconnect from 8.222.184.144 port 50218:11: Bye Bye [preauth]
Oct  1 09:19:13 nativespace-cdp sshd[8844]: Disconnected from 8.222.184.144 port 50218 [preauth]
Oct  1 09:19:15 nativespace-cdp sshd[8856]: Failed password for invalid user admin from 45.116.79.186 port 47312 ssh2
Oct  1 09:19:15 nativespace-cdp sshd[8856]: Received disconnect from 45.116.79.186 port 47312:11: Bye Bye [preauth]
Oct  1 09:19:15 nativespace-cdp sshd[8856]: Disconnected from 45.116.79.186 port 47312 [preauth]
Oct  1 09:19:22 nativespace-cdp sshd[8886]: Invalid user admin from 45.116.79.186 port 48964
Oct  1 09:19:22 nativespace-cdp sshd[8886]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:19:22 nativespace-cdp sshd[8886]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:22 nativespace-cdp sshd[8886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:19:23 nativespace-cdp sshd[8889]: Invalid user admin from 47.106.171.75 port 55294
Oct  1 09:19:23 nativespace-cdp sshd[8889]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:19:23 nativespace-cdp sshd[8889]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:23 nativespace-cdp sshd[8889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:19:25 nativespace-cdp sshd[8886]: Failed password for invalid user admin from 45.116.79.186 port 48964 ssh2
Oct  1 09:19:25 nativespace-cdp sshd[8886]: Received disconnect from 45.116.79.186 port 48964:11: Bye Bye [preauth]
Oct  1 09:19:25 nativespace-cdp sshd[8886]: Disconnected from 45.116.79.186 port 48964 [preauth]
Oct  1 09:19:25 nativespace-cdp sshd[8889]: Failed password for invalid user admin from 47.106.171.75 port 55294 ssh2
Oct  1 09:19:26 nativespace-cdp sshd[8889]: Received disconnect from 47.106.171.75 port 55294:11: Bye Bye [preauth]
Oct  1 09:19:26 nativespace-cdp sshd[8889]: Disconnected from 47.106.171.75 port 55294 [preauth]
Oct  1 09:19:29 nativespace-cdp sshd[8924]: Invalid user chris from 8.222.184.144 port 59836
Oct  1 09:19:29 nativespace-cdp sshd[8924]: input_userauth_request: invalid user chris [preauth]
Oct  1 09:19:29 nativespace-cdp sshd[8924]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:29 nativespace-cdp sshd[8924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:19:30 nativespace-cdp sshd[8924]: Failed password for invalid user chris from 8.222.184.144 port 59836 ssh2
Oct  1 09:19:31 nativespace-cdp sshd[8924]: Received disconnect from 8.222.184.144 port 59836:11: Bye Bye [preauth]
Oct  1 09:19:31 nativespace-cdp sshd[8924]: Disconnected from 8.222.184.144 port 59836 [preauth]
Oct  1 09:19:31 nativespace-cdp sshd[8945]: Invalid user nisec from 45.116.79.186 port 49904
Oct  1 09:19:31 nativespace-cdp sshd[8945]: input_userauth_request: invalid user nisec [preauth]
Oct  1 09:19:31 nativespace-cdp sshd[8945]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:31 nativespace-cdp sshd[8945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:19:33 nativespace-cdp sshd[8945]: Failed password for invalid user nisec from 45.116.79.186 port 49904 ssh2
Oct  1 09:19:36 nativespace-cdp sshd[8945]: Received disconnect from 45.116.79.186 port 49904:11: Bye Bye [preauth]
Oct  1 09:19:36 nativespace-cdp sshd[8945]: Disconnected from 45.116.79.186 port 49904 [preauth]
Oct  1 09:19:40 nativespace-cdp sshd[8966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:19:40 nativespace-cdp sshd[8966]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:19:42 nativespace-cdp sshd[8966]: Failed password for root from 45.116.79.186 port 52070 ssh2
Oct  1 09:19:45 nativespace-cdp sshd[8966]: Received disconnect from 45.116.79.186 port 52070:11: Bye Bye [preauth]
Oct  1 09:19:45 nativespace-cdp sshd[8966]: Disconnected from 45.116.79.186 port 52070 [preauth]
Oct  1 09:19:49 nativespace-cdp sshd[8987]: Invalid user administrator from 8.222.184.144 port 47552
Oct  1 09:19:49 nativespace-cdp sshd[8987]: input_userauth_request: invalid user administrator [preauth]
Oct  1 09:19:49 nativespace-cdp sshd[8987]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:49 nativespace-cdp sshd[8987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:19:50 nativespace-cdp sshd[9005]: Invalid user debianuser from 47.106.171.75 port 58632
Oct  1 09:19:50 nativespace-cdp sshd[9005]: input_userauth_request: invalid user debianuser [preauth]
Oct  1 09:19:50 nativespace-cdp sshd[9005]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:50 nativespace-cdp sshd[9005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:19:50 nativespace-cdp sshd[8987]: Failed password for invalid user administrator from 8.222.184.144 port 47552 ssh2
Oct  1 09:19:51 nativespace-cdp sshd[8987]: Received disconnect from 8.222.184.144 port 47552:11: Bye Bye [preauth]
Oct  1 09:19:51 nativespace-cdp sshd[8987]: Disconnected from 8.222.184.144 port 47552 [preauth]
Oct  1 09:19:51 nativespace-cdp sshd[9013]: Invalid user virl from 45.116.79.186 port 53612
Oct  1 09:19:51 nativespace-cdp sshd[9013]: input_userauth_request: invalid user virl [preauth]
Oct  1 09:19:51 nativespace-cdp sshd[9013]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:51 nativespace-cdp sshd[9013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:19:52 nativespace-cdp sshd[9005]: Failed password for invalid user debianuser from 47.106.171.75 port 58632 ssh2
Oct  1 09:19:52 nativespace-cdp sshd[9005]: Received disconnect from 47.106.171.75 port 58632:11: Bye Bye [preauth]
Oct  1 09:19:52 nativespace-cdp sshd[9005]: Disconnected from 47.106.171.75 port 58632 [preauth]
Oct  1 09:19:53 nativespace-cdp sshd[9013]: Failed password for invalid user virl from 45.116.79.186 port 53612 ssh2
Oct  1 09:19:58 nativespace-cdp sshd[9013]: Received disconnect from 45.116.79.186 port 53612:11: Bye Bye [preauth]
Oct  1 09:19:58 nativespace-cdp sshd[9013]: Disconnected from 45.116.79.186 port 53612 [preauth]
Oct  1 09:19:58 nativespace-cdp sshd[9030]: Invalid user admin from 45.116.79.186 port 54748
Oct  1 09:19:58 nativespace-cdp sshd[9030]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:19:58 nativespace-cdp sshd[9030]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:58 nativespace-cdp sshd[9030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:19:59 nativespace-cdp sshd[9028]: Invalid user support from 103.55.49.10 port 35948
Oct  1 09:19:59 nativespace-cdp sshd[9028]: input_userauth_request: invalid user support [preauth]
Oct  1 09:19:59 nativespace-cdp sshd[9028]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:19:59 nativespace-cdp sshd[9028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:20:00 nativespace-cdp sshd[9030]: Failed password for invalid user admin from 45.116.79.186 port 54748 ssh2
Oct  1 09:20:00 nativespace-cdp sshd[9030]: Received disconnect from 45.116.79.186 port 54748:11: Bye Bye [preauth]
Oct  1 09:20:00 nativespace-cdp sshd[9030]: Disconnected from 45.116.79.186 port 54748 [preauth]
Oct  1 09:20:00 nativespace-cdp sshd[9028]: Failed password for invalid user support from 103.55.49.10 port 35948 ssh2
Oct  1 09:20:01 nativespace-cdp sshd[9028]: Received disconnect from 103.55.49.10 port 35948:11: Bye Bye [preauth]
Oct  1 09:20:01 nativespace-cdp sshd[9028]: Disconnected from 103.55.49.10 port 35948 [preauth]
Oct  1 09:20:05 nativespace-cdp sshd[9330]: Invalid user debian from 8.222.184.144 port 53028
Oct  1 09:20:05 nativespace-cdp sshd[9330]: input_userauth_request: invalid user debian [preauth]
Oct  1 09:20:05 nativespace-cdp sshd[9330]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:20:05 nativespace-cdp sshd[9330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:20:06 nativespace-cdp sshd[9330]: Failed password for invalid user debian from 8.222.184.144 port 53028 ssh2
Oct  1 09:20:06 nativespace-cdp sshd[9408]: Invalid user anand from 45.116.79.186 port 56424
Oct  1 09:20:06 nativespace-cdp sshd[9408]: input_userauth_request: invalid user anand [preauth]
Oct  1 09:20:06 nativespace-cdp sshd[9408]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:20:06 nativespace-cdp sshd[9408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:20:06 nativespace-cdp sshd[9330]: Received disconnect from 8.222.184.144 port 53028:11: Bye Bye [preauth]
Oct  1 09:20:06 nativespace-cdp sshd[9330]: Disconnected from 8.222.184.144 port 53028 [preauth]
Oct  1 09:20:08 nativespace-cdp sshd[9408]: Failed password for invalid user anand from 45.116.79.186 port 56424 ssh2
Oct  1 09:20:12 nativespace-cdp sshd[9408]: Received disconnect from 45.116.79.186 port 56424:11: Bye Bye [preauth]
Oct  1 09:20:12 nativespace-cdp sshd[9408]: Disconnected from 45.116.79.186 port 56424 [preauth]
Oct  1 09:20:15 nativespace-cdp sshd[9428]: Invalid user cacti from 45.116.79.186 port 58220
Oct  1 09:20:15 nativespace-cdp sshd[9428]: input_userauth_request: invalid user cacti [preauth]
Oct  1 09:20:15 nativespace-cdp sshd[9428]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:20:15 nativespace-cdp sshd[9428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:20:15 nativespace-cdp sshd[9430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:20:15 nativespace-cdp sshd[9430]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:20:17 nativespace-cdp sshd[9428]: Failed password for invalid user cacti from 45.116.79.186 port 58220 ssh2
Oct  1 09:20:17 nativespace-cdp sshd[9428]: Received disconnect from 45.116.79.186 port 58220:11: Bye Bye [preauth]
Oct  1 09:20:17 nativespace-cdp sshd[9428]: Disconnected from 45.116.79.186 port 58220 [preauth]
Oct  1 09:20:17 nativespace-cdp sshd[9430]: Failed password for root from 47.106.171.75 port 33744 ssh2
Oct  1 09:20:17 nativespace-cdp sshd[9430]: Received disconnect from 47.106.171.75 port 33744:11: Bye Bye [preauth]
Oct  1 09:20:17 nativespace-cdp sshd[9430]: Disconnected from 47.106.171.75 port 33744 [preauth]
Oct  1 09:20:23 nativespace-cdp sshd[9449]: Invalid user admin from 8.222.184.144 port 35148
Oct  1 09:20:23 nativespace-cdp sshd[9449]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:20:23 nativespace-cdp sshd[9449]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:20:23 nativespace-cdp sshd[9449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:20:23 nativespace-cdp sshd[9453]: Invalid user bkp from 45.116.79.186 port 59146
Oct  1 09:20:23 nativespace-cdp sshd[9453]: input_userauth_request: invalid user bkp [preauth]
Oct  1 09:20:23 nativespace-cdp sshd[9453]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:20:23 nativespace-cdp sshd[9453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186
Oct  1 09:20:24 nativespace-cdp sshd[9449]: Failed password for invalid user admin from 8.222.184.144 port 35148 ssh2
Oct  1 09:20:24 nativespace-cdp sshd[9449]: Received disconnect from 8.222.184.144 port 35148:11: Bye Bye [preauth]
Oct  1 09:20:24 nativespace-cdp sshd[9449]: Disconnected from 8.222.184.144 port 35148 [preauth]
Oct  1 09:20:25 nativespace-cdp sshd[9453]: Failed password for invalid user bkp from 45.116.79.186 port 59146 ssh2
Oct  1 09:20:25 nativespace-cdp sshd[9453]: Received disconnect from 45.116.79.186 port 59146:11: Bye Bye [preauth]
Oct  1 09:20:25 nativespace-cdp sshd[9453]: Disconnected from 45.116.79.186 port 59146 [preauth]
Oct  1 09:20:31 nativespace-cdp sshd[9478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:20:31 nativespace-cdp sshd[9478]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:20:33 nativespace-cdp sshd[9478]: Failed password for root from 45.116.79.186 port 60672 ssh2
Oct  1 09:20:36 nativespace-cdp sshd[9478]: Received disconnect from 45.116.79.186 port 60672:11: Bye Bye [preauth]
Oct  1 09:20:36 nativespace-cdp sshd[9478]: Disconnected from 45.116.79.186 port 60672 [preauth]
Oct  1 09:20:40 nativespace-cdp sshd[9551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.79.186  user=root
Oct  1 09:20:40 nativespace-cdp sshd[9551]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:20:41 nativespace-cdp sshd[9548]: Invalid user adminftp from 8.222.184.144 port 42054
Oct  1 09:20:41 nativespace-cdp sshd[9548]: input_userauth_request: invalid user adminftp [preauth]
Oct  1 09:20:41 nativespace-cdp sshd[9548]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:20:41 nativespace-cdp sshd[9548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:20:42 nativespace-cdp sshd[9551]: Failed password for root from 45.116.79.186 port 34026 ssh2
Oct  1 09:20:42 nativespace-cdp sshd[9551]: Received disconnect from 45.116.79.186 port 34026:11: Bye Bye [preauth]
Oct  1 09:20:42 nativespace-cdp sshd[9551]: Disconnected from 45.116.79.186 port 34026 [preauth]
Oct  1 09:20:42 nativespace-cdp sshd[9548]: Failed password for invalid user adminftp from 8.222.184.144 port 42054 ssh2
Oct  1 09:20:42 nativespace-cdp sshd[9557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:20:42 nativespace-cdp sshd[9557]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:20:42 nativespace-cdp sshd[9548]: Received disconnect from 8.222.184.144 port 42054:11: Bye Bye [preauth]
Oct  1 09:20:42 nativespace-cdp sshd[9548]: Disconnected from 8.222.184.144 port 42054 [preauth]
Oct  1 09:20:44 nativespace-cdp sshd[9557]: Failed password for root from 47.106.171.75 port 37086 ssh2
Oct  1 09:20:44 nativespace-cdp sshd[9557]: Received disconnect from 47.106.171.75 port 37086:11: Bye Bye [preauth]
Oct  1 09:20:44 nativespace-cdp sshd[9557]: Disconnected from 47.106.171.75 port 37086 [preauth]
Oct  1 09:20:57 nativespace-cdp sshd[9614]: Invalid user ubuntu from 103.55.49.10 port 58744
Oct  1 09:20:57 nativespace-cdp sshd[9614]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:20:57 nativespace-cdp sshd[9614]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:20:57 nativespace-cdp sshd[9614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:20:59 nativespace-cdp sshd[9614]: Failed password for invalid user ubuntu from 103.55.49.10 port 58744 ssh2
Oct  1 09:21:00 nativespace-cdp sshd[9621]: Invalid user cacti from 8.222.184.144 port 41930
Oct  1 09:21:00 nativespace-cdp sshd[9621]: input_userauth_request: invalid user cacti [preauth]
Oct  1 09:21:00 nativespace-cdp sshd[9621]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:21:00 nativespace-cdp sshd[9621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:21:00 nativespace-cdp sshd[9614]: Received disconnect from 103.55.49.10 port 58744:11: Bye Bye [preauth]
Oct  1 09:21:00 nativespace-cdp sshd[9614]: Disconnected from 103.55.49.10 port 58744 [preauth]
Oct  1 09:21:02 nativespace-cdp sshd[9621]: Failed password for invalid user cacti from 8.222.184.144 port 41930 ssh2
Oct  1 09:21:02 nativespace-cdp sshd[9621]: Received disconnect from 8.222.184.144 port 41930:11: Bye Bye [preauth]
Oct  1 09:21:02 nativespace-cdp sshd[9621]: Disconnected from 8.222.184.144 port 41930 [preauth]
Oct  1 09:21:15 nativespace-cdp sshd[9672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:21:15 nativespace-cdp sshd[9672]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:21:17 nativespace-cdp sshd[9672]: Failed password for root from 47.106.171.75 port 40426 ssh2
Oct  1 09:21:17 nativespace-cdp sshd[9672]: Received disconnect from 47.106.171.75 port 40426:11: Bye Bye [preauth]
Oct  1 09:21:17 nativespace-cdp sshd[9672]: Disconnected from 47.106.171.75 port 40426 [preauth]
Oct  1 09:21:19 nativespace-cdp sshd[9694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:21:19 nativespace-cdp sshd[9694]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:21:21 nativespace-cdp sshd[9694]: Failed password for root from 8.222.184.144 port 52012 ssh2
Oct  1 09:21:21 nativespace-cdp sshd[9694]: Received disconnect from 8.222.184.144 port 52012:11: Bye Bye [preauth]
Oct  1 09:21:21 nativespace-cdp sshd[9694]: Disconnected from 8.222.184.144 port 52012 [preauth]
Oct  1 09:21:40 nativespace-cdp sshd[9747]: Invalid user daniel from 8.222.184.144 port 49166
Oct  1 09:21:40 nativespace-cdp sshd[9747]: input_userauth_request: invalid user daniel [preauth]
Oct  1 09:21:40 nativespace-cdp sshd[9747]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:21:40 nativespace-cdp sshd[9747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:21:42 nativespace-cdp sshd[9747]: Failed password for invalid user daniel from 8.222.184.144 port 49166 ssh2
Oct  1 09:21:42 nativespace-cdp sshd[9747]: Received disconnect from 8.222.184.144 port 49166:11: Bye Bye [preauth]
Oct  1 09:21:42 nativespace-cdp sshd[9747]: Disconnected from 8.222.184.144 port 49166 [preauth]
Oct  1 09:21:47 nativespace-cdp sshd[9790]: Invalid user admin from 47.106.171.75 port 43764
Oct  1 09:21:47 nativespace-cdp sshd[9790]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:21:47 nativespace-cdp sshd[9790]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:21:47 nativespace-cdp sshd[9790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:21:48 nativespace-cdp sshd[9790]: Failed password for invalid user admin from 47.106.171.75 port 43764 ssh2
Oct  1 09:21:49 nativespace-cdp sshd[9790]: Received disconnect from 47.106.171.75 port 43764:11: Bye Bye [preauth]
Oct  1 09:21:49 nativespace-cdp sshd[9790]: Disconnected from 47.106.171.75 port 43764 [preauth]
Oct  1 09:21:55 nativespace-cdp sshd[9813]: Invalid user bkp from 8.222.184.144 port 59454
Oct  1 09:21:55 nativespace-cdp sshd[9813]: input_userauth_request: invalid user bkp [preauth]
Oct  1 09:21:55 nativespace-cdp sshd[9813]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:21:55 nativespace-cdp sshd[9813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:21:57 nativespace-cdp sshd[9813]: Failed password for invalid user bkp from 8.222.184.144 port 59454 ssh2
Oct  1 09:21:57 nativespace-cdp sshd[9813]: Received disconnect from 8.222.184.144 port 59454:11: Bye Bye [preauth]
Oct  1 09:21:57 nativespace-cdp sshd[9813]: Disconnected from 8.222.184.144 port 59454 [preauth]
Oct  1 09:22:00 nativespace-cdp sshd[9911]: Invalid user ubuntu from 103.55.49.10 port 56752
Oct  1 09:22:00 nativespace-cdp sshd[9911]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:22:00 nativespace-cdp sshd[9911]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:22:00 nativespace-cdp sshd[9911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:22:02 nativespace-cdp sshd[9911]: Failed password for invalid user ubuntu from 103.55.49.10 port 56752 ssh2
Oct  1 09:22:04 nativespace-cdp sshd[9911]: Received disconnect from 103.55.49.10 port 56752:11: Bye Bye [preauth]
Oct  1 09:22:04 nativespace-cdp sshd[9911]: Disconnected from 103.55.49.10 port 56752 [preauth]
Oct  1 09:22:16 nativespace-cdp sshd[9964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:22:16 nativespace-cdp sshd[9964]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:22:19 nativespace-cdp sshd[9964]: Failed password for root from 8.222.184.144 port 38384 ssh2
Oct  1 09:22:19 nativespace-cdp sshd[9964]: Received disconnect from 8.222.184.144 port 38384:11: Bye Bye [preauth]
Oct  1 09:22:19 nativespace-cdp sshd[9964]: Disconnected from 8.222.184.144 port 38384 [preauth]
Oct  1 09:22:25 nativespace-cdp sshd[9994]: Invalid user administrator from 47.106.171.75 port 47106
Oct  1 09:22:25 nativespace-cdp sshd[9994]: input_userauth_request: invalid user administrator [preauth]
Oct  1 09:22:25 nativespace-cdp sshd[9994]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:22:25 nativespace-cdp sshd[9994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:22:27 nativespace-cdp sshd[9994]: Failed password for invalid user administrator from 47.106.171.75 port 47106 ssh2
Oct  1 09:22:27 nativespace-cdp sshd[9994]: Received disconnect from 47.106.171.75 port 47106:11: Bye Bye [preauth]
Oct  1 09:22:27 nativespace-cdp sshd[9994]: Disconnected from 47.106.171.75 port 47106 [preauth]
Oct  1 09:22:32 nativespace-cdp sshd[10018]: Invalid user admin from 8.222.184.144 port 57236
Oct  1 09:22:32 nativespace-cdp sshd[10018]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:22:32 nativespace-cdp sshd[10018]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:22:32 nativespace-cdp sshd[10018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:22:34 nativespace-cdp sshd[10018]: Failed password for invalid user admin from 8.222.184.144 port 57236 ssh2
Oct  1 09:22:34 nativespace-cdp sshd[10018]: Received disconnect from 8.222.184.144 port 57236:11: Bye Bye [preauth]
Oct  1 09:22:34 nativespace-cdp sshd[10018]: Disconnected from 8.222.184.144 port 57236 [preauth]
Oct  1 09:22:55 nativespace-cdp sshd[10097]: Invalid user admin from 8.222.184.144 port 60256
Oct  1 09:22:55 nativespace-cdp sshd[10097]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:22:55 nativespace-cdp sshd[10097]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:22:55 nativespace-cdp sshd[10097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:22:56 nativespace-cdp sshd[10110]: Invalid user admin from 47.106.171.75 port 50446
Oct  1 09:22:56 nativespace-cdp sshd[10110]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:22:56 nativespace-cdp sshd[10110]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:22:56 nativespace-cdp sshd[10110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:22:58 nativespace-cdp sshd[10097]: Failed password for invalid user admin from 8.222.184.144 port 60256 ssh2
Oct  1 09:22:58 nativespace-cdp sshd[10097]: Received disconnect from 8.222.184.144 port 60256:11: Bye Bye [preauth]
Oct  1 09:22:58 nativespace-cdp sshd[10097]: Disconnected from 8.222.184.144 port 60256 [preauth]
Oct  1 09:22:58 nativespace-cdp sshd[10110]: Failed password for invalid user admin from 47.106.171.75 port 50446 ssh2
Oct  1 09:22:59 nativespace-cdp sshd[10110]: Received disconnect from 47.106.171.75 port 50446:11: Bye Bye [preauth]
Oct  1 09:22:59 nativespace-cdp sshd[10110]: Disconnected from 47.106.171.75 port 50446 [preauth]
Oct  1 09:22:59 nativespace-cdp sshd[10118]: Invalid user nexus from 103.55.49.10 port 49052
Oct  1 09:22:59 nativespace-cdp sshd[10118]: input_userauth_request: invalid user nexus [preauth]
Oct  1 09:22:59 nativespace-cdp sshd[10118]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:22:59 nativespace-cdp sshd[10118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:23:01 nativespace-cdp sshd[10118]: Failed password for invalid user nexus from 103.55.49.10 port 49052 ssh2
Oct  1 09:23:02 nativespace-cdp sshd[10118]: Received disconnect from 103.55.49.10 port 49052:11: Bye Bye [preauth]
Oct  1 09:23:02 nativespace-cdp sshd[10118]: Disconnected from 103.55.49.10 port 49052 [preauth]
Oct  1 09:23:09 nativespace-cdp sshd[10152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=david
Oct  1 09:23:11 nativespace-cdp sshd[10152]: Failed password for david from 8.222.184.144 port 38554 ssh2
Oct  1 09:23:16 nativespace-cdp sshd[10152]: Received disconnect from 8.222.184.144 port 38554:11: Bye Bye [preauth]
Oct  1 09:23:16 nativespace-cdp sshd[10152]: Disconnected from 8.222.184.144 port 38554 [preauth]
Oct  1 09:23:25 nativespace-cdp sshd[10196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=david
Oct  1 09:23:27 nativespace-cdp sshd[10196]: Failed password for david from 47.106.171.75 port 53780 ssh2
Oct  1 09:23:27 nativespace-cdp sshd[10196]: Received disconnect from 47.106.171.75 port 53780:11: Bye Bye [preauth]
Oct  1 09:23:27 nativespace-cdp sshd[10196]: Disconnected from 47.106.171.75 port 53780 [preauth]
Oct  1 09:23:30 nativespace-cdp sshd[10207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:23:30 nativespace-cdp sshd[10207]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:23:32 nativespace-cdp sshd[10207]: Failed password for root from 8.222.184.144 port 36978 ssh2
Oct  1 09:23:33 nativespace-cdp sshd[10207]: Received disconnect from 8.222.184.144 port 36978:11: Bye Bye [preauth]
Oct  1 09:23:33 nativespace-cdp sshd[10207]: Disconnected from 8.222.184.144 port 36978 [preauth]
Oct  1 09:23:53 nativespace-cdp sshd[10256]: Invalid user admin from 8.222.184.144 port 37678
Oct  1 09:23:53 nativespace-cdp sshd[10256]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:23:53 nativespace-cdp sshd[10256]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:23:53 nativespace-cdp sshd[10256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:23:55 nativespace-cdp sshd[10267]: Invalid user dockeruser from 47.106.171.75 port 57120
Oct  1 09:23:55 nativespace-cdp sshd[10267]: input_userauth_request: invalid user dockeruser [preauth]
Oct  1 09:23:55 nativespace-cdp sshd[10267]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:23:55 nativespace-cdp sshd[10267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:23:55 nativespace-cdp sshd[10256]: Failed password for invalid user admin from 8.222.184.144 port 37678 ssh2
Oct  1 09:23:55 nativespace-cdp sshd[10256]: Received disconnect from 8.222.184.144 port 37678:11: Bye Bye [preauth]
Oct  1 09:23:55 nativespace-cdp sshd[10256]: Disconnected from 8.222.184.144 port 37678 [preauth]
Oct  1 09:23:57 nativespace-cdp sshd[10267]: Failed password for invalid user dockeruser from 47.106.171.75 port 57120 ssh2
Oct  1 09:24:00 nativespace-cdp sshd[10267]: Received disconnect from 47.106.171.75 port 57120:11: Bye Bye [preauth]
Oct  1 09:24:00 nativespace-cdp sshd[10267]: Disconnected from 47.106.171.75 port 57120 [preauth]
Oct  1 09:24:03 nativespace-cdp sshd[10296]: Invalid user user from 103.55.49.10 port 38366
Oct  1 09:24:03 nativespace-cdp sshd[10296]: input_userauth_request: invalid user user [preauth]
Oct  1 09:24:03 nativespace-cdp sshd[10296]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:24:03 nativespace-cdp sshd[10296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.55.49.10
Oct  1 09:24:05 nativespace-cdp sshd[10296]: Failed password for invalid user user from 103.55.49.10 port 38366 ssh2
Oct  1 09:24:05 nativespace-cdp sshd[10296]: Received disconnect from 103.55.49.10 port 38366:11: Bye Bye [preauth]
Oct  1 09:24:05 nativespace-cdp sshd[10296]: Disconnected from 103.55.49.10 port 38366 [preauth]
Oct  1 09:24:09 nativespace-cdp sshd[10321]: Invalid user admin from 8.222.184.144 port 60256
Oct  1 09:24:09 nativespace-cdp sshd[10321]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:24:10 nativespace-cdp sshd[10321]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:24:10 nativespace-cdp sshd[10321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:24:12 nativespace-cdp sshd[10321]: Failed password for invalid user admin from 8.222.184.144 port 60256 ssh2
Oct  1 09:24:17 nativespace-cdp sshd[10321]: Received disconnect from 8.222.184.144 port 60256:11: Bye Bye [preauth]
Oct  1 09:24:17 nativespace-cdp sshd[10321]: Disconnected from 8.222.184.144 port 60256 [preauth]
Oct  1 09:24:26 nativespace-cdp sshd[10367]: Invalid user nisec from 47.106.171.75 port 60458
Oct  1 09:24:26 nativespace-cdp sshd[10367]: input_userauth_request: invalid user nisec [preauth]
Oct  1 09:24:26 nativespace-cdp sshd[10367]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:24:26 nativespace-cdp sshd[10367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:24:29 nativespace-cdp sshd[10367]: Failed password for invalid user nisec from 47.106.171.75 port 60458 ssh2
Oct  1 09:24:29 nativespace-cdp sshd[10375]: Invalid user admin from 8.222.184.144 port 38200
Oct  1 09:24:29 nativespace-cdp sshd[10375]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:24:29 nativespace-cdp sshd[10375]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:24:29 nativespace-cdp sshd[10375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:24:29 nativespace-cdp sshd[10367]: Received disconnect from 47.106.171.75 port 60458:11: Bye Bye [preauth]
Oct  1 09:24:29 nativespace-cdp sshd[10367]: Disconnected from 47.106.171.75 port 60458 [preauth]
Oct  1 09:24:31 nativespace-cdp sshd[10375]: Failed password for invalid user admin from 8.222.184.144 port 38200 ssh2
Oct  1 09:24:31 nativespace-cdp sshd[10375]: Received disconnect from 8.222.184.144 port 38200:11: Bye Bye [preauth]
Oct  1 09:24:31 nativespace-cdp sshd[10375]: Disconnected from 8.222.184.144 port 38200 [preauth]
Oct  1 09:24:51 nativespace-cdp sshd[10447]: Invalid user admin from 47.106.171.75 port 35570
Oct  1 09:24:51 nativespace-cdp sshd[10447]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:24:51 nativespace-cdp sshd[10447]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:24:51 nativespace-cdp sshd[10447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:24:52 nativespace-cdp sshd[10450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:24:52 nativespace-cdp sshd[10450]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:24:53 nativespace-cdp sshd[10447]: Failed password for invalid user admin from 47.106.171.75 port 35570 ssh2
Oct  1 09:24:54 nativespace-cdp sshd[10450]: Failed password for root from 8.222.184.144 port 36168 ssh2
Oct  1 09:24:56 nativespace-cdp sshd[10450]: Received disconnect from 8.222.184.144 port 36168:11: Bye Bye [preauth]
Oct  1 09:24:56 nativespace-cdp sshd[10450]: Disconnected from 8.222.184.144 port 36168 [preauth]
Oct  1 09:24:58 nativespace-cdp sshd[10447]: Received disconnect from 47.106.171.75 port 35570:11: Bye Bye [preauth]
Oct  1 09:24:58 nativespace-cdp sshd[10447]: Disconnected from 47.106.171.75 port 35570 [preauth]
Oct  1 09:24:59 nativespace-cdp sshd[10472]: Invalid user admin from 47.103.88.18 port 57770
Oct  1 09:24:59 nativespace-cdp sshd[10472]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:24:59 nativespace-cdp sshd[10472]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:24:59 nativespace-cdp sshd[10472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:25:00 nativespace-cdp sshd[10472]: Failed password for invalid user admin from 47.103.88.18 port 57770 ssh2
Oct  1 09:25:01 nativespace-cdp sshd[10472]: Received disconnect from 47.103.88.18 port 57770:11: Bye Bye [preauth]
Oct  1 09:25:01 nativespace-cdp sshd[10472]: Disconnected from 47.103.88.18 port 57770 [preauth]
Oct  1 09:25:03 nativespace-cdp sshd[10246]: Connection closed by 47.103.88.18 port 44390 [preauth]
Oct  1 09:25:13 nativespace-cdp sshd[10592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:25:13 nativespace-cdp sshd[10592]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:25:16 nativespace-cdp sshd[10592]: Failed password for root from 8.222.184.144 port 41630 ssh2
Oct  1 09:25:16 nativespace-cdp sshd[10592]: Received disconnect from 8.222.184.144 port 41630:11: Bye Bye [preauth]
Oct  1 09:25:16 nativespace-cdp sshd[10592]: Disconnected from 8.222.184.144 port 41630 [preauth]
Oct  1 09:25:26 nativespace-cdp sshd[10607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:25:26 nativespace-cdp sshd[10607]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:25:28 nativespace-cdp sshd[10607]: Failed password for root from 47.106.171.75 port 38908 ssh2
Oct  1 09:25:28 nativespace-cdp sshd[10607]: Received disconnect from 47.106.171.75 port 38908:11: Bye Bye [preauth]
Oct  1 09:25:28 nativespace-cdp sshd[10607]: Disconnected from 47.106.171.75 port 38908 [preauth]
Oct  1 09:25:32 nativespace-cdp sshd[10675]: Invalid user admin from 8.222.184.144 port 45828
Oct  1 09:25:32 nativespace-cdp sshd[10675]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:25:32 nativespace-cdp sshd[10675]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:25:32 nativespace-cdp sshd[10675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144
Oct  1 09:25:34 nativespace-cdp sshd[10675]: Failed password for invalid user admin from 8.222.184.144 port 45828 ssh2
Oct  1 09:25:34 nativespace-cdp sshd[10675]: Received disconnect from 8.222.184.144 port 45828:11: Bye Bye [preauth]
Oct  1 09:25:34 nativespace-cdp sshd[10675]: Disconnected from 8.222.184.144 port 45828 [preauth]
Oct  1 09:25:46 nativespace-cdp sshd[10726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:25:46 nativespace-cdp sshd[10726]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:25:48 nativespace-cdp sshd[10731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:25:48 nativespace-cdp sshd[10731]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:25:48 nativespace-cdp sshd[10726]: Failed password for root from 47.106.171.75 port 42244 ssh2
Oct  1 09:25:48 nativespace-cdp sshd[10726]: Received disconnect from 47.106.171.75 port 42244:11: Bye Bye [preauth]
Oct  1 09:25:48 nativespace-cdp sshd[10726]: Disconnected from 47.106.171.75 port 42244 [preauth]
Oct  1 09:25:50 nativespace-cdp sshd[10731]: Failed password for root from 8.222.184.144 port 58932 ssh2
Oct  1 09:25:50 nativespace-cdp sshd[10731]: Received disconnect from 8.222.184.144 port 58932:11: Bye Bye [preauth]
Oct  1 09:25:50 nativespace-cdp sshd[10731]: Disconnected from 8.222.184.144 port 58932 [preauth]
Oct  1 09:25:59 nativespace-cdp sshd[10753]: Invalid user administrator from 47.103.88.18 port 42916
Oct  1 09:25:59 nativespace-cdp sshd[10753]: input_userauth_request: invalid user administrator [preauth]
Oct  1 09:25:59 nativespace-cdp sshd[10753]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:25:59 nativespace-cdp sshd[10753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:26:02 nativespace-cdp sshd[10753]: Failed password for invalid user administrator from 47.103.88.18 port 42916 ssh2
Oct  1 09:26:08 nativespace-cdp sshd[10753]: Received disconnect from 47.103.88.18 port 42916:11: Bye Bye [preauth]
Oct  1 09:26:08 nativespace-cdp sshd[10753]: Disconnected from 47.103.88.18 port 42916 [preauth]
Oct  1 09:26:09 nativespace-cdp sshd[10784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.222.184.144  user=root
Oct  1 09:26:09 nativespace-cdp sshd[10784]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:26:11 nativespace-cdp sshd[10784]: Failed password for root from 8.222.184.144 port 46308 ssh2
Oct  1 09:26:11 nativespace-cdp sshd[10784]: Received disconnect from 8.222.184.144 port 46308:11: Bye Bye [preauth]
Oct  1 09:26:11 nativespace-cdp sshd[10784]: Disconnected from 8.222.184.144 port 46308 [preauth]
Oct  1 09:26:23 nativespace-cdp sshd[10825]: Invalid user anand from 47.106.171.75 port 45584
Oct  1 09:26:23 nativespace-cdp sshd[10825]: input_userauth_request: invalid user anand [preauth]
Oct  1 09:26:23 nativespace-cdp sshd[10825]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:26:23 nativespace-cdp sshd[10825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:26:26 nativespace-cdp sshd[10825]: Failed password for invalid user anand from 47.106.171.75 port 45584 ssh2
Oct  1 09:26:26 nativespace-cdp sshd[10825]: Received disconnect from 47.106.171.75 port 45584:11: Bye Bye [preauth]
Oct  1 09:26:26 nativespace-cdp sshd[10825]: Disconnected from 47.106.171.75 port 45584 [preauth]
Oct  1 09:26:34 nativespace-cdp sshd[10856]: Connection closed by 159.100.136.21 port 36094 [preauth]
Oct  1 09:26:55 nativespace-cdp sshd[10934]: Invalid user admin from 47.106.171.75 port 48928
Oct  1 09:26:55 nativespace-cdp sshd[10934]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:26:55 nativespace-cdp sshd[10934]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:26:55 nativespace-cdp sshd[10934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:26:57 nativespace-cdp sshd[10934]: Failed password for invalid user admin from 47.106.171.75 port 48928 ssh2
Oct  1 09:26:57 nativespace-cdp sshd[10934]: Received disconnect from 47.106.171.75 port 48928:11: Bye Bye [preauth]
Oct  1 09:26:57 nativespace-cdp sshd[10934]: Disconnected from 47.106.171.75 port 48928 [preauth]
Oct  1 09:27:05 nativespace-cdp sshd[11074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18  user=root
Oct  1 09:27:05 nativespace-cdp sshd[11074]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:27:07 nativespace-cdp sshd[11074]: Failed password for root from 47.103.88.18 port 56298 ssh2
Oct  1 09:27:07 nativespace-cdp sshd[11074]: Received disconnect from 47.103.88.18 port 56298:11: Bye Bye [preauth]
Oct  1 09:27:07 nativespace-cdp sshd[11074]: Disconnected from 47.103.88.18 port 56298 [preauth]
Oct  1 09:27:22 nativespace-cdp sshd[11137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:27:22 nativespace-cdp sshd[11137]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:27:24 nativespace-cdp sshd[11137]: Failed password for root from 47.106.171.75 port 52266 ssh2
Oct  1 09:27:24 nativespace-cdp sshd[11137]: Received disconnect from 47.106.171.75 port 52266:11: Bye Bye [preauth]
Oct  1 09:27:24 nativespace-cdp sshd[11137]: Disconnected from 47.106.171.75 port 52266 [preauth]
Oct  1 09:27:48 nativespace-cdp sshd[11219]: Invalid user bkp from 47.106.171.75 port 55604
Oct  1 09:27:48 nativespace-cdp sshd[11219]: input_userauth_request: invalid user bkp [preauth]
Oct  1 09:27:48 nativespace-cdp sshd[11219]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:27:48 nativespace-cdp sshd[11219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:27:49 nativespace-cdp sshd[11219]: Failed password for invalid user bkp from 47.106.171.75 port 55604 ssh2
Oct  1 09:27:50 nativespace-cdp sshd[11219]: Received disconnect from 47.106.171.75 port 55604:11: Bye Bye [preauth]
Oct  1 09:27:50 nativespace-cdp sshd[11219]: Disconnected from 47.106.171.75 port 55604 [preauth]
Oct  1 09:27:59 nativespace-cdp sshd[11242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18  user=root
Oct  1 09:27:59 nativespace-cdp sshd[11242]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:28:01 nativespace-cdp sshd[11242]: Failed password for root from 47.103.88.18 port 41452 ssh2
Oct  1 09:28:01 nativespace-cdp sshd[11242]: Received disconnect from 47.103.88.18 port 41452:11: Bye Bye [preauth]
Oct  1 09:28:01 nativespace-cdp sshd[11242]: Disconnected from 47.103.88.18 port 41452 [preauth]
Oct  1 09:28:17 nativespace-cdp sshd[11317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:28:17 nativespace-cdp sshd[11317]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:28:19 nativespace-cdp sshd[11317]: Failed password for root from 47.106.171.75 port 58942 ssh2
Oct  1 09:28:19 nativespace-cdp sshd[11317]: Received disconnect from 47.106.171.75 port 58942:11: Bye Bye [preauth]
Oct  1 09:28:19 nativespace-cdp sshd[11317]: Disconnected from 47.106.171.75 port 58942 [preauth]
Oct  1 09:28:32 nativespace-cdp sshd[11349]: Invalid user test from 46.101.108.159 port 55212
Oct  1 09:28:32 nativespace-cdp sshd[11349]: input_userauth_request: invalid user test [preauth]
Oct  1 09:28:32 nativespace-cdp sshd[11349]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:28:32 nativespace-cdp sshd[11349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:28:33 nativespace-cdp sshd[11340]: Connection closed by 170.64.172.110 port 33660 [preauth]
Oct  1 09:28:34 nativespace-cdp sshd[11349]: Failed password for invalid user test from 46.101.108.159 port 55212 ssh2
Oct  1 09:28:34 nativespace-cdp sshd[11349]: Received disconnect from 46.101.108.159 port 55212:11: Bye Bye [preauth]
Oct  1 09:28:34 nativespace-cdp sshd[11349]: Disconnected from 46.101.108.159 port 55212 [preauth]
Oct  1 09:28:40 nativespace-cdp sshd[11368]: Invalid user admin from 47.106.171.75 port 34048
Oct  1 09:28:40 nativespace-cdp sshd[11368]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:28:40 nativespace-cdp sshd[11368]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:28:40 nativespace-cdp sshd[11368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:28:43 nativespace-cdp sshd[11368]: Failed password for invalid user admin from 47.106.171.75 port 34048 ssh2
Oct  1 09:28:43 nativespace-cdp sshd[11368]: Received disconnect from 47.106.171.75 port 34048:11: Bye Bye [preauth]
Oct  1 09:28:43 nativespace-cdp sshd[11368]: Disconnected from 47.106.171.75 port 34048 [preauth]
Oct  1 09:28:55 nativespace-cdp sshd[11408]: Invalid user appltest from 47.103.88.18 port 54836
Oct  1 09:28:55 nativespace-cdp sshd[11408]: input_userauth_request: invalid user appltest [preauth]
Oct  1 09:28:55 nativespace-cdp sshd[11408]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:28:55 nativespace-cdp sshd[11408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:28:57 nativespace-cdp sshd[11408]: Failed password for invalid user appltest from 47.103.88.18 port 54836 ssh2
Oct  1 09:28:57 nativespace-cdp sshd[11408]: Received disconnect from 47.103.88.18 port 54836:11: Bye Bye [preauth]
Oct  1 09:28:57 nativespace-cdp sshd[11408]: Disconnected from 47.103.88.18 port 54836 [preauth]
Oct  1 09:29:07 nativespace-cdp sshd[11456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:29:07 nativespace-cdp sshd[11456]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:29:08 nativespace-cdp sshd[11456]: Failed password for root from 47.106.171.75 port 37392 ssh2
Oct  1 09:29:09 nativespace-cdp sshd[11456]: Received disconnect from 47.106.171.75 port 37392:11: Bye Bye [preauth]
Oct  1 09:29:09 nativespace-cdp sshd[11456]: Disconnected from 47.106.171.75 port 37392 [preauth]
Oct  1 09:29:21 nativespace-cdp sshd[11498]: Invalid user ubuntu from 109.230.196.26 port 48248
Oct  1 09:29:21 nativespace-cdp sshd[11498]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:29:21 nativespace-cdp sshd[11498]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:29:21 nativespace-cdp sshd[11498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:29:21 nativespace-cdp sshd[11493]: Invalid user test from 61.240.156.16 port 60108
Oct  1 09:29:21 nativespace-cdp sshd[11493]: input_userauth_request: invalid user test [preauth]
Oct  1 09:29:21 nativespace-cdp sshd[11493]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:29:21 nativespace-cdp sshd[11493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:29:23 nativespace-cdp sshd[11498]: Failed password for invalid user ubuntu from 109.230.196.26 port 48248 ssh2
Oct  1 09:29:23 nativespace-cdp sshd[11498]: Received disconnect from 109.230.196.26 port 48248:11: Bye Bye [preauth]
Oct  1 09:29:23 nativespace-cdp sshd[11498]: Disconnected from 109.230.196.26 port 48248 [preauth]
Oct  1 09:29:23 nativespace-cdp sshd[11493]: Failed password for invalid user test from 61.240.156.16 port 60108 ssh2
Oct  1 09:29:24 nativespace-cdp sshd[11493]: Received disconnect from 61.240.156.16 port 60108:11: Bye Bye [preauth]
Oct  1 09:29:24 nativespace-cdp sshd[11493]: Disconnected from 61.240.156.16 port 60108 [preauth]
Oct  1 09:29:36 nativespace-cdp sshd[11535]: Invalid user administrator from 47.106.171.75 port 40730
Oct  1 09:29:36 nativespace-cdp sshd[11535]: input_userauth_request: invalid user administrator [preauth]
Oct  1 09:29:36 nativespace-cdp sshd[11535]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:29:36 nativespace-cdp sshd[11535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:29:38 nativespace-cdp sshd[11535]: Failed password for invalid user administrator from 47.106.171.75 port 40730 ssh2
Oct  1 09:29:38 nativespace-cdp sshd[11535]: Received disconnect from 47.106.171.75 port 40730:11: Bye Bye [preauth]
Oct  1 09:29:38 nativespace-cdp sshd[11535]: Disconnected from 47.106.171.75 port 40730 [preauth]
Oct  1 09:29:53 nativespace-cdp sshd[11588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18  user=root
Oct  1 09:29:53 nativespace-cdp sshd[11588]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:29:55 nativespace-cdp sshd[11588]: Failed password for root from 47.103.88.18 port 39986 ssh2
Oct  1 09:30:00 nativespace-cdp sshd[11588]: Received disconnect from 47.103.88.18 port 39986:11: Bye Bye [preauth]
Oct  1 09:30:00 nativespace-cdp sshd[11588]: Disconnected from 47.103.88.18 port 39986 [preauth]
Oct  1 09:30:01 nativespace-cdp sshd[11618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:30:01 nativespace-cdp sshd[11618]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:30:03 nativespace-cdp sshd[11618]: Failed password for root from 47.106.171.75 port 44068 ssh2
Oct  1 09:30:03 nativespace-cdp sshd[11618]: Received disconnect from 47.106.171.75 port 44068:11: Bye Bye [preauth]
Oct  1 09:30:03 nativespace-cdp sshd[11618]: Disconnected from 47.106.171.75 port 44068 [preauth]
Oct  1 09:30:13 nativespace-cdp sshd[11822]: Invalid user test01 from 140.246.79.129 port 51666
Oct  1 09:30:13 nativespace-cdp sshd[11822]: input_userauth_request: invalid user test01 [preauth]
Oct  1 09:30:13 nativespace-cdp sshd[11822]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:30:13 nativespace-cdp sshd[11822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:30:15 nativespace-cdp sshd[11822]: Failed password for invalid user test01 from 140.246.79.129 port 51666 ssh2
Oct  1 09:30:15 nativespace-cdp sshd[11822]: Received disconnect from 140.246.79.129 port 51666:11: Bye Bye [preauth]
Oct  1 09:30:15 nativespace-cdp sshd[11822]: Disconnected from 140.246.79.129 port 51666 [preauth]
Oct  1 09:30:33 nativespace-cdp sshd[11872]: Connection closed by 52.140.219.21 port 52936 [preauth]
Oct  1 09:30:36 nativespace-cdp sshd[11884]: Invalid user ubuntu from 47.106.171.75 port 47404
Oct  1 09:30:36 nativespace-cdp sshd[11884]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:30:36 nativespace-cdp sshd[11884]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:30:36 nativespace-cdp sshd[11884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:30:38 nativespace-cdp sshd[11884]: Failed password for invalid user ubuntu from 47.106.171.75 port 47404 ssh2
Oct  1 09:30:38 nativespace-cdp sshd[11884]: Received disconnect from 47.106.171.75 port 47404:11: Bye Bye [preauth]
Oct  1 09:30:38 nativespace-cdp sshd[11884]: Disconnected from 47.106.171.75 port 47404 [preauth]
Oct  1 09:31:04 nativespace-cdp sshd[12026]: Invalid user admin from 47.103.88.18 port 53370
Oct  1 09:31:04 nativespace-cdp sshd[12026]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:31:04 nativespace-cdp sshd[12026]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:31:04 nativespace-cdp sshd[12026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:31:06 nativespace-cdp sshd[12033]: Invalid user test from 47.106.171.75 port 50742
Oct  1 09:31:06 nativespace-cdp sshd[12033]: input_userauth_request: invalid user test [preauth]
Oct  1 09:31:06 nativespace-cdp sshd[12033]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:31:06 nativespace-cdp sshd[12033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:31:07 nativespace-cdp sshd[12026]: Failed password for invalid user admin from 47.103.88.18 port 53370 ssh2
Oct  1 09:31:07 nativespace-cdp sshd[12026]: Received disconnect from 47.103.88.18 port 53370:11: Bye Bye [preauth]
Oct  1 09:31:07 nativespace-cdp sshd[12026]: Disconnected from 47.103.88.18 port 53370 [preauth]
Oct  1 09:31:08 nativespace-cdp sshd[12033]: Failed password for invalid user test from 47.106.171.75 port 50742 ssh2
Oct  1 09:31:09 nativespace-cdp sshd[12033]: Received disconnect from 47.106.171.75 port 50742:11: Bye Bye [preauth]
Oct  1 09:31:09 nativespace-cdp sshd[12033]: Disconnected from 47.106.171.75 port 50742 [preauth]
Oct  1 09:31:33 nativespace-cdp sshd[12136]: Connection closed by 159.100.136.21 port 45720 [preauth]
Oct  1 09:31:40 nativespace-cdp sshd[12138]: Invalid user admin from 47.106.171.75 port 54084
Oct  1 09:31:40 nativespace-cdp sshd[12138]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:31:40 nativespace-cdp sshd[12138]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:31:40 nativespace-cdp sshd[12138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:31:43 nativespace-cdp sshd[12138]: Failed password for invalid user admin from 47.106.171.75 port 54084 ssh2
Oct  1 09:31:43 nativespace-cdp sshd[12138]: Received disconnect from 47.106.171.75 port 54084:11: Bye Bye [preauth]
Oct  1 09:31:43 nativespace-cdp sshd[12138]: Disconnected from 47.106.171.75 port 54084 [preauth]
Oct  1 09:32:01 nativespace-cdp sshd[12323]: Invalid user chris from 47.103.88.18 port 38516
Oct  1 09:32:01 nativespace-cdp sshd[12323]: input_userauth_request: invalid user chris [preauth]
Oct  1 09:32:01 nativespace-cdp sshd[12323]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:32:01 nativespace-cdp sshd[12323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:32:02 nativespace-cdp sshd[12370]: Invalid user admin from 47.106.171.75 port 57424
Oct  1 09:32:02 nativespace-cdp sshd[12370]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:32:02 nativespace-cdp sshd[12370]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:32:02 nativespace-cdp sshd[12370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:32:04 nativespace-cdp sshd[12323]: Failed password for invalid user chris from 47.103.88.18 port 38516 ssh2
Oct  1 09:32:04 nativespace-cdp sshd[12323]: Received disconnect from 47.103.88.18 port 38516:11: Bye Bye [preauth]
Oct  1 09:32:04 nativespace-cdp sshd[12323]: Disconnected from 47.103.88.18 port 38516 [preauth]
Oct  1 09:32:05 nativespace-cdp sshd[12370]: Failed password for invalid user admin from 47.106.171.75 port 57424 ssh2
Oct  1 09:32:06 nativespace-cdp sshd[12370]: Received disconnect from 47.106.171.75 port 57424:11: Bye Bye [preauth]
Oct  1 09:32:06 nativespace-cdp sshd[12370]: Disconnected from 47.106.171.75 port 57424 [preauth]
Oct  1 09:32:31 nativespace-cdp sshd[12541]: Invalid user chris from 47.106.171.75 port 60760
Oct  1 09:32:31 nativespace-cdp sshd[12541]: input_userauth_request: invalid user chris [preauth]
Oct  1 09:32:31 nativespace-cdp sshd[12541]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:32:31 nativespace-cdp sshd[12541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:32:33 nativespace-cdp sshd[12541]: Failed password for invalid user chris from 47.106.171.75 port 60760 ssh2
Oct  1 09:32:35 nativespace-cdp sshd[12541]: Received disconnect from 47.106.171.75 port 60760:11: Bye Bye [preauth]
Oct  1 09:32:35 nativespace-cdp sshd[12541]: Disconnected from 47.106.171.75 port 60760 [preauth]
Oct  1 09:33:06 nativespace-cdp sshd[12628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:33:06 nativespace-cdp sshd[12628]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:33:08 nativespace-cdp sshd[12628]: Failed password for root from 47.106.171.75 port 35866 ssh2
Oct  1 09:33:08 nativespace-cdp sshd[12628]: Received disconnect from 47.106.171.75 port 35866:11: Bye Bye [preauth]
Oct  1 09:33:08 nativespace-cdp sshd[12628]: Disconnected from 47.106.171.75 port 35866 [preauth]
Oct  1 09:33:28 nativespace-cdp sshd[12750]: Invalid user basesystem from 47.106.171.75 port 39206
Oct  1 09:33:28 nativespace-cdp sshd[12750]: input_userauth_request: invalid user basesystem [preauth]
Oct  1 09:33:28 nativespace-cdp sshd[12750]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:33:28 nativespace-cdp sshd[12750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:33:30 nativespace-cdp sshd[12750]: Failed password for invalid user basesystem from 47.106.171.75 port 39206 ssh2
Oct  1 09:33:30 nativespace-cdp sshd[12750]: Received disconnect from 47.106.171.75 port 39206:11: Bye Bye [preauth]
Oct  1 09:33:30 nativespace-cdp sshd[12750]: Disconnected from 47.106.171.75 port 39206 [preauth]
Oct  1 09:33:55 nativespace-cdp sshd[12836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75  user=root
Oct  1 09:33:55 nativespace-cdp sshd[12836]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:33:57 nativespace-cdp sshd[12836]: Failed password for root from 47.106.171.75 port 42546 ssh2
Oct  1 09:33:57 nativespace-cdp sshd[12836]: Received disconnect from 47.106.171.75 port 42546:11: Bye Bye [preauth]
Oct  1 09:33:57 nativespace-cdp sshd[12836]: Disconnected from 47.106.171.75 port 42546 [preauth]
Oct  1 09:34:21 nativespace-cdp sshd[12972]: Invalid user adminftp from 47.106.171.75 port 45884
Oct  1 09:34:21 nativespace-cdp sshd[12972]: input_userauth_request: invalid user adminftp [preauth]
Oct  1 09:34:21 nativespace-cdp sshd[12972]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:34:21 nativespace-cdp sshd[12972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:34:23 nativespace-cdp sshd[12972]: Failed password for invalid user adminftp from 47.106.171.75 port 45884 ssh2
Oct  1 09:34:24 nativespace-cdp sshd[12972]: Received disconnect from 47.106.171.75 port 45884:11: Bye Bye [preauth]
Oct  1 09:34:24 nativespace-cdp sshd[12972]: Disconnected from 47.106.171.75 port 45884 [preauth]
Oct  1 09:34:39 nativespace-cdp sshd[13016]: Invalid user server from 46.101.108.159 port 58880
Oct  1 09:34:39 nativespace-cdp sshd[13016]: input_userauth_request: invalid user server [preauth]
Oct  1 09:34:39 nativespace-cdp sshd[13016]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:34:39 nativespace-cdp sshd[13016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:34:40 nativespace-cdp sshd[13016]: Failed password for invalid user server from 46.101.108.159 port 58880 ssh2
Oct  1 09:34:44 nativespace-cdp sshd[13016]: Received disconnect from 46.101.108.159 port 58880:11: Bye Bye [preauth]
Oct  1 09:34:44 nativespace-cdp sshd[13016]: Disconnected from 46.101.108.159 port 58880 [preauth]
Oct  1 09:34:48 nativespace-cdp sshd[13060]: Invalid user debian from 47.106.171.75 port 49222
Oct  1 09:34:48 nativespace-cdp sshd[13060]: input_userauth_request: invalid user debian [preauth]
Oct  1 09:34:48 nativespace-cdp sshd[13060]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:34:48 nativespace-cdp sshd[13060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:34:49 nativespace-cdp sshd[13060]: Failed password for invalid user debian from 47.106.171.75 port 49222 ssh2
Oct  1 09:34:50 nativespace-cdp sshd[13060]: Received disconnect from 47.106.171.75 port 49222:11: Bye Bye [preauth]
Oct  1 09:34:50 nativespace-cdp sshd[13060]: Disconnected from 47.106.171.75 port 49222 [preauth]
Oct  1 09:35:08 nativespace-cdp sshd[13475]: Invalid user testuser from 109.230.196.26 port 45488
Oct  1 09:35:08 nativespace-cdp sshd[13475]: input_userauth_request: invalid user testuser [preauth]
Oct  1 09:35:08 nativespace-cdp sshd[13475]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:35:08 nativespace-cdp sshd[13475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:35:10 nativespace-cdp sshd[13475]: Failed password for invalid user testuser from 109.230.196.26 port 45488 ssh2
Oct  1 09:35:10 nativespace-cdp sshd[13475]: Received disconnect from 109.230.196.26 port 45488:11: Bye Bye [preauth]
Oct  1 09:35:10 nativespace-cdp sshd[13475]: Disconnected from 109.230.196.26 port 45488 [preauth]
Oct  1 09:35:19 nativespace-cdp sshd[13546]: Invalid user daniel from 47.106.171.75 port 52564
Oct  1 09:35:19 nativespace-cdp sshd[13546]: input_userauth_request: invalid user daniel [preauth]
Oct  1 09:35:19 nativespace-cdp sshd[13546]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:35:19 nativespace-cdp sshd[13546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:35:19 nativespace-cdp sshd[13552]: Invalid user ubuntu from 46.101.108.159 port 51972
Oct  1 09:35:19 nativespace-cdp sshd[13552]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:35:19 nativespace-cdp sshd[13552]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:35:19 nativespace-cdp sshd[13552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:35:21 nativespace-cdp sshd[13546]: Failed password for invalid user daniel from 47.106.171.75 port 52564 ssh2
Oct  1 09:35:21 nativespace-cdp sshd[13552]: Failed password for invalid user ubuntu from 46.101.108.159 port 51972 ssh2
Oct  1 09:35:21 nativespace-cdp sshd[13552]: Received disconnect from 46.101.108.159 port 51972:11: Bye Bye [preauth]
Oct  1 09:35:21 nativespace-cdp sshd[13552]: Disconnected from 46.101.108.159 port 51972 [preauth]
Oct  1 09:35:21 nativespace-cdp sshd[13546]: Received disconnect from 47.106.171.75 port 52564:11: Bye Bye [preauth]
Oct  1 09:35:21 nativespace-cdp sshd[13546]: Disconnected from 47.106.171.75 port 52564 [preauth]
Oct  1 09:35:35 nativespace-cdp sshd[13626]: Connection closed by 140.246.79.129 port 37584 [preauth]
Oct  1 09:35:44 nativespace-cdp sshd[13690]: Invalid user cacti from 47.106.171.75 port 55904
Oct  1 09:35:44 nativespace-cdp sshd[13690]: input_userauth_request: invalid user cacti [preauth]
Oct  1 09:35:44 nativespace-cdp sshd[13690]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:35:44 nativespace-cdp sshd[13690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.171.75
Oct  1 09:35:46 nativespace-cdp sshd[13690]: Failed password for invalid user cacti from 47.106.171.75 port 55904 ssh2
Oct  1 09:35:51 nativespace-cdp sshd[13690]: Received disconnect from 47.106.171.75 port 55904:11: Bye Bye [preauth]
Oct  1 09:35:51 nativespace-cdp sshd[13690]: Disconnected from 47.106.171.75 port 55904 [preauth]
Oct  1 09:35:52 nativespace-cdp sshd[13774]: Invalid user test_user from 109.230.196.26 port 58392
Oct  1 09:35:52 nativespace-cdp sshd[13774]: input_userauth_request: invalid user test_user [preauth]
Oct  1 09:35:52 nativespace-cdp sshd[13774]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:35:52 nativespace-cdp sshd[13774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:35:54 nativespace-cdp sshd[13774]: Failed password for invalid user test_user from 109.230.196.26 port 58392 ssh2
Oct  1 09:35:54 nativespace-cdp sshd[13774]: Received disconnect from 109.230.196.26 port 58392:11: Bye Bye [preauth]
Oct  1 09:35:54 nativespace-cdp sshd[13774]: Disconnected from 109.230.196.26 port 58392 [preauth]
Oct  1 09:35:54 nativespace-cdp sshd[13806]: Invalid user ftpuser from 46.101.108.159 port 44274
Oct  1 09:35:54 nativespace-cdp sshd[13806]: input_userauth_request: invalid user ftpuser [preauth]
Oct  1 09:35:54 nativespace-cdp sshd[13806]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:35:54 nativespace-cdp sshd[13806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:35:56 nativespace-cdp sshd[13806]: Failed password for invalid user ftpuser from 46.101.108.159 port 44274 ssh2
Oct  1 09:35:56 nativespace-cdp sshd[13806]: Received disconnect from 46.101.108.159 port 44274:11: Bye Bye [preauth]
Oct  1 09:35:56 nativespace-cdp sshd[13806]: Disconnected from 46.101.108.159 port 44274 [preauth]
Oct  1 09:36:30 nativespace-cdp sshd[13899]: Invalid user superman from 46.101.108.159 port 40306
Oct  1 09:36:30 nativespace-cdp sshd[13899]: input_userauth_request: invalid user superman [preauth]
Oct  1 09:36:30 nativespace-cdp sshd[13899]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:36:30 nativespace-cdp sshd[13899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:36:32 nativespace-cdp sshd[13899]: Failed password for invalid user superman from 46.101.108.159 port 40306 ssh2
Oct  1 09:36:32 nativespace-cdp sshd[13899]: Received disconnect from 46.101.108.159 port 40306:11: Bye Bye [preauth]
Oct  1 09:36:32 nativespace-cdp sshd[13899]: Disconnected from 46.101.108.159 port 40306 [preauth]
Oct  1 09:36:33 nativespace-cdp sshd[13969]: Connection closed by 159.100.136.21 port 55150 [preauth]
Oct  1 09:36:38 nativespace-cdp sshd[13993]: Invalid user test from 109.230.196.26 port 43070
Oct  1 09:36:38 nativespace-cdp sshd[13993]: input_userauth_request: invalid user test [preauth]
Oct  1 09:36:38 nativespace-cdp sshd[13993]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:36:38 nativespace-cdp sshd[13993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:36:40 nativespace-cdp sshd[13993]: Failed password for invalid user test from 109.230.196.26 port 43070 ssh2
Oct  1 09:36:40 nativespace-cdp sshd[13993]: Received disconnect from 109.230.196.26 port 43070:11: Bye Bye [preauth]
Oct  1 09:36:40 nativespace-cdp sshd[13993]: Disconnected from 109.230.196.26 port 43070 [preauth]
Oct  1 09:36:44 nativespace-cdp sshd[14001]: Connection closed by 140.246.79.129 port 52436 [preauth]
Oct  1 09:37:07 nativespace-cdp sshd[14190]: Invalid user deploy from 46.101.108.159 port 59546
Oct  1 09:37:07 nativespace-cdp sshd[14190]: input_userauth_request: invalid user deploy [preauth]
Oct  1 09:37:07 nativespace-cdp sshd[14190]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:37:07 nativespace-cdp sshd[14190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:37:09 nativespace-cdp sshd[14190]: Failed password for invalid user deploy from 46.101.108.159 port 59546 ssh2
Oct  1 09:37:09 nativespace-cdp sshd[14190]: Received disconnect from 46.101.108.159 port 59546:11: Bye Bye [preauth]
Oct  1 09:37:09 nativespace-cdp sshd[14190]: Disconnected from 46.101.108.159 port 59546 [preauth]
Oct  1 09:37:25 nativespace-cdp sshd[14239]: Invalid user user1 from 109.230.196.26 port 55976
Oct  1 09:37:25 nativespace-cdp sshd[14239]: input_userauth_request: invalid user user1 [preauth]
Oct  1 09:37:25 nativespace-cdp sshd[14239]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:37:25 nativespace-cdp sshd[14239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:37:27 nativespace-cdp sshd[14239]: Failed password for invalid user user1 from 109.230.196.26 port 55976 ssh2
Oct  1 09:37:27 nativespace-cdp sshd[14239]: Received disconnect from 109.230.196.26 port 55976:11: Bye Bye [preauth]
Oct  1 09:37:27 nativespace-cdp sshd[14239]: Disconnected from 109.230.196.26 port 55976 [preauth]
Oct  1 09:37:41 nativespace-cdp sshd[14299]: Invalid user username from 46.101.108.159 port 46736
Oct  1 09:37:41 nativespace-cdp sshd[14299]: input_userauth_request: invalid user username [preauth]
Oct  1 09:37:41 nativespace-cdp sshd[14299]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:37:41 nativespace-cdp sshd[14299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:37:44 nativespace-cdp sshd[14299]: Failed password for invalid user username from 46.101.108.159 port 46736 ssh2
Oct  1 09:37:44 nativespace-cdp sshd[14299]: Received disconnect from 46.101.108.159 port 46736:11: Bye Bye [preauth]
Oct  1 09:37:44 nativespace-cdp sshd[14299]: Disconnected from 46.101.108.159 port 46736 [preauth]
Oct  1 09:38:13 nativespace-cdp sshd[14395]: Invalid user sysadmin from 109.230.196.26 port 40654
Oct  1 09:38:13 nativespace-cdp sshd[14395]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 09:38:13 nativespace-cdp sshd[14395]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:38:13 nativespace-cdp sshd[14395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:38:15 nativespace-cdp sshd[14395]: Failed password for invalid user sysadmin from 109.230.196.26 port 40654 ssh2
Oct  1 09:38:15 nativespace-cdp sshd[14395]: Received disconnect from 109.230.196.26 port 40654:11: Bye Bye [preauth]
Oct  1 09:38:15 nativespace-cdp sshd[14395]: Disconnected from 109.230.196.26 port 40654 [preauth]
Oct  1 09:38:17 nativespace-cdp sshd[14419]: Invalid user test from 46.101.108.159 port 46002
Oct  1 09:38:17 nativespace-cdp sshd[14419]: input_userauth_request: invalid user test [preauth]
Oct  1 09:38:17 nativespace-cdp sshd[14419]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:38:17 nativespace-cdp sshd[14419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:38:20 nativespace-cdp sshd[14419]: Failed password for invalid user test from 46.101.108.159 port 46002 ssh2
Oct  1 09:38:20 nativespace-cdp sshd[14419]: Received disconnect from 46.101.108.159 port 46002:11: Bye Bye [preauth]
Oct  1 09:38:20 nativespace-cdp sshd[14419]: Disconnected from 46.101.108.159 port 46002 [preauth]
Oct  1 09:38:42 nativespace-cdp sshd[14479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18  user=root
Oct  1 09:38:42 nativespace-cdp sshd[14479]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:38:44 nativespace-cdp sshd[14479]: Failed password for root from 47.103.88.18 port 48952 ssh2
Oct  1 09:38:44 nativespace-cdp sshd[14479]: Received disconnect from 47.103.88.18 port 48952:11: Bye Bye [preauth]
Oct  1 09:38:44 nativespace-cdp sshd[14479]: Disconnected from 47.103.88.18 port 48952 [preauth]
Oct  1 09:38:51 nativespace-cdp sshd[14532]: Invalid user user from 46.101.108.159 port 51346
Oct  1 09:38:51 nativespace-cdp sshd[14532]: input_userauth_request: invalid user user [preauth]
Oct  1 09:38:51 nativespace-cdp sshd[14532]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:38:51 nativespace-cdp sshd[14532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:38:53 nativespace-cdp sshd[14532]: Failed password for invalid user user from 46.101.108.159 port 51346 ssh2
Oct  1 09:38:53 nativespace-cdp sshd[14532]: Received disconnect from 46.101.108.159 port 51346:11: Bye Bye [preauth]
Oct  1 09:38:53 nativespace-cdp sshd[14532]: Disconnected from 46.101.108.159 port 51346 [preauth]
Oct  1 09:38:54 nativespace-cdp sshd[14539]: Invalid user test from 140.246.79.129 port 49442
Oct  1 09:38:54 nativespace-cdp sshd[14539]: input_userauth_request: invalid user test [preauth]
Oct  1 09:38:54 nativespace-cdp sshd[14539]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:38:54 nativespace-cdp sshd[14539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:38:55 nativespace-cdp sshd[14539]: Failed password for invalid user test from 140.246.79.129 port 49442 ssh2
Oct  1 09:39:00 nativespace-cdp sshd[14546]: Invalid user ubuntu from 109.230.196.26 port 53556
Oct  1 09:39:00 nativespace-cdp sshd[14546]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:39:00 nativespace-cdp sshd[14546]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:39:00 nativespace-cdp sshd[14546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:39:00 nativespace-cdp sshd[14539]: Received disconnect from 140.246.79.129 port 49442:11: Bye Bye [preauth]
Oct  1 09:39:00 nativespace-cdp sshd[14539]: Disconnected from 140.246.79.129 port 49442 [preauth]
Oct  1 09:39:02 nativespace-cdp sshd[14546]: Failed password for invalid user ubuntu from 109.230.196.26 port 53556 ssh2
Oct  1 09:39:02 nativespace-cdp sshd[14546]: Received disconnect from 109.230.196.26 port 53556:11: Bye Bye [preauth]
Oct  1 09:39:02 nativespace-cdp sshd[14546]: Disconnected from 109.230.196.26 port 53556 [preauth]
Oct  1 09:39:27 nativespace-cdp sshd[14630]: Invalid user test_user from 46.101.108.159 port 44262
Oct  1 09:39:27 nativespace-cdp sshd[14630]: input_userauth_request: invalid user test_user [preauth]
Oct  1 09:39:27 nativespace-cdp sshd[14630]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:39:27 nativespace-cdp sshd[14630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:39:29 nativespace-cdp sshd[14630]: Failed password for invalid user test_user from 46.101.108.159 port 44262 ssh2
Oct  1 09:39:29 nativespace-cdp sshd[14630]: Received disconnect from 46.101.108.159 port 44262:11: Bye Bye [preauth]
Oct  1 09:39:29 nativespace-cdp sshd[14630]: Disconnected from 46.101.108.159 port 44262 [preauth]
Oct  1 09:39:30 nativespace-cdp sshd[14637]: Invalid user hotline from 47.103.88.18 port 34104
Oct  1 09:39:30 nativespace-cdp sshd[14637]: input_userauth_request: invalid user hotline [preauth]
Oct  1 09:39:30 nativespace-cdp sshd[14637]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:39:30 nativespace-cdp sshd[14637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:39:32 nativespace-cdp sshd[14637]: Failed password for invalid user hotline from 47.103.88.18 port 34104 ssh2
Oct  1 09:39:35 nativespace-cdp sshd[14637]: Received disconnect from 47.103.88.18 port 34104:11: Bye Bye [preauth]
Oct  1 09:39:35 nativespace-cdp sshd[14637]: Disconnected from 47.103.88.18 port 34104 [preauth]
Oct  1 09:39:48 nativespace-cdp sshd[14692]: Invalid user sopuser from 109.230.196.26 port 38228
Oct  1 09:39:48 nativespace-cdp sshd[14692]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 09:39:48 nativespace-cdp sshd[14692]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:39:48 nativespace-cdp sshd[14692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:39:49 nativespace-cdp sshd[14692]: Failed password for invalid user sopuser from 109.230.196.26 port 38228 ssh2
Oct  1 09:39:50 nativespace-cdp sshd[14692]: Received disconnect from 109.230.196.26 port 38228:11: Bye Bye [preauth]
Oct  1 09:39:50 nativespace-cdp sshd[14692]: Disconnected from 109.230.196.26 port 38228 [preauth]
Oct  1 09:39:57 nativespace-cdp sshd[14767]: Invalid user sysadmin from 140.246.79.129 port 47326
Oct  1 09:39:57 nativespace-cdp sshd[14767]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 09:39:57 nativespace-cdp sshd[14767]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:39:57 nativespace-cdp sshd[14767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:39:59 nativespace-cdp sshd[14767]: Failed password for invalid user sysadmin from 140.246.79.129 port 47326 ssh2
Oct  1 09:39:59 nativespace-cdp sshd[14767]: Received disconnect from 140.246.79.129 port 47326:11: Bye Bye [preauth]
Oct  1 09:39:59 nativespace-cdp sshd[14767]: Disconnected from 140.246.79.129 port 47326 [preauth]
Oct  1 09:39:59 nativespace-cdp sshd[14780]: Invalid user svn from 46.101.108.159 port 47146
Oct  1 09:39:59 nativespace-cdp sshd[14780]: input_userauth_request: invalid user svn [preauth]
Oct  1 09:39:59 nativespace-cdp sshd[14780]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:39:59 nativespace-cdp sshd[14780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:40:01 nativespace-cdp sshd[14780]: Failed password for invalid user svn from 46.101.108.159 port 47146 ssh2
Oct  1 09:40:01 nativespace-cdp sshd[14780]: Received disconnect from 46.101.108.159 port 47146:11: Bye Bye [preauth]
Oct  1 09:40:01 nativespace-cdp sshd[14780]: Disconnected from 46.101.108.159 port 47146 [preauth]
Oct  1 09:40:27 nativespace-cdp sshd[15012]: Invalid user anand from 47.103.88.18 port 47482
Oct  1 09:40:27 nativespace-cdp sshd[15012]: input_userauth_request: invalid user anand [preauth]
Oct  1 09:40:27 nativespace-cdp sshd[15012]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:40:27 nativespace-cdp sshd[15012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:40:30 nativespace-cdp sshd[15012]: Failed password for invalid user anand from 47.103.88.18 port 47482 ssh2
Oct  1 09:40:30 nativespace-cdp sshd[15012]: Received disconnect from 47.103.88.18 port 47482:11: Bye Bye [preauth]
Oct  1 09:40:30 nativespace-cdp sshd[15012]: Disconnected from 47.103.88.18 port 47482 [preauth]
Oct  1 09:40:30 nativespace-cdp sshd[15023]: Invalid user test from 109.230.196.26 port 51132
Oct  1 09:40:30 nativespace-cdp sshd[15023]: input_userauth_request: invalid user test [preauth]
Oct  1 09:40:30 nativespace-cdp sshd[15023]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:40:30 nativespace-cdp sshd[15023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:40:32 nativespace-cdp sshd[15023]: Failed password for invalid user test from 109.230.196.26 port 51132 ssh2
Oct  1 09:40:41 nativespace-cdp sshd[15023]: Received disconnect from 109.230.196.26 port 51132:11: Bye Bye [preauth]
Oct  1 09:40:41 nativespace-cdp sshd[15023]: Disconnected from 109.230.196.26 port 51132 [preauth]
Oct  1 09:41:03 nativespace-cdp sshd[15185]: Connection closed by 140.246.79.129 port 44868 [preauth]
Oct  1 09:41:08 nativespace-cdp sshd[15214]: Invalid user ubuntu from 46.101.108.159 port 53976
Oct  1 09:41:08 nativespace-cdp sshd[15214]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:41:08 nativespace-cdp sshd[15214]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:41:08 nativespace-cdp sshd[15214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:41:10 nativespace-cdp sshd[15214]: Failed password for invalid user ubuntu from 46.101.108.159 port 53976 ssh2
Oct  1 09:41:10 nativespace-cdp sshd[15214]: Received disconnect from 46.101.108.159 port 53976:11: Bye Bye [preauth]
Oct  1 09:41:10 nativespace-cdp sshd[15214]: Disconnected from 46.101.108.159 port 53976 [preauth]
Oct  1 09:41:20 nativespace-cdp sshd[15237]: Invalid user adminftp from 47.103.88.18 port 60860
Oct  1 09:41:20 nativespace-cdp sshd[15237]: input_userauth_request: invalid user adminftp [preauth]
Oct  1 09:41:20 nativespace-cdp sshd[15237]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:41:20 nativespace-cdp sshd[15237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:41:22 nativespace-cdp sshd[15237]: Failed password for invalid user adminftp from 47.103.88.18 port 60860 ssh2
Oct  1 09:41:22 nativespace-cdp sshd[15237]: Received disconnect from 47.103.88.18 port 60860:11: Bye Bye [preauth]
Oct  1 09:41:22 nativespace-cdp sshd[15237]: Disconnected from 47.103.88.18 port 60860 [preauth]
Oct  1 09:41:33 nativespace-cdp sshd[15282]: Connection closed by 159.100.136.21 port 36446 [preauth]
Oct  1 09:41:42 nativespace-cdp sshd[15300]: Invalid user test from 46.101.108.159 port 51922
Oct  1 09:41:42 nativespace-cdp sshd[15300]: input_userauth_request: invalid user test [preauth]
Oct  1 09:41:42 nativespace-cdp sshd[15300]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:41:42 nativespace-cdp sshd[15300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:41:44 nativespace-cdp sshd[15300]: Failed password for invalid user test from 46.101.108.159 port 51922 ssh2
Oct  1 09:41:46 nativespace-cdp sshd[15300]: Received disconnect from 46.101.108.159 port 51922:11: Bye Bye [preauth]
Oct  1 09:41:46 nativespace-cdp sshd[15300]: Disconnected from 46.101.108.159 port 51922 [preauth]
Oct  1 09:42:05 nativespace-cdp sshd[15448]: Invalid user tuan from 140.246.79.129 port 54240
Oct  1 09:42:05 nativespace-cdp sshd[15448]: input_userauth_request: invalid user tuan [preauth]
Oct  1 09:42:05 nativespace-cdp sshd[15448]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:42:05 nativespace-cdp sshd[15448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:42:07 nativespace-cdp sshd[15448]: Failed password for invalid user tuan from 140.246.79.129 port 54240 ssh2
Oct  1 09:42:12 nativespace-cdp sshd[15459]: Invalid user superman from 109.230.196.26 port 48716
Oct  1 09:42:12 nativespace-cdp sshd[15459]: input_userauth_request: invalid user superman [preauth]
Oct  1 09:42:12 nativespace-cdp sshd[15459]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:42:12 nativespace-cdp sshd[15459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:42:12 nativespace-cdp sshd[15448]: Received disconnect from 140.246.79.129 port 54240:11: Bye Bye [preauth]
Oct  1 09:42:12 nativespace-cdp sshd[15448]: Disconnected from 140.246.79.129 port 54240 [preauth]
Oct  1 09:42:13 nativespace-cdp sshd[15459]: Failed password for invalid user superman from 109.230.196.26 port 48716 ssh2
Oct  1 09:42:13 nativespace-cdp sshd[15459]: Received disconnect from 109.230.196.26 port 48716:11: Bye Bye [preauth]
Oct  1 09:42:13 nativespace-cdp sshd[15459]: Disconnected from 109.230.196.26 port 48716 [preauth]
Oct  1 09:42:17 nativespace-cdp sshd[15487]: Invalid user ubuntu from 46.101.108.159 port 47116
Oct  1 09:42:17 nativespace-cdp sshd[15487]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:42:17 nativespace-cdp sshd[15487]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:42:17 nativespace-cdp sshd[15487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:42:18 nativespace-cdp sshd[15482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18  user=root
Oct  1 09:42:18 nativespace-cdp sshd[15482]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:42:19 nativespace-cdp sshd[15482]: Failed password for root from 47.103.88.18 port 46010 ssh2
Oct  1 09:42:19 nativespace-cdp sshd[15487]: Failed password for invalid user ubuntu from 46.101.108.159 port 47116 ssh2
Oct  1 09:42:19 nativespace-cdp sshd[15487]: Received disconnect from 46.101.108.159 port 47116:11: Bye Bye [preauth]
Oct  1 09:42:19 nativespace-cdp sshd[15487]: Disconnected from 46.101.108.159 port 47116 [preauth]
Oct  1 09:42:20 nativespace-cdp sshd[15482]: Received disconnect from 47.103.88.18 port 46010:11: Bye Bye [preauth]
Oct  1 09:42:20 nativespace-cdp sshd[15482]: Disconnected from 47.103.88.18 port 46010 [preauth]
Oct  1 09:42:36 nativespace-cdp sshd[15524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16  user=root
Oct  1 09:42:36 nativespace-cdp sshd[15524]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:42:38 nativespace-cdp sshd[15524]: Failed password for root from 61.240.156.16 port 57132 ssh2
Oct  1 09:42:41 nativespace-cdp sshd[15524]: Received disconnect from 61.240.156.16 port 57132:11: Bye Bye [preauth]
Oct  1 09:42:41 nativespace-cdp sshd[15524]: Disconnected from 61.240.156.16 port 57132 [preauth]
Oct  1 09:42:53 nativespace-cdp sshd[15572]: Invalid user sysadmin from 46.101.108.159 port 42728
Oct  1 09:42:53 nativespace-cdp sshd[15572]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 09:42:53 nativespace-cdp sshd[15572]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:42:53 nativespace-cdp sshd[15572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:42:56 nativespace-cdp sshd[15572]: Failed password for invalid user sysadmin from 46.101.108.159 port 42728 ssh2
Oct  1 09:42:58 nativespace-cdp sshd[15572]: Received disconnect from 46.101.108.159 port 42728:11: Bye Bye [preauth]
Oct  1 09:42:58 nativespace-cdp sshd[15572]: Disconnected from 46.101.108.159 port 42728 [preauth]
Oct  1 09:42:59 nativespace-cdp sshd[15584]: Invalid user svn from 109.230.196.26 port 33392
Oct  1 09:42:59 nativespace-cdp sshd[15584]: input_userauth_request: invalid user svn [preauth]
Oct  1 09:42:59 nativespace-cdp sshd[15584]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:42:59 nativespace-cdp sshd[15584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:43:02 nativespace-cdp sshd[15584]: Failed password for invalid user svn from 109.230.196.26 port 33392 ssh2
Oct  1 09:43:02 nativespace-cdp sshd[15584]: Received disconnect from 109.230.196.26 port 33392:11: Bye Bye [preauth]
Oct  1 09:43:02 nativespace-cdp sshd[15584]: Disconnected from 109.230.196.26 port 33392 [preauth]
Oct  1 09:43:05 nativespace-cdp sshd[15606]: Invalid user support from 140.246.79.129 port 55494
Oct  1 09:43:05 nativespace-cdp sshd[15606]: input_userauth_request: invalid user support [preauth]
Oct  1 09:43:05 nativespace-cdp sshd[15606]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:43:05 nativespace-cdp sshd[15606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:43:08 nativespace-cdp sshd[15606]: Failed password for invalid user support from 140.246.79.129 port 55494 ssh2
Oct  1 09:43:08 nativespace-cdp sshd[15606]: Received disconnect from 140.246.79.129 port 55494:11: Bye Bye [preauth]
Oct  1 09:43:08 nativespace-cdp sshd[15606]: Disconnected from 140.246.79.129 port 55494 [preauth]
Oct  1 09:43:16 nativespace-cdp sshd[15635]: Invalid user debian from 47.103.88.18 port 59396
Oct  1 09:43:16 nativespace-cdp sshd[15635]: input_userauth_request: invalid user debian [preauth]
Oct  1 09:43:16 nativespace-cdp sshd[15635]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:43:16 nativespace-cdp sshd[15635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:43:18 nativespace-cdp sshd[15635]: Failed password for invalid user debian from 47.103.88.18 port 59396 ssh2
Oct  1 09:43:18 nativespace-cdp sshd[15635]: Received disconnect from 47.103.88.18 port 59396:11: Bye Bye [preauth]
Oct  1 09:43:18 nativespace-cdp sshd[15635]: Disconnected from 47.103.88.18 port 59396 [preauth]
Oct  1 09:43:22 nativespace-cdp sshd[15648]: Invalid user ubuntu from 61.240.156.16 port 39630
Oct  1 09:43:22 nativespace-cdp sshd[15648]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:43:22 nativespace-cdp sshd[15648]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:43:22 nativespace-cdp sshd[15648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:43:24 nativespace-cdp sshd[15648]: Failed password for invalid user ubuntu from 61.240.156.16 port 39630 ssh2
Oct  1 09:43:27 nativespace-cdp sshd[15648]: Received disconnect from 61.240.156.16 port 39630:11: Bye Bye [preauth]
Oct  1 09:43:27 nativespace-cdp sshd[15648]: Disconnected from 61.240.156.16 port 39630 [preauth]
Oct  1 09:43:33 nativespace-cdp sshd[15706]: Invalid user ubuntu from 46.101.108.159 port 49324
Oct  1 09:43:33 nativespace-cdp sshd[15706]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:43:33 nativespace-cdp sshd[15706]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:43:33 nativespace-cdp sshd[15706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:43:35 nativespace-cdp sshd[15706]: Failed password for invalid user ubuntu from 46.101.108.159 port 49324 ssh2
Oct  1 09:43:35 nativespace-cdp sshd[15706]: Received disconnect from 46.101.108.159 port 49324:11: Bye Bye [preauth]
Oct  1 09:43:35 nativespace-cdp sshd[15706]: Disconnected from 46.101.108.159 port 49324 [preauth]
Oct  1 09:43:45 nativespace-cdp sshd[15753]: Invalid user sysadmin from 109.230.196.26 port 46298
Oct  1 09:43:45 nativespace-cdp sshd[15753]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 09:43:45 nativespace-cdp sshd[15753]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:43:45 nativespace-cdp sshd[15753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:43:47 nativespace-cdp sshd[15753]: Failed password for invalid user sysadmin from 109.230.196.26 port 46298 ssh2
Oct  1 09:43:47 nativespace-cdp sshd[15753]: Received disconnect from 109.230.196.26 port 46298:11: Bye Bye [preauth]
Oct  1 09:43:47 nativespace-cdp sshd[15753]: Disconnected from 109.230.196.26 port 46298 [preauth]
Oct  1 09:44:06 nativespace-cdp sshd[15854]: Invalid user sysadmin from 61.240.156.16 port 50354
Oct  1 09:44:06 nativespace-cdp sshd[15854]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 09:44:06 nativespace-cdp sshd[15854]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:44:06 nativespace-cdp sshd[15854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:44:07 nativespace-cdp sshd[15859]: Invalid user sopuser from 140.246.79.129 port 37538
Oct  1 09:44:07 nativespace-cdp sshd[15859]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 09:44:07 nativespace-cdp sshd[15859]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:44:07 nativespace-cdp sshd[15859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:44:08 nativespace-cdp sshd[15854]: Failed password for invalid user sysadmin from 61.240.156.16 port 50354 ssh2
Oct  1 09:44:08 nativespace-cdp sshd[15854]: Received disconnect from 61.240.156.16 port 50354:11: Bye Bye [preauth]
Oct  1 09:44:08 nativespace-cdp sshd[15854]: Disconnected from 61.240.156.16 port 50354 [preauth]
Oct  1 09:44:09 nativespace-cdp sshd[15867]: Invalid user ubuntu from 46.101.108.159 port 36866
Oct  1 09:44:09 nativespace-cdp sshd[15867]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:44:09 nativespace-cdp sshd[15867]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:44:09 nativespace-cdp sshd[15867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:44:09 nativespace-cdp sshd[15859]: Failed password for invalid user sopuser from 140.246.79.129 port 37538 ssh2
Oct  1 09:44:10 nativespace-cdp sshd[15859]: Received disconnect from 140.246.79.129 port 37538:11: Bye Bye [preauth]
Oct  1 09:44:10 nativespace-cdp sshd[15859]: Disconnected from 140.246.79.129 port 37538 [preauth]
Oct  1 09:44:11 nativespace-cdp sshd[15867]: Failed password for invalid user ubuntu from 46.101.108.159 port 36866 ssh2
Oct  1 09:44:11 nativespace-cdp sshd[15867]: Received disconnect from 46.101.108.159 port 36866:11: Bye Bye [preauth]
Oct  1 09:44:11 nativespace-cdp sshd[15867]: Disconnected from 46.101.108.159 port 36866 [preauth]
Oct  1 09:44:16 nativespace-cdp sshd[15886]: Invalid user www-data from 47.103.88.18 port 44544
Oct  1 09:44:16 nativespace-cdp sshd[15886]: input_userauth_request: invalid user www-data [preauth]
Oct  1 09:44:16 nativespace-cdp sshd[15886]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:44:16 nativespace-cdp sshd[15886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:44:18 nativespace-cdp sshd[15886]: Failed password for invalid user www-data from 47.103.88.18 port 44544 ssh2
Oct  1 09:44:18 nativespace-cdp sshd[15886]: Received disconnect from 47.103.88.18 port 44544:11: Bye Bye [preauth]
Oct  1 09:44:18 nativespace-cdp sshd[15886]: Disconnected from 47.103.88.18 port 44544 [preauth]
Oct  1 09:44:32 nativespace-cdp sshd[15929]: Invalid user ubuntu from 109.230.196.26 port 59206
Oct  1 09:44:32 nativespace-cdp sshd[15929]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:44:32 nativespace-cdp sshd[15929]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:44:32 nativespace-cdp sshd[15929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:44:34 nativespace-cdp sshd[15929]: Failed password for invalid user ubuntu from 109.230.196.26 port 59206 ssh2
Oct  1 09:44:34 nativespace-cdp sshd[15929]: Received disconnect from 109.230.196.26 port 59206:11: Bye Bye [preauth]
Oct  1 09:44:34 nativespace-cdp sshd[15929]: Disconnected from 109.230.196.26 port 59206 [preauth]
Oct  1 09:44:44 nativespace-cdp sshd[15961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159  user=root
Oct  1 09:44:44 nativespace-cdp sshd[15961]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:44:46 nativespace-cdp sshd[15961]: Failed password for root from 46.101.108.159 port 40552 ssh2
Oct  1 09:44:52 nativespace-cdp sshd[15968]: Invalid user acer from 61.240.156.16 port 32846
Oct  1 09:44:52 nativespace-cdp sshd[15968]: input_userauth_request: invalid user acer [preauth]
Oct  1 09:44:52 nativespace-cdp sshd[15968]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:44:52 nativespace-cdp sshd[15968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:44:54 nativespace-cdp sshd[15968]: Failed password for invalid user acer from 61.240.156.16 port 32846 ssh2
Oct  1 09:44:54 nativespace-cdp sshd[15961]: Received disconnect from 46.101.108.159 port 40552:11: Bye Bye [preauth]
Oct  1 09:44:54 nativespace-cdp sshd[15961]: Disconnected from 46.101.108.159 port 40552 [preauth]
Oct  1 09:44:55 nativespace-cdp sshd[15968]: Received disconnect from 61.240.156.16 port 32846:11: Bye Bye [preauth]
Oct  1 09:44:55 nativespace-cdp sshd[15968]: Disconnected from 61.240.156.16 port 32846 [preauth]
Oct  1 09:45:06 nativespace-cdp sshd[16135]: Invalid user cacti from 47.103.88.18 port 57926
Oct  1 09:45:06 nativespace-cdp sshd[16135]: input_userauth_request: invalid user cacti [preauth]
Oct  1 09:45:06 nativespace-cdp sshd[16135]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:45:06 nativespace-cdp sshd[16135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:45:08 nativespace-cdp sshd[16135]: Failed password for invalid user cacti from 47.103.88.18 port 57926 ssh2
Oct  1 09:45:11 nativespace-cdp sshd[16135]: Received disconnect from 47.103.88.18 port 57926:11: Bye Bye [preauth]
Oct  1 09:45:11 nativespace-cdp sshd[16135]: Disconnected from 47.103.88.18 port 57926 [preauth]
Oct  1 09:45:13 nativespace-cdp sshd[16143]: Connection closed by 140.246.79.129 port 35914 [preauth]
Oct  1 09:45:23 nativespace-cdp sshd[16230]: Invalid user ghost from 46.101.108.159 port 55646
Oct  1 09:45:23 nativespace-cdp sshd[16230]: input_userauth_request: invalid user ghost [preauth]
Oct  1 09:45:23 nativespace-cdp sshd[16230]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:45:23 nativespace-cdp sshd[16230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:45:23 nativespace-cdp sshd[16220]: Invalid user ubuntu from 109.230.196.26 port 43880
Oct  1 09:45:23 nativespace-cdp sshd[16220]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:45:23 nativespace-cdp sshd[16220]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:45:23 nativespace-cdp sshd[16220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:45:25 nativespace-cdp sshd[16230]: Failed password for invalid user ghost from 46.101.108.159 port 55646 ssh2
Oct  1 09:45:25 nativespace-cdp sshd[16220]: Failed password for invalid user ubuntu from 109.230.196.26 port 43880 ssh2
Oct  1 09:45:26 nativespace-cdp sshd[16220]: Received disconnect from 109.230.196.26 port 43880:11: Bye Bye [preauth]
Oct  1 09:45:26 nativespace-cdp sshd[16220]: Disconnected from 109.230.196.26 port 43880 [preauth]
Oct  1 09:45:26 nativespace-cdp sshd[16230]: Received disconnect from 46.101.108.159 port 55646:11: Bye Bye [preauth]
Oct  1 09:45:26 nativespace-cdp sshd[16230]: Disconnected from 46.101.108.159 port 55646 [preauth]
Oct  1 09:45:27 nativespace-cdp sshd[16251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16  user=root
Oct  1 09:45:27 nativespace-cdp sshd[16251]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:45:28 nativespace-cdp sshd[16251]: Failed password for root from 61.240.156.16 port 43574 ssh2
Oct  1 09:45:29 nativespace-cdp sshd[16251]: Received disconnect from 61.240.156.16 port 43574:11: Bye Bye [preauth]
Oct  1 09:45:29 nativespace-cdp sshd[16251]: Disconnected from 61.240.156.16 port 43574 [preauth]
Oct  1 09:45:59 nativespace-cdp sshd[16385]: Invalid user ubuntu from 46.101.108.159 port 59766
Oct  1 09:45:59 nativespace-cdp sshd[16385]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:45:59 nativespace-cdp sshd[16385]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:45:59 nativespace-cdp sshd[16385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:46:01 nativespace-cdp sshd[16387]: Invalid user nisec from 47.103.88.18 port 43074
Oct  1 09:46:01 nativespace-cdp sshd[16387]: input_userauth_request: invalid user nisec [preauth]
Oct  1 09:46:01 nativespace-cdp sshd[16387]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:46:01 nativespace-cdp sshd[16387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:46:01 nativespace-cdp sshd[16385]: Failed password for invalid user ubuntu from 46.101.108.159 port 59766 ssh2
Oct  1 09:46:02 nativespace-cdp sshd[16385]: Received disconnect from 46.101.108.159 port 59766:11: Bye Bye [preauth]
Oct  1 09:46:02 nativespace-cdp sshd[16385]: Disconnected from 46.101.108.159 port 59766 [preauth]
Oct  1 09:46:03 nativespace-cdp sshd[16412]: Invalid user user from 109.230.196.26 port 56786
Oct  1 09:46:03 nativespace-cdp sshd[16412]: input_userauth_request: invalid user user [preauth]
Oct  1 09:46:03 nativespace-cdp sshd[16387]: Failed password for invalid user nisec from 47.103.88.18 port 43074 ssh2
Oct  1 09:46:03 nativespace-cdp sshd[16412]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:46:03 nativespace-cdp sshd[16412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:46:03 nativespace-cdp sshd[16387]: Received disconnect from 47.103.88.18 port 43074:11: Bye Bye [preauth]
Oct  1 09:46:03 nativespace-cdp sshd[16387]: Disconnected from 47.103.88.18 port 43074 [preauth]
Oct  1 09:46:05 nativespace-cdp sshd[16412]: Failed password for invalid user user from 109.230.196.26 port 56786 ssh2
Oct  1 09:46:11 nativespace-cdp sshd[16417]: Invalid user ubuntu from 61.240.156.16 port 54300
Oct  1 09:46:11 nativespace-cdp sshd[16417]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:46:11 nativespace-cdp sshd[16417]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:46:11 nativespace-cdp sshd[16417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:46:13 nativespace-cdp sshd[16417]: Failed password for invalid user ubuntu from 61.240.156.16 port 54300 ssh2
Oct  1 09:46:13 nativespace-cdp sshd[16417]: Received disconnect from 61.240.156.16 port 54300:11: Bye Bye [preauth]
Oct  1 09:46:13 nativespace-cdp sshd[16417]: Disconnected from 61.240.156.16 port 54300 [preauth]
Oct  1 09:46:13 nativespace-cdp sshd[16428]: Invalid user svn from 140.246.79.129 port 42820
Oct  1 09:46:13 nativespace-cdp sshd[16428]: input_userauth_request: invalid user svn [preauth]
Oct  1 09:46:14 nativespace-cdp sshd[16428]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:46:14 nativespace-cdp sshd[16428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:46:14 nativespace-cdp sshd[16412]: Received disconnect from 109.230.196.26 port 56786:11: Bye Bye [preauth]
Oct  1 09:46:14 nativespace-cdp sshd[16412]: Disconnected from 109.230.196.26 port 56786 [preauth]
Oct  1 09:46:15 nativespace-cdp sshd[16428]: Failed password for invalid user svn from 140.246.79.129 port 42820 ssh2
Oct  1 09:46:16 nativespace-cdp sshd[16428]: Received disconnect from 140.246.79.129 port 42820:11: Bye Bye [preauth]
Oct  1 09:46:16 nativespace-cdp sshd[16428]: Disconnected from 140.246.79.129 port 42820 [preauth]
Oct  1 09:46:36 nativespace-cdp sshd[16499]: Connection closed by 159.100.136.21 port 46060 [preauth]
Oct  1 09:46:36 nativespace-cdp sshd[16501]: Invalid user tuan from 46.101.108.159 port 58692
Oct  1 09:46:36 nativespace-cdp sshd[16501]: input_userauth_request: invalid user tuan [preauth]
Oct  1 09:46:36 nativespace-cdp sshd[16501]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:46:36 nativespace-cdp sshd[16501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:46:38 nativespace-cdp sshd[16501]: Failed password for invalid user tuan from 46.101.108.159 port 58692 ssh2
Oct  1 09:46:38 nativespace-cdp sshd[16501]: Received disconnect from 46.101.108.159 port 58692:11: Bye Bye [preauth]
Oct  1 09:46:38 nativespace-cdp sshd[16501]: Disconnected from 46.101.108.159 port 58692 [preauth]
Oct  1 09:46:44 nativespace-cdp sshd[16537]: Invalid user usuario from 61.240.156.16 port 36790
Oct  1 09:46:44 nativespace-cdp sshd[16537]: input_userauth_request: invalid user usuario [preauth]
Oct  1 09:46:44 nativespace-cdp sshd[16537]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:46:44 nativespace-cdp sshd[16537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:46:46 nativespace-cdp sshd[16537]: Failed password for invalid user usuario from 61.240.156.16 port 36790 ssh2
Oct  1 09:46:46 nativespace-cdp sshd[16537]: Received disconnect from 61.240.156.16 port 36790:11: Bye Bye [preauth]
Oct  1 09:46:46 nativespace-cdp sshd[16537]: Disconnected from 61.240.156.16 port 36790 [preauth]
Oct  1 09:46:46 nativespace-cdp sshd[16550]: Invalid user test from 109.230.196.26 port 41452
Oct  1 09:46:46 nativespace-cdp sshd[16550]: input_userauth_request: invalid user test [preauth]
Oct  1 09:46:46 nativespace-cdp sshd[16550]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:46:46 nativespace-cdp sshd[16550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:46:48 nativespace-cdp sshd[16550]: Failed password for invalid user test from 109.230.196.26 port 41452 ssh2
Oct  1 09:46:48 nativespace-cdp sshd[16550]: Received disconnect from 109.230.196.26 port 41452:11: Bye Bye [preauth]
Oct  1 09:46:48 nativespace-cdp sshd[16550]: Disconnected from 109.230.196.26 port 41452 [preauth]
Oct  1 09:46:59 nativespace-cdp sshd[16583]: Invalid user admin from 47.103.88.18 port 56452
Oct  1 09:46:59 nativespace-cdp sshd[16583]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:46:59 nativespace-cdp sshd[16583]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:46:59 nativespace-cdp sshd[16583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:47:01 nativespace-cdp sshd[16583]: Failed password for invalid user admin from 47.103.88.18 port 56452 ssh2
Oct  1 09:47:02 nativespace-cdp sshd[16583]: Received disconnect from 47.103.88.18 port 56452:11: Bye Bye [preauth]
Oct  1 09:47:02 nativespace-cdp sshd[16583]: Disconnected from 47.103.88.18 port 56452 [preauth]
Oct  1 09:47:08 nativespace-cdp sshd[16771]: Invalid user web from 46.101.108.159 port 40474
Oct  1 09:47:08 nativespace-cdp sshd[16771]: input_userauth_request: invalid user web [preauth]
Oct  1 09:47:08 nativespace-cdp sshd[16771]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:47:08 nativespace-cdp sshd[16771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:47:10 nativespace-cdp sshd[16771]: Failed password for invalid user web from 46.101.108.159 port 40474 ssh2
Oct  1 09:47:10 nativespace-cdp sshd[16771]: Received disconnect from 46.101.108.159 port 40474:11: Bye Bye [preauth]
Oct  1 09:47:10 nativespace-cdp sshd[16771]: Disconnected from 46.101.108.159 port 40474 [preauth]
Oct  1 09:47:22 nativespace-cdp sshd[16779]: Connection closed by 140.246.79.129 port 45324 [preauth]
Oct  1 09:47:27 nativespace-cdp sshd[16800]: Invalid user test from 61.240.156.16 port 47520
Oct  1 09:47:27 nativespace-cdp sshd[16800]: input_userauth_request: invalid user test [preauth]
Oct  1 09:47:27 nativespace-cdp sshd[16800]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:47:27 nativespace-cdp sshd[16800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:47:29 nativespace-cdp sshd[16800]: Failed password for invalid user test from 61.240.156.16 port 47520 ssh2
Oct  1 09:47:30 nativespace-cdp sshd[16800]: Received disconnect from 61.240.156.16 port 47520:11: Bye Bye [preauth]
Oct  1 09:47:30 nativespace-cdp sshd[16800]: Disconnected from 61.240.156.16 port 47520 [preauth]
Oct  1 09:47:34 nativespace-cdp sshd[16839]: Invalid user thomas from 109.230.196.26 port 54356
Oct  1 09:47:34 nativespace-cdp sshd[16839]: input_userauth_request: invalid user thomas [preauth]
Oct  1 09:47:34 nativespace-cdp sshd[16839]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:47:34 nativespace-cdp sshd[16839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:47:36 nativespace-cdp sshd[16839]: Failed password for invalid user thomas from 109.230.196.26 port 54356 ssh2
Oct  1 09:47:36 nativespace-cdp sshd[16839]: Received disconnect from 109.230.196.26 port 54356:11: Bye Bye [preauth]
Oct  1 09:47:36 nativespace-cdp sshd[16839]: Disconnected from 109.230.196.26 port 54356 [preauth]
Oct  1 09:47:42 nativespace-cdp sshd[16860]: Invalid user admin from 47.103.88.18 port 41594
Oct  1 09:47:42 nativespace-cdp sshd[16860]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:47:42 nativespace-cdp sshd[16860]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:47:42 nativespace-cdp sshd[16860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:47:44 nativespace-cdp sshd[16860]: Failed password for invalid user admin from 47.103.88.18 port 41594 ssh2
Oct  1 09:47:47 nativespace-cdp sshd[16860]: Received disconnect from 47.103.88.18 port 41594:11: Bye Bye [preauth]
Oct  1 09:47:47 nativespace-cdp sshd[16860]: Disconnected from 47.103.88.18 port 41594 [preauth]
Oct  1 09:47:48 nativespace-cdp sshd[16883]: Invalid user odoo from 46.101.108.159 port 49918
Oct  1 09:47:48 nativespace-cdp sshd[16883]: input_userauth_request: invalid user odoo [preauth]
Oct  1 09:47:48 nativespace-cdp sshd[16883]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:47:48 nativespace-cdp sshd[16883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:47:50 nativespace-cdp sshd[16883]: Failed password for invalid user odoo from 46.101.108.159 port 49918 ssh2
Oct  1 09:47:50 nativespace-cdp sshd[16883]: Received disconnect from 46.101.108.159 port 49918:11: Bye Bye [preauth]
Oct  1 09:47:50 nativespace-cdp sshd[16883]: Disconnected from 46.101.108.159 port 49918 [preauth]
Oct  1 09:48:08 nativespace-cdp sshd[16923]: Invalid user thomas from 61.240.156.16 port 58246
Oct  1 09:48:08 nativespace-cdp sshd[16923]: input_userauth_request: invalid user thomas [preauth]
Oct  1 09:48:08 nativespace-cdp sshd[16923]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:48:08 nativespace-cdp sshd[16923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:48:10 nativespace-cdp sshd[16923]: Failed password for invalid user thomas from 61.240.156.16 port 58246 ssh2
Oct  1 09:48:10 nativespace-cdp sshd[16923]: Received disconnect from 61.240.156.16 port 58246:11: Bye Bye [preauth]
Oct  1 09:48:10 nativespace-cdp sshd[16923]: Disconnected from 61.240.156.16 port 58246 [preauth]
Oct  1 09:48:20 nativespace-cdp sshd[16952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26  user=root
Oct  1 09:48:20 nativespace-cdp sshd[16952]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:48:21 nativespace-cdp sshd[16946]: Invalid user user from 140.246.79.129 port 50102
Oct  1 09:48:21 nativespace-cdp sshd[16946]: input_userauth_request: invalid user user [preauth]
Oct  1 09:48:21 nativespace-cdp sshd[16946]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:48:21 nativespace-cdp sshd[16946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:48:22 nativespace-cdp sshd[16952]: Failed password for root from 109.230.196.26 port 39030 ssh2
Oct  1 09:48:22 nativespace-cdp sshd[16952]: Received disconnect from 109.230.196.26 port 39030:11: Bye Bye [preauth]
Oct  1 09:48:22 nativespace-cdp sshd[16952]: Disconnected from 109.230.196.26 port 39030 [preauth]
Oct  1 09:48:24 nativespace-cdp sshd[16946]: Failed password for invalid user user from 140.246.79.129 port 50102 ssh2
Oct  1 09:48:24 nativespace-cdp sshd[16946]: Received disconnect from 140.246.79.129 port 50102:11: Bye Bye [preauth]
Oct  1 09:48:24 nativespace-cdp sshd[16946]: Disconnected from 140.246.79.129 port 50102 [preauth]
Oct  1 09:48:27 nativespace-cdp sshd[16965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159  user=root
Oct  1 09:48:27 nativespace-cdp sshd[16965]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:48:30 nativespace-cdp sshd[16965]: Failed password for root from 46.101.108.159 port 40726 ssh2
Oct  1 09:48:30 nativespace-cdp sshd[16965]: Received disconnect from 46.101.108.159 port 40726:11: Bye Bye [preauth]
Oct  1 09:48:30 nativespace-cdp sshd[16965]: Disconnected from 46.101.108.159 port 40726 [preauth]
Oct  1 09:48:47 nativespace-cdp sshd[17015]: Invalid user admin from 47.103.88.18 port 54974
Oct  1 09:48:47 nativespace-cdp sshd[17015]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:48:47 nativespace-cdp sshd[17015]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:48:47 nativespace-cdp sshd[17015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:48:49 nativespace-cdp sshd[17015]: Failed password for invalid user admin from 47.103.88.18 port 54974 ssh2
Oct  1 09:48:49 nativespace-cdp sshd[17015]: Received disconnect from 47.103.88.18 port 54974:11: Bye Bye [preauth]
Oct  1 09:48:49 nativespace-cdp sshd[17015]: Disconnected from 47.103.88.18 port 54974 [preauth]
Oct  1 09:48:56 nativespace-cdp sshd[17059]: Invalid user ubuntu from 61.240.156.16 port 40744
Oct  1 09:48:56 nativespace-cdp sshd[17059]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:48:56 nativespace-cdp sshd[17059]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:48:56 nativespace-cdp sshd[17059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:48:58 nativespace-cdp sshd[17059]: Failed password for invalid user ubuntu from 61.240.156.16 port 40744 ssh2
Oct  1 09:48:58 nativespace-cdp sshd[17059]: Received disconnect from 61.240.156.16 port 40744:11: Bye Bye [preauth]
Oct  1 09:48:58 nativespace-cdp sshd[17059]: Disconnected from 61.240.156.16 port 40744 [preauth]
Oct  1 09:49:05 nativespace-cdp sshd[17102]: Invalid user user from 46.101.108.159 port 57720
Oct  1 09:49:05 nativespace-cdp sshd[17102]: input_userauth_request: invalid user user [preauth]
Oct  1 09:49:05 nativespace-cdp sshd[17102]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:49:05 nativespace-cdp sshd[17102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:49:07 nativespace-cdp sshd[17102]: Failed password for invalid user user from 46.101.108.159 port 57720 ssh2
Oct  1 09:49:07 nativespace-cdp sshd[17102]: Received disconnect from 46.101.108.159 port 57720:11: Bye Bye [preauth]
Oct  1 09:49:07 nativespace-cdp sshd[17102]: Disconnected from 46.101.108.159 port 57720 [preauth]
Oct  1 09:49:15 nativespace-cdp sshd[17122]: Connection closed by 109.230.196.26 port 51942 [preauth]
Oct  1 09:49:26 nativespace-cdp sshd[17142]: Invalid user support from 140.246.79.129 port 59936
Oct  1 09:49:26 nativespace-cdp sshd[17142]: input_userauth_request: invalid user support [preauth]
Oct  1 09:49:26 nativespace-cdp sshd[17142]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:49:26 nativespace-cdp sshd[17142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:49:28 nativespace-cdp sshd[17142]: Failed password for invalid user support from 140.246.79.129 port 59936 ssh2
Oct  1 09:49:29 nativespace-cdp sshd[17142]: Received disconnect from 140.246.79.129 port 59936:11: Bye Bye [preauth]
Oct  1 09:49:29 nativespace-cdp sshd[17142]: Disconnected from 140.246.79.129 port 59936 [preauth]
Oct  1 09:49:36 nativespace-cdp sshd[17160]: Invalid user test from 61.240.156.16 port 51470
Oct  1 09:49:36 nativespace-cdp sshd[17160]: input_userauth_request: invalid user test [preauth]
Oct  1 09:49:36 nativespace-cdp sshd[17160]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:49:36 nativespace-cdp sshd[17160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:49:38 nativespace-cdp sshd[17160]: Failed password for invalid user test from 61.240.156.16 port 51470 ssh2
Oct  1 09:49:40 nativespace-cdp sshd[17160]: Received disconnect from 61.240.156.16 port 51470:11: Bye Bye [preauth]
Oct  1 09:49:40 nativespace-cdp sshd[17160]: Disconnected from 61.240.156.16 port 51470 [preauth]
Oct  1 09:49:40 nativespace-cdp sshd[17179]: Invalid user acer from 46.101.108.159 port 38078
Oct  1 09:49:40 nativespace-cdp sshd[17179]: input_userauth_request: invalid user acer [preauth]
Oct  1 09:49:40 nativespace-cdp sshd[17179]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:49:40 nativespace-cdp sshd[17179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:49:43 nativespace-cdp sshd[17179]: Failed password for invalid user acer from 46.101.108.159 port 38078 ssh2
Oct  1 09:49:43 nativespace-cdp sshd[17179]: Received disconnect from 46.101.108.159 port 38078:11: Bye Bye [preauth]
Oct  1 09:49:43 nativespace-cdp sshd[17179]: Disconnected from 46.101.108.159 port 38078 [preauth]
Oct  1 09:49:53 nativespace-cdp sshd[17230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18  user=root
Oct  1 09:49:53 nativespace-cdp sshd[17230]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:49:55 nativespace-cdp sshd[17230]: Failed password for root from 47.103.88.18 port 40120 ssh2
Oct  1 09:49:56 nativespace-cdp sshd[17230]: Received disconnect from 47.103.88.18 port 40120:11: Bye Bye [preauth]
Oct  1 09:49:56 nativespace-cdp sshd[17230]: Disconnected from 47.103.88.18 port 40120 [preauth]
Oct  1 09:50:02 nativespace-cdp sshd[17324]: Connection closed by 109.230.196.26 port 36612 [preauth]
Oct  1 09:50:16 nativespace-cdp sshd[17506]: Invalid user ubuntu from 46.101.108.159 port 58072
Oct  1 09:50:16 nativespace-cdp sshd[17506]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:50:16 nativespace-cdp sshd[17506]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:50:16 nativespace-cdp sshd[17506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:50:19 nativespace-cdp sshd[17511]: Invalid user ubuntu from 61.240.156.16 port 33964
Oct  1 09:50:19 nativespace-cdp sshd[17511]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:50:19 nativespace-cdp sshd[17511]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:50:19 nativespace-cdp sshd[17511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:50:19 nativespace-cdp sshd[17506]: Failed password for invalid user ubuntu from 46.101.108.159 port 58072 ssh2
Oct  1 09:50:19 nativespace-cdp sshd[17506]: Received disconnect from 46.101.108.159 port 58072:11: Bye Bye [preauth]
Oct  1 09:50:19 nativespace-cdp sshd[17506]: Disconnected from 46.101.108.159 port 58072 [preauth]
Oct  1 09:50:20 nativespace-cdp sshd[17511]: Failed password for invalid user ubuntu from 61.240.156.16 port 33964 ssh2
Oct  1 09:50:20 nativespace-cdp sshd[17511]: Received disconnect from 61.240.156.16 port 33964:11: Bye Bye [preauth]
Oct  1 09:50:20 nativespace-cdp sshd[17511]: Disconnected from 61.240.156.16 port 33964 [preauth]
Oct  1 09:50:43 nativespace-cdp sshd[17574]: Invalid user bkp from 47.103.88.18 port 53506
Oct  1 09:50:43 nativespace-cdp sshd[17574]: input_userauth_request: invalid user bkp [preauth]
Oct  1 09:50:43 nativespace-cdp sshd[17574]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:50:43 nativespace-cdp sshd[17574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:50:44 nativespace-cdp sshd[17574]: Failed password for invalid user bkp from 47.103.88.18 port 53506 ssh2
Oct  1 09:50:45 nativespace-cdp sshd[17574]: Received disconnect from 47.103.88.18 port 53506:11: Bye Bye [preauth]
Oct  1 09:50:45 nativespace-cdp sshd[17574]: Disconnected from 47.103.88.18 port 53506 [preauth]
Oct  1 09:50:46 nativespace-cdp sshd[17598]: Invalid user steam from 109.230.196.26 port 49520
Oct  1 09:50:46 nativespace-cdp sshd[17598]: input_userauth_request: invalid user steam [preauth]
Oct  1 09:50:46 nativespace-cdp sshd[17598]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:50:46 nativespace-cdp sshd[17598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:50:49 nativespace-cdp sshd[17598]: Failed password for invalid user steam from 109.230.196.26 port 49520 ssh2
Oct  1 09:50:49 nativespace-cdp sshd[17598]: Received disconnect from 109.230.196.26 port 49520:11: Bye Bye [preauth]
Oct  1 09:50:49 nativespace-cdp sshd[17598]: Disconnected from 109.230.196.26 port 49520 [preauth]
Oct  1 09:50:52 nativespace-cdp sshd[17613]: Invalid user support from 46.101.108.159 port 34474
Oct  1 09:50:52 nativespace-cdp sshd[17613]: input_userauth_request: invalid user support [preauth]
Oct  1 09:50:52 nativespace-cdp sshd[17613]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:50:52 nativespace-cdp sshd[17613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:50:54 nativespace-cdp sshd[17613]: Failed password for invalid user support from 46.101.108.159 port 34474 ssh2
Oct  1 09:50:58 nativespace-cdp sshd[17613]: Received disconnect from 46.101.108.159 port 34474:11: Bye Bye [preauth]
Oct  1 09:50:58 nativespace-cdp sshd[17613]: Disconnected from 46.101.108.159 port 34474 [preauth]
Oct  1 09:50:58 nativespace-cdp sshd[17621]: Invalid user tg from 61.240.156.16 port 44692
Oct  1 09:50:58 nativespace-cdp sshd[17621]: input_userauth_request: invalid user tg [preauth]
Oct  1 09:50:58 nativespace-cdp sshd[17621]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:50:58 nativespace-cdp sshd[17621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:51:00 nativespace-cdp sshd[17621]: Failed password for invalid user tg from 61.240.156.16 port 44692 ssh2
Oct  1 09:51:00 nativespace-cdp sshd[17621]: Received disconnect from 61.240.156.16 port 44692:11: Bye Bye [preauth]
Oct  1 09:51:00 nativespace-cdp sshd[17621]: Disconnected from 61.240.156.16 port 44692 [preauth]
Oct  1 09:51:31 nativespace-cdp sshd[17749]: Invalid user test from 46.101.108.159 port 44536
Oct  1 09:51:31 nativespace-cdp sshd[17749]: input_userauth_request: invalid user test [preauth]
Oct  1 09:51:31 nativespace-cdp sshd[17749]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:51:31 nativespace-cdp sshd[17749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:51:33 nativespace-cdp sshd[17749]: Failed password for invalid user test from 46.101.108.159 port 44536 ssh2
Oct  1 09:51:33 nativespace-cdp sshd[17749]: Received disconnect from 46.101.108.159 port 44536:11: Bye Bye [preauth]
Oct  1 09:51:33 nativespace-cdp sshd[17749]: Disconnected from 46.101.108.159 port 44536 [preauth]
Oct  1 09:51:33 nativespace-cdp sshd[17757]: Invalid user test from 109.230.196.26 port 34194
Oct  1 09:51:33 nativespace-cdp sshd[17757]: input_userauth_request: invalid user test [preauth]
Oct  1 09:51:33 nativespace-cdp sshd[17757]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:51:33 nativespace-cdp sshd[17757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:51:33 nativespace-cdp sshd[17751]: Invalid user superman from 140.246.79.129 port 52354
Oct  1 09:51:33 nativespace-cdp sshd[17751]: input_userauth_request: invalid user superman [preauth]
Oct  1 09:51:33 nativespace-cdp sshd[17751]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:51:33 nativespace-cdp sshd[17751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:51:34 nativespace-cdp sshd[17762]: Connection closed by 159.100.136.21 port 55164 [preauth]
Oct  1 09:51:34 nativespace-cdp sshd[17760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18  user=david
Oct  1 09:51:35 nativespace-cdp sshd[17757]: Failed password for invalid user test from 109.230.196.26 port 34194 ssh2
Oct  1 09:51:35 nativespace-cdp sshd[17757]: Received disconnect from 109.230.196.26 port 34194:11: Bye Bye [preauth]
Oct  1 09:51:35 nativespace-cdp sshd[17757]: Disconnected from 109.230.196.26 port 34194 [preauth]
Oct  1 09:51:35 nativespace-cdp sshd[17751]: Failed password for invalid user superman from 140.246.79.129 port 52354 ssh2
Oct  1 09:51:36 nativespace-cdp sshd[17751]: Received disconnect from 140.246.79.129 port 52354:11: Bye Bye [preauth]
Oct  1 09:51:36 nativespace-cdp sshd[17751]: Disconnected from 140.246.79.129 port 52354 [preauth]
Oct  1 09:51:36 nativespace-cdp sshd[17765]: Invalid user deploy from 61.240.156.16 port 55420
Oct  1 09:51:36 nativespace-cdp sshd[17765]: input_userauth_request: invalid user deploy [preauth]
Oct  1 09:51:36 nativespace-cdp sshd[17765]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:51:36 nativespace-cdp sshd[17765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:51:36 nativespace-cdp sshd[17760]: Failed password for david from 47.103.88.18 port 38656 ssh2
Oct  1 09:51:37 nativespace-cdp sshd[17760]: Received disconnect from 47.103.88.18 port 38656:11: Bye Bye [preauth]
Oct  1 09:51:37 nativespace-cdp sshd[17760]: Disconnected from 47.103.88.18 port 38656 [preauth]
Oct  1 09:51:38 nativespace-cdp sshd[17765]: Failed password for invalid user deploy from 61.240.156.16 port 55420 ssh2
Oct  1 09:51:38 nativespace-cdp sshd[17765]: Received disconnect from 61.240.156.16 port 55420:11: Bye Bye [preauth]
Oct  1 09:51:38 nativespace-cdp sshd[17765]: Disconnected from 61.240.156.16 port 55420 [preauth]
Oct  1 09:52:03 nativespace-cdp sshd[17858]: Invalid user sysadmin from 46.101.108.159 port 33616
Oct  1 09:52:03 nativespace-cdp sshd[17858]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 09:52:03 nativespace-cdp sshd[17858]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:52:03 nativespace-cdp sshd[17858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:52:04 nativespace-cdp sshd[17858]: Failed password for invalid user sysadmin from 46.101.108.159 port 33616 ssh2
Oct  1 09:52:04 nativespace-cdp sshd[17858]: Received disconnect from 46.101.108.159 port 33616:11: Bye Bye [preauth]
Oct  1 09:52:04 nativespace-cdp sshd[17858]: Disconnected from 46.101.108.159 port 33616 [preauth]
Oct  1 09:52:20 nativespace-cdp sshd[17970]: Invalid user user from 61.240.156.16 port 37914
Oct  1 09:52:20 nativespace-cdp sshd[17970]: input_userauth_request: invalid user user [preauth]
Oct  1 09:52:20 nativespace-cdp sshd[17970]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:52:20 nativespace-cdp sshd[17970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:52:20 nativespace-cdp sshd[17986]: Invalid user acer from 109.230.196.26 port 47104
Oct  1 09:52:20 nativespace-cdp sshd[17986]: input_userauth_request: invalid user acer [preauth]
Oct  1 09:52:20 nativespace-cdp sshd[17986]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:52:20 nativespace-cdp sshd[17986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:52:22 nativespace-cdp sshd[17970]: Failed password for invalid user user from 61.240.156.16 port 37914 ssh2
Oct  1 09:52:22 nativespace-cdp sshd[17970]: Received disconnect from 61.240.156.16 port 37914:11: Bye Bye [preauth]
Oct  1 09:52:22 nativespace-cdp sshd[17970]: Disconnected from 61.240.156.16 port 37914 [preauth]
Oct  1 09:52:22 nativespace-cdp sshd[17986]: Failed password for invalid user acer from 109.230.196.26 port 47104 ssh2
Oct  1 09:52:22 nativespace-cdp sshd[17986]: Received disconnect from 109.230.196.26 port 47104:11: Bye Bye [preauth]
Oct  1 09:52:22 nativespace-cdp sshd[17986]: Disconnected from 109.230.196.26 port 47104 [preauth]
Oct  1 09:52:23 nativespace-cdp sshd[17990]: Invalid user ts from 47.103.88.18 port 52042
Oct  1 09:52:23 nativespace-cdp sshd[17990]: input_userauth_request: invalid user ts [preauth]
Oct  1 09:52:23 nativespace-cdp sshd[17990]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:52:23 nativespace-cdp sshd[17990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:52:25 nativespace-cdp sshd[17990]: Failed password for invalid user ts from 47.103.88.18 port 52042 ssh2
Oct  1 09:52:25 nativespace-cdp sshd[17990]: Received disconnect from 47.103.88.18 port 52042:11: Bye Bye [preauth]
Oct  1 09:52:25 nativespace-cdp sshd[17990]: Disconnected from 47.103.88.18 port 52042 [preauth]
Oct  1 09:52:36 nativespace-cdp sshd[18019]: Invalid user test from 46.101.108.159 port 46256
Oct  1 09:52:36 nativespace-cdp sshd[18019]: input_userauth_request: invalid user test [preauth]
Oct  1 09:52:36 nativespace-cdp sshd[18019]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:52:36 nativespace-cdp sshd[18019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:52:38 nativespace-cdp sshd[18019]: Failed password for invalid user test from 46.101.108.159 port 46256 ssh2
Oct  1 09:52:40 nativespace-cdp sshd[18019]: Received disconnect from 46.101.108.159 port 46256:11: Bye Bye [preauth]
Oct  1 09:52:40 nativespace-cdp sshd[18019]: Disconnected from 46.101.108.159 port 46256 [preauth]
Oct  1 09:52:54 nativespace-cdp sshd[18075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16  user=root
Oct  1 09:52:54 nativespace-cdp sshd[18075]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:52:57 nativespace-cdp sshd[18075]: Failed password for root from 61.240.156.16 port 48644 ssh2
Oct  1 09:52:57 nativespace-cdp sshd[18075]: Received disconnect from 61.240.156.16 port 48644:11: Bye Bye [preauth]
Oct  1 09:52:57 nativespace-cdp sshd[18075]: Disconnected from 61.240.156.16 port 48644 [preauth]
Oct  1 09:52:58 nativespace-cdp sshd[18012]: Received disconnect from 140.246.79.129 port 46190:11: Bye Bye [preauth]
Oct  1 09:52:58 nativespace-cdp sshd[18012]: Disconnected from 140.246.79.129 port 46190 [preauth]
Oct  1 09:53:04 nativespace-cdp sshd[18111]: Invalid user ubuntu from 109.230.196.26 port 60014
Oct  1 09:53:04 nativespace-cdp sshd[18111]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:53:04 nativespace-cdp sshd[18111]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:53:04 nativespace-cdp sshd[18111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:53:06 nativespace-cdp sshd[18111]: Failed password for invalid user ubuntu from 109.230.196.26 port 60014 ssh2
Oct  1 09:53:06 nativespace-cdp sshd[18111]: Received disconnect from 109.230.196.26 port 60014:11: Bye Bye [preauth]
Oct  1 09:53:06 nativespace-cdp sshd[18111]: Disconnected from 109.230.196.26 port 60014 [preauth]
Oct  1 09:53:12 nativespace-cdp sshd[18125]: Invalid user sopuser from 46.101.108.159 port 39734
Oct  1 09:53:12 nativespace-cdp sshd[18125]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 09:53:12 nativespace-cdp sshd[18125]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:53:12 nativespace-cdp sshd[18125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:53:14 nativespace-cdp sshd[18125]: Failed password for invalid user sopuser from 46.101.108.159 port 39734 ssh2
Oct  1 09:53:14 nativespace-cdp sshd[18125]: Received disconnect from 46.101.108.159 port 39734:11: Bye Bye [preauth]
Oct  1 09:53:14 nativespace-cdp sshd[18125]: Disconnected from 46.101.108.159 port 39734 [preauth]
Oct  1 09:53:16 nativespace-cdp sshd[18146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18  user=root
Oct  1 09:53:16 nativespace-cdp sshd[18146]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:53:18 nativespace-cdp sshd[18146]: Failed password for root from 47.103.88.18 port 37192 ssh2
Oct  1 09:53:18 nativespace-cdp sshd[18146]: Received disconnect from 47.103.88.18 port 37192:11: Bye Bye [preauth]
Oct  1 09:53:18 nativespace-cdp sshd[18146]: Disconnected from 47.103.88.18 port 37192 [preauth]
Oct  1 09:53:37 nativespace-cdp sshd[18191]: Invalid user svn from 61.240.156.16 port 59368
Oct  1 09:53:37 nativespace-cdp sshd[18191]: input_userauth_request: invalid user svn [preauth]
Oct  1 09:53:37 nativespace-cdp sshd[18191]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:53:37 nativespace-cdp sshd[18191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:53:39 nativespace-cdp sshd[18191]: Failed password for invalid user svn from 61.240.156.16 port 59368 ssh2
Oct  1 09:53:39 nativespace-cdp sshd[18191]: Received disconnect from 61.240.156.16 port 59368:11: Bye Bye [preauth]
Oct  1 09:53:39 nativespace-cdp sshd[18191]: Disconnected from 61.240.156.16 port 59368 [preauth]
Oct  1 09:53:41 nativespace-cdp sshd[18204]: Invalid user usuario from 140.246.79.129 port 42812
Oct  1 09:53:41 nativespace-cdp sshd[18204]: input_userauth_request: invalid user usuario [preauth]
Oct  1 09:53:41 nativespace-cdp sshd[18204]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:53:41 nativespace-cdp sshd[18204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:53:43 nativespace-cdp sshd[18204]: Failed password for invalid user usuario from 140.246.79.129 port 42812 ssh2
Oct  1 09:53:43 nativespace-cdp sshd[18204]: Received disconnect from 140.246.79.129 port 42812:11: Bye Bye [preauth]
Oct  1 09:53:43 nativespace-cdp sshd[18204]: Disconnected from 140.246.79.129 port 42812 [preauth]
Oct  1 09:53:48 nativespace-cdp sshd[18230]: Invalid user test from 46.101.108.159 port 57816
Oct  1 09:53:48 nativespace-cdp sshd[18230]: input_userauth_request: invalid user test [preauth]
Oct  1 09:53:48 nativespace-cdp sshd[18230]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:53:48 nativespace-cdp sshd[18230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:53:50 nativespace-cdp sshd[18240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26  user=root
Oct  1 09:53:50 nativespace-cdp sshd[18240]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:53:51 nativespace-cdp sshd[18230]: Failed password for invalid user test from 46.101.108.159 port 57816 ssh2
Oct  1 09:53:51 nativespace-cdp sshd[18230]: Received disconnect from 46.101.108.159 port 57816:11: Bye Bye [preauth]
Oct  1 09:53:51 nativespace-cdp sshd[18230]: Disconnected from 46.101.108.159 port 57816 [preauth]
Oct  1 09:53:52 nativespace-cdp sshd[18240]: Failed password for root from 109.230.196.26 port 44688 ssh2
Oct  1 09:53:52 nativespace-cdp sshd[18240]: Received disconnect from 109.230.196.26 port 44688:11: Bye Bye [preauth]
Oct  1 09:53:52 nativespace-cdp sshd[18240]: Disconnected from 109.230.196.26 port 44688 [preauth]
Oct  1 09:54:11 nativespace-cdp sshd[18330]: Invalid user admin from 47.103.88.18 port 50576
Oct  1 09:54:11 nativespace-cdp sshd[18330]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:54:11 nativespace-cdp sshd[18330]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:54:11 nativespace-cdp sshd[18330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:54:13 nativespace-cdp sshd[18348]: Invalid user ubuntu from 61.240.156.16 port 41860
Oct  1 09:54:13 nativespace-cdp sshd[18348]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:54:13 nativespace-cdp sshd[18348]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:54:13 nativespace-cdp sshd[18348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:54:13 nativespace-cdp sshd[18330]: Failed password for invalid user admin from 47.103.88.18 port 50576 ssh2
Oct  1 09:54:13 nativespace-cdp sshd[18330]: Received disconnect from 47.103.88.18 port 50576:11: Bye Bye [preauth]
Oct  1 09:54:13 nativespace-cdp sshd[18330]: Disconnected from 47.103.88.18 port 50576 [preauth]
Oct  1 09:54:14 nativespace-cdp sshd[18348]: Failed password for invalid user ubuntu from 61.240.156.16 port 41860 ssh2
Oct  1 09:54:15 nativespace-cdp sshd[18348]: Received disconnect from 61.240.156.16 port 41860:11: Bye Bye [preauth]
Oct  1 09:54:15 nativespace-cdp sshd[18348]: Disconnected from 61.240.156.16 port 41860 [preauth]
Oct  1 09:54:23 nativespace-cdp sshd[18439]: Invalid user steam from 46.101.108.159 port 33978
Oct  1 09:54:23 nativespace-cdp sshd[18439]: input_userauth_request: invalid user steam [preauth]
Oct  1 09:54:23 nativespace-cdp sshd[18439]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:54:23 nativespace-cdp sshd[18439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:54:25 nativespace-cdp sshd[18439]: Failed password for invalid user steam from 46.101.108.159 port 33978 ssh2
Oct  1 09:54:25 nativespace-cdp sshd[18439]: Received disconnect from 46.101.108.159 port 33978:11: Bye Bye [preauth]
Oct  1 09:54:25 nativespace-cdp sshd[18439]: Disconnected from 46.101.108.159 port 33978 [preauth]
Oct  1 09:54:41 nativespace-cdp sshd[18493]: Invalid user test from 140.246.79.129 port 46650
Oct  1 09:54:41 nativespace-cdp sshd[18493]: input_userauth_request: invalid user test [preauth]
Oct  1 09:54:41 nativespace-cdp sshd[18493]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:54:41 nativespace-cdp sshd[18493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:54:43 nativespace-cdp sshd[18493]: Failed password for invalid user test from 140.246.79.129 port 46650 ssh2
Oct  1 09:54:44 nativespace-cdp sshd[18493]: Received disconnect from 140.246.79.129 port 46650:11: Bye Bye [preauth]
Oct  1 09:54:44 nativespace-cdp sshd[18493]: Disconnected from 140.246.79.129 port 46650 [preauth]
Oct  1 09:54:49 nativespace-cdp sshd[18524]: Invalid user test from 109.230.196.26 port 57598
Oct  1 09:54:49 nativespace-cdp sshd[18524]: input_userauth_request: invalid user test [preauth]
Oct  1 09:54:49 nativespace-cdp sshd[18524]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:54:49 nativespace-cdp sshd[18524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:54:51 nativespace-cdp sshd[18524]: Failed password for invalid user test from 109.230.196.26 port 57598 ssh2
Oct  1 09:54:51 nativespace-cdp sshd[18524]: Received disconnect from 109.230.196.26 port 57598:11: Bye Bye [preauth]
Oct  1 09:54:51 nativespace-cdp sshd[18524]: Disconnected from 109.230.196.26 port 57598 [preauth]
Oct  1 09:54:53 nativespace-cdp sshd[18537]: Invalid user test from 61.240.156.16 port 52590
Oct  1 09:54:53 nativespace-cdp sshd[18537]: input_userauth_request: invalid user test [preauth]
Oct  1 09:54:53 nativespace-cdp sshd[18537]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:54:53 nativespace-cdp sshd[18537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:54:56 nativespace-cdp sshd[18537]: Failed password for invalid user test from 61.240.156.16 port 52590 ssh2
Oct  1 09:54:59 nativespace-cdp sshd[18537]: Received disconnect from 61.240.156.16 port 52590:11: Bye Bye [preauth]
Oct  1 09:54:59 nativespace-cdp sshd[18537]: Disconnected from 61.240.156.16 port 52590 [preauth]
Oct  1 09:55:07 nativespace-cdp sshd[18713]: Invalid user admin from 47.103.88.18 port 35724
Oct  1 09:55:07 nativespace-cdp sshd[18713]: input_userauth_request: invalid user admin [preauth]
Oct  1 09:55:07 nativespace-cdp sshd[18713]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:55:07 nativespace-cdp sshd[18713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.103.88.18
Oct  1 09:55:08 nativespace-cdp sshd[18713]: Failed password for invalid user admin from 47.103.88.18 port 35724 ssh2
Oct  1 09:55:09 nativespace-cdp sshd[18713]: Received disconnect from 47.103.88.18 port 35724:11: Bye Bye [preauth]
Oct  1 09:55:09 nativespace-cdp sshd[18713]: Disconnected from 47.103.88.18 port 35724 [preauth]
Oct  1 09:55:34 nativespace-cdp sshd[18900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26  user=root
Oct  1 09:55:34 nativespace-cdp sshd[18900]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:55:35 nativespace-cdp sshd[18910]: Invalid user support from 46.101.108.159 port 48498
Oct  1 09:55:35 nativespace-cdp sshd[18910]: input_userauth_request: invalid user support [preauth]
Oct  1 09:55:35 nativespace-cdp sshd[18910]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:55:35 nativespace-cdp sshd[18910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:55:35 nativespace-cdp sshd[18907]: Invalid user test from 61.240.156.16 port 35082
Oct  1 09:55:35 nativespace-cdp sshd[18907]: input_userauth_request: invalid user test [preauth]
Oct  1 09:55:35 nativespace-cdp sshd[18907]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:55:35 nativespace-cdp sshd[18907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:55:36 nativespace-cdp sshd[18900]: Failed password for root from 109.230.196.26 port 42268 ssh2
Oct  1 09:55:36 nativespace-cdp sshd[18900]: Received disconnect from 109.230.196.26 port 42268:11: Bye Bye [preauth]
Oct  1 09:55:36 nativespace-cdp sshd[18900]: Disconnected from 109.230.196.26 port 42268 [preauth]
Oct  1 09:55:37 nativespace-cdp sshd[18910]: Failed password for invalid user support from 46.101.108.159 port 48498 ssh2
Oct  1 09:55:37 nativespace-cdp sshd[18910]: Received disconnect from 46.101.108.159 port 48498:11: Bye Bye [preauth]
Oct  1 09:55:37 nativespace-cdp sshd[18910]: Disconnected from 46.101.108.159 port 48498 [preauth]
Oct  1 09:55:37 nativespace-cdp sshd[18907]: Failed password for invalid user test from 61.240.156.16 port 35082 ssh2
Oct  1 09:55:38 nativespace-cdp sshd[18907]: Received disconnect from 61.240.156.16 port 35082:11: Bye Bye [preauth]
Oct  1 09:55:38 nativespace-cdp sshd[18907]: Disconnected from 61.240.156.16 port 35082 [preauth]
Oct  1 09:55:44 nativespace-cdp sshd[18941]: Invalid user ubuntu from 140.246.79.129 port 36602
Oct  1 09:55:44 nativespace-cdp sshd[18941]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:55:44 nativespace-cdp sshd[18941]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:55:44 nativespace-cdp sshd[18941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:55:46 nativespace-cdp sshd[18941]: Failed password for invalid user ubuntu from 140.246.79.129 port 36602 ssh2
Oct  1 09:55:46 nativespace-cdp sshd[18941]: Received disconnect from 140.246.79.129 port 36602:11: Bye Bye [preauth]
Oct  1 09:55:46 nativespace-cdp sshd[18941]: Disconnected from 140.246.79.129 port 36602 [preauth]
Oct  1 09:56:09 nativespace-cdp sshd[19068]: Invalid user tomcat from 46.101.108.159 port 46996
Oct  1 09:56:09 nativespace-cdp sshd[19068]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 09:56:09 nativespace-cdp sshd[19068]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:56:09 nativespace-cdp sshd[19068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:56:11 nativespace-cdp sshd[19068]: Failed password for invalid user tomcat from 46.101.108.159 port 46996 ssh2
Oct  1 09:56:11 nativespace-cdp sshd[19068]: Received disconnect from 46.101.108.159 port 46996:11: Bye Bye [preauth]
Oct  1 09:56:11 nativespace-cdp sshd[19068]: Disconnected from 46.101.108.159 port 46996 [preauth]
Oct  1 09:56:17 nativespace-cdp sshd[19083]: Invalid user username from 61.240.156.16 port 45810
Oct  1 09:56:17 nativespace-cdp sshd[19083]: input_userauth_request: invalid user username [preauth]
Oct  1 09:56:17 nativespace-cdp sshd[19083]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:56:17 nativespace-cdp sshd[19083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:56:19 nativespace-cdp sshd[19083]: Failed password for invalid user username from 61.240.156.16 port 45810 ssh2
Oct  1 09:56:19 nativespace-cdp sshd[19083]: Received disconnect from 61.240.156.16 port 45810:11: Bye Bye [preauth]
Oct  1 09:56:19 nativespace-cdp sshd[19083]: Disconnected from 61.240.156.16 port 45810 [preauth]
Oct  1 09:56:30 nativespace-cdp sshd[19141]: Invalid user ubuntu from 109.230.196.26 port 55170
Oct  1 09:56:30 nativespace-cdp sshd[19141]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:56:30 nativespace-cdp sshd[19141]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:56:30 nativespace-cdp sshd[19141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:56:33 nativespace-cdp sshd[19141]: Failed password for invalid user ubuntu from 109.230.196.26 port 55170 ssh2
Oct  1 09:56:33 nativespace-cdp sshd[19141]: Received disconnect from 109.230.196.26 port 55170:11: Bye Bye [preauth]
Oct  1 09:56:33 nativespace-cdp sshd[19141]: Disconnected from 109.230.196.26 port 55170 [preauth]
Oct  1 09:56:33 nativespace-cdp sshd[19151]: Connection closed by 159.100.136.21 port 36812 [preauth]
Oct  1 09:56:46 nativespace-cdp sshd[19190]: Invalid user user from 46.101.108.159 port 38276
Oct  1 09:56:46 nativespace-cdp sshd[19190]: input_userauth_request: invalid user user [preauth]
Oct  1 09:56:46 nativespace-cdp sshd[19190]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:56:46 nativespace-cdp sshd[19190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:56:47 nativespace-cdp sshd[19186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129  user=root
Oct  1 09:56:47 nativespace-cdp sshd[19186]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:56:48 nativespace-cdp sshd[19190]: Failed password for invalid user user from 46.101.108.159 port 38276 ssh2
Oct  1 09:56:48 nativespace-cdp sshd[19190]: Received disconnect from 46.101.108.159 port 38276:11: Bye Bye [preauth]
Oct  1 09:56:48 nativespace-cdp sshd[19190]: Disconnected from 46.101.108.159 port 38276 [preauth]
Oct  1 09:56:49 nativespace-cdp sshd[19186]: Failed password for root from 140.246.79.129 port 55534 ssh2
Oct  1 09:56:49 nativespace-cdp sshd[19186]: Received disconnect from 140.246.79.129 port 55534:11: Bye Bye [preauth]
Oct  1 09:56:49 nativespace-cdp sshd[19186]: Disconnected from 140.246.79.129 port 55534 [preauth]
Oct  1 09:56:56 nativespace-cdp sshd[19211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16  user=root
Oct  1 09:56:56 nativespace-cdp sshd[19211]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:56:58 nativespace-cdp sshd[19211]: Failed password for root from 61.240.156.16 port 56544 ssh2
Oct  1 09:56:58 nativespace-cdp sshd[19211]: Received disconnect from 61.240.156.16 port 56544:11: Bye Bye [preauth]
Oct  1 09:56:58 nativespace-cdp sshd[19211]: Disconnected from 61.240.156.16 port 56544 [preauth]
Oct  1 09:57:20 nativespace-cdp sshd[19419]: Invalid user tg from 109.230.196.26 port 39842
Oct  1 09:57:20 nativespace-cdp sshd[19419]: input_userauth_request: invalid user tg [preauth]
Oct  1 09:57:20 nativespace-cdp sshd[19419]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:57:20 nativespace-cdp sshd[19419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:57:21 nativespace-cdp sshd[19419]: Failed password for invalid user tg from 109.230.196.26 port 39842 ssh2
Oct  1 09:57:22 nativespace-cdp sshd[19419]: Received disconnect from 109.230.196.26 port 39842:11: Bye Bye [preauth]
Oct  1 09:57:22 nativespace-cdp sshd[19419]: Disconnected from 109.230.196.26 port 39842 [preauth]
Oct  1 09:57:22 nativespace-cdp sshd[19430]: Invalid user user from 46.101.108.159 port 41492
Oct  1 09:57:22 nativespace-cdp sshd[19430]: input_userauth_request: invalid user user [preauth]
Oct  1 09:57:22 nativespace-cdp sshd[19430]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:57:22 nativespace-cdp sshd[19430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:57:25 nativespace-cdp sshd[19430]: Failed password for invalid user user from 46.101.108.159 port 41492 ssh2
Oct  1 09:57:25 nativespace-cdp sshd[19430]: Received disconnect from 46.101.108.159 port 41492:11: Bye Bye [preauth]
Oct  1 09:57:25 nativespace-cdp sshd[19430]: Disconnected from 46.101.108.159 port 41492 [preauth]
Oct  1 09:57:37 nativespace-cdp sshd[19545]: Invalid user user from 61.240.156.16 port 39036
Oct  1 09:57:37 nativespace-cdp sshd[19545]: input_userauth_request: invalid user user [preauth]
Oct  1 09:57:37 nativespace-cdp sshd[19545]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:57:37 nativespace-cdp sshd[19545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:57:39 nativespace-cdp sshd[19545]: Failed password for invalid user user from 61.240.156.16 port 39036 ssh2
Oct  1 09:57:39 nativespace-cdp sshd[19545]: Received disconnect from 61.240.156.16 port 39036:11: Bye Bye [preauth]
Oct  1 09:57:39 nativespace-cdp sshd[19545]: Disconnected from 61.240.156.16 port 39036 [preauth]
Oct  1 09:57:48 nativespace-cdp sshd[19578]: Invalid user tg from 140.246.79.129 port 45432
Oct  1 09:57:48 nativespace-cdp sshd[19578]: input_userauth_request: invalid user tg [preauth]
Oct  1 09:57:48 nativespace-cdp sshd[19578]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:57:48 nativespace-cdp sshd[19578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:57:50 nativespace-cdp sshd[19578]: Failed password for invalid user tg from 140.246.79.129 port 45432 ssh2
Oct  1 09:57:59 nativespace-cdp sshd[19599]: Invalid user testuser from 46.101.108.159 port 48122
Oct  1 09:57:59 nativespace-cdp sshd[19599]: input_userauth_request: invalid user testuser [preauth]
Oct  1 09:57:59 nativespace-cdp sshd[19599]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:57:59 nativespace-cdp sshd[19599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:58:00 nativespace-cdp sshd[19578]: Received disconnect from 140.246.79.129 port 45432:11: Bye Bye [preauth]
Oct  1 09:58:00 nativespace-cdp sshd[19578]: Disconnected from 140.246.79.129 port 45432 [preauth]
Oct  1 09:58:01 nativespace-cdp sshd[19599]: Failed password for invalid user testuser from 46.101.108.159 port 48122 ssh2
Oct  1 09:58:05 nativespace-cdp sshd[19599]: Received disconnect from 46.101.108.159 port 48122:11: Bye Bye [preauth]
Oct  1 09:58:05 nativespace-cdp sshd[19599]: Disconnected from 46.101.108.159 port 48122 [preauth]
Oct  1 09:58:06 nativespace-cdp sshd[19635]: Invalid user support from 109.230.196.26 port 52746
Oct  1 09:58:06 nativespace-cdp sshd[19635]: input_userauth_request: invalid user support [preauth]
Oct  1 09:58:06 nativespace-cdp sshd[19635]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:58:06 nativespace-cdp sshd[19635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:58:08 nativespace-cdp sshd[19635]: Failed password for invalid user support from 109.230.196.26 port 52746 ssh2
Oct  1 09:58:09 nativespace-cdp sshd[19635]: Received disconnect from 109.230.196.26 port 52746:11: Bye Bye [preauth]
Oct  1 09:58:09 nativespace-cdp sshd[19635]: Disconnected from 109.230.196.26 port 52746 [preauth]
Oct  1 09:58:13 nativespace-cdp sshd[19649]: Invalid user test from 61.240.156.16 port 49762
Oct  1 09:58:13 nativespace-cdp sshd[19649]: input_userauth_request: invalid user test [preauth]
Oct  1 09:58:13 nativespace-cdp sshd[19649]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:58:13 nativespace-cdp sshd[19649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:58:15 nativespace-cdp sshd[19649]: Failed password for invalid user test from 61.240.156.16 port 49762 ssh2
Oct  1 09:58:15 nativespace-cdp sshd[19649]: Received disconnect from 61.240.156.16 port 49762:11: Bye Bye [preauth]
Oct  1 09:58:15 nativespace-cdp sshd[19649]: Disconnected from 61.240.156.16 port 49762 [preauth]
Oct  1 09:58:35 nativespace-cdp sshd[19708]: Invalid user thomas from 46.101.108.159 port 42448
Oct  1 09:58:35 nativespace-cdp sshd[19708]: input_userauth_request: invalid user thomas [preauth]
Oct  1 09:58:36 nativespace-cdp sshd[19708]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:58:36 nativespace-cdp sshd[19708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:58:38 nativespace-cdp sshd[19708]: Failed password for invalid user thomas from 46.101.108.159 port 42448 ssh2
Oct  1 09:58:38 nativespace-cdp sshd[19708]: Received disconnect from 46.101.108.159 port 42448:11: Bye Bye [preauth]
Oct  1 09:58:38 nativespace-cdp sshd[19708]: Disconnected from 46.101.108.159 port 42448 [preauth]
Oct  1 09:58:48 nativespace-cdp sshd[19767]: Invalid user usuario from 109.230.196.26 port 37416
Oct  1 09:58:48 nativespace-cdp sshd[19767]: input_userauth_request: invalid user usuario [preauth]
Oct  1 09:58:48 nativespace-cdp sshd[19767]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:58:48 nativespace-cdp sshd[19767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:58:50 nativespace-cdp sshd[19769]: Invalid user ubuntu from 140.246.79.129 port 46072
Oct  1 09:58:50 nativespace-cdp sshd[19769]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:58:50 nativespace-cdp sshd[19769]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:58:50 nativespace-cdp sshd[19769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:58:50 nativespace-cdp sshd[19767]: Failed password for invalid user usuario from 109.230.196.26 port 37416 ssh2
Oct  1 09:58:50 nativespace-cdp sshd[19767]: Received disconnect from 109.230.196.26 port 37416:11: Bye Bye [preauth]
Oct  1 09:58:50 nativespace-cdp sshd[19767]: Disconnected from 109.230.196.26 port 37416 [preauth]
Oct  1 09:58:51 nativespace-cdp sshd[19769]: Failed password for invalid user ubuntu from 140.246.79.129 port 46072 ssh2
Oct  1 09:58:56 nativespace-cdp sshd[19769]: Received disconnect from 140.246.79.129 port 46072:11: Bye Bye [preauth]
Oct  1 09:58:56 nativespace-cdp sshd[19769]: Disconnected from 140.246.79.129 port 46072 [preauth]
Oct  1 09:58:56 nativespace-cdp sshd[19786]: Invalid user abhishek from 61.240.156.16 port 60492
Oct  1 09:58:56 nativespace-cdp sshd[19786]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 09:58:56 nativespace-cdp sshd[19786]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:58:56 nativespace-cdp sshd[19786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:58:58 nativespace-cdp sshd[19786]: Failed password for invalid user abhishek from 61.240.156.16 port 60492 ssh2
Oct  1 09:58:58 nativespace-cdp sshd[19786]: Received disconnect from 61.240.156.16 port 60492:11: Bye Bye [preauth]
Oct  1 09:58:58 nativespace-cdp sshd[19786]: Disconnected from 61.240.156.16 port 60492 [preauth]
Oct  1 09:59:10 nativespace-cdp sshd[19832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159  user=root
Oct  1 09:59:10 nativespace-cdp sshd[19832]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 09:59:12 nativespace-cdp sshd[19832]: Failed password for root from 46.101.108.159 port 57494 ssh2
Oct  1 09:59:12 nativespace-cdp sshd[19832]: Received disconnect from 46.101.108.159 port 57494:11: Bye Bye [preauth]
Oct  1 09:59:12 nativespace-cdp sshd[19832]: Disconnected from 46.101.108.159 port 57494 [preauth]
Oct  1 09:59:32 nativespace-cdp sshd[19898]: Invalid user sopuser from 61.240.156.16 port 42986
Oct  1 09:59:32 nativespace-cdp sshd[19898]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 09:59:32 nativespace-cdp sshd[19898]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:59:32 nativespace-cdp sshd[19898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 09:59:32 nativespace-cdp sshd[19902]: Invalid user user from 109.230.196.26 port 50318
Oct  1 09:59:32 nativespace-cdp sshd[19902]: input_userauth_request: invalid user user [preauth]
Oct  1 09:59:32 nativespace-cdp sshd[19902]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:59:32 nativespace-cdp sshd[19902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 09:59:33 nativespace-cdp sshd[19898]: Failed password for invalid user sopuser from 61.240.156.16 port 42986 ssh2
Oct  1 09:59:34 nativespace-cdp sshd[19898]: Received disconnect from 61.240.156.16 port 42986:11: Bye Bye [preauth]
Oct  1 09:59:34 nativespace-cdp sshd[19898]: Disconnected from 61.240.156.16 port 42986 [preauth]
Oct  1 09:59:34 nativespace-cdp sshd[19902]: Failed password for invalid user user from 109.230.196.26 port 50318 ssh2
Oct  1 09:59:34 nativespace-cdp sshd[19902]: Received disconnect from 109.230.196.26 port 50318:11: Bye Bye [preauth]
Oct  1 09:59:34 nativespace-cdp sshd[19902]: Disconnected from 109.230.196.26 port 50318 [preauth]
Oct  1 09:59:44 nativespace-cdp sshd[19966]: Invalid user test01 from 46.101.108.159 port 39574
Oct  1 09:59:44 nativespace-cdp sshd[19966]: input_userauth_request: invalid user test01 [preauth]
Oct  1 09:59:44 nativespace-cdp sshd[19966]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:59:44 nativespace-cdp sshd[19966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 09:59:45 nativespace-cdp sshd[19966]: Failed password for invalid user test01 from 46.101.108.159 port 39574 ssh2
Oct  1 09:59:47 nativespace-cdp sshd[19966]: Received disconnect from 46.101.108.159 port 39574:11: Bye Bye [preauth]
Oct  1 09:59:47 nativespace-cdp sshd[19966]: Disconnected from 46.101.108.159 port 39574 [preauth]
Oct  1 09:59:53 nativespace-cdp sshd[19983]: Invalid user ubuntu from 140.246.79.129 port 47574
Oct  1 09:59:53 nativespace-cdp sshd[19983]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 09:59:53 nativespace-cdp sshd[19983]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 09:59:53 nativespace-cdp sshd[19983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 09:59:56 nativespace-cdp sshd[19983]: Failed password for invalid user ubuntu from 140.246.79.129 port 47574 ssh2
Oct  1 09:59:56 nativespace-cdp sshd[19983]: Received disconnect from 140.246.79.129 port 47574:11: Bye Bye [preauth]
Oct  1 09:59:56 nativespace-cdp sshd[19983]: Disconnected from 140.246.79.129 port 47574 [preauth]
Oct  1 10:00:11 nativespace-cdp sshd[20246]: Invalid user support from 61.240.156.16 port 53710
Oct  1 10:00:11 nativespace-cdp sshd[20246]: input_userauth_request: invalid user support [preauth]
Oct  1 10:00:11 nativespace-cdp sshd[20246]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:00:11 nativespace-cdp sshd[20246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 10:00:13 nativespace-cdp sshd[20246]: Failed password for invalid user support from 61.240.156.16 port 53710 ssh2
Oct  1 10:00:13 nativespace-cdp sshd[20246]: Received disconnect from 61.240.156.16 port 53710:11: Bye Bye [preauth]
Oct  1 10:00:13 nativespace-cdp sshd[20246]: Disconnected from 61.240.156.16 port 53710 [preauth]
Oct  1 10:00:20 nativespace-cdp sshd[20275]: Invalid user usuario from 46.101.108.159 port 45308
Oct  1 10:00:20 nativespace-cdp sshd[20275]: input_userauth_request: invalid user usuario [preauth]
Oct  1 10:00:20 nativespace-cdp sshd[20275]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:00:20 nativespace-cdp sshd[20275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 10:00:21 nativespace-cdp sshd[20277]: Invalid user odoo from 109.230.196.26 port 34990
Oct  1 10:00:21 nativespace-cdp sshd[20277]: input_userauth_request: invalid user odoo [preauth]
Oct  1 10:00:21 nativespace-cdp sshd[20277]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:00:21 nativespace-cdp sshd[20277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:00:21 nativespace-cdp sshd[20275]: Failed password for invalid user usuario from 46.101.108.159 port 45308 ssh2
Oct  1 10:00:21 nativespace-cdp sshd[20275]: Received disconnect from 46.101.108.159 port 45308:11: Bye Bye [preauth]
Oct  1 10:00:21 nativespace-cdp sshd[20275]: Disconnected from 46.101.108.159 port 45308 [preauth]
Oct  1 10:00:23 nativespace-cdp sshd[20277]: Failed password for invalid user odoo from 109.230.196.26 port 34990 ssh2
Oct  1 10:00:23 nativespace-cdp sshd[20277]: Received disconnect from 109.230.196.26 port 34990:11: Bye Bye [preauth]
Oct  1 10:00:23 nativespace-cdp sshd[20277]: Disconnected from 109.230.196.26 port 34990 [preauth]
Oct  1 10:00:54 nativespace-cdp sshd[20424]: Invalid user test from 61.240.156.16 port 36206
Oct  1 10:00:54 nativespace-cdp sshd[20424]: input_userauth_request: invalid user test [preauth]
Oct  1 10:00:54 nativespace-cdp sshd[20424]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:00:54 nativespace-cdp sshd[20424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 10:00:57 nativespace-cdp sshd[20424]: Failed password for invalid user test from 61.240.156.16 port 36206 ssh2
Oct  1 10:01:01 nativespace-cdp sshd[20436]: Invalid user ubuntu from 46.101.108.159 port 55302
Oct  1 10:01:01 nativespace-cdp sshd[20436]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 10:01:01 nativespace-cdp sshd[20436]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:01:01 nativespace-cdp sshd[20436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 10:01:01 nativespace-cdp sshd[20424]: Received disconnect from 61.240.156.16 port 36206:11: Bye Bye [preauth]
Oct  1 10:01:01 nativespace-cdp sshd[20424]: Disconnected from 61.240.156.16 port 36206 [preauth]
Oct  1 10:01:01 nativespace-cdp sshd[20427]: Received disconnect from 140.246.79.129 port 48424:11: Bye Bye [preauth]
Oct  1 10:01:01 nativespace-cdp sshd[20427]: Disconnected from 140.246.79.129 port 48424 [preauth]
Oct  1 10:01:03 nativespace-cdp sshd[20436]: Failed password for invalid user ubuntu from 46.101.108.159 port 55302 ssh2
Oct  1 10:01:03 nativespace-cdp sshd[20436]: Received disconnect from 46.101.108.159 port 55302:11: Bye Bye [preauth]
Oct  1 10:01:03 nativespace-cdp sshd[20436]: Disconnected from 46.101.108.159 port 55302 [preauth]
Oct  1 10:01:06 nativespace-cdp sshd[20495]: Invalid user username from 109.230.196.26 port 47892
Oct  1 10:01:06 nativespace-cdp sshd[20495]: input_userauth_request: invalid user username [preauth]
Oct  1 10:01:06 nativespace-cdp sshd[20495]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:01:06 nativespace-cdp sshd[20495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:01:08 nativespace-cdp sshd[20495]: Failed password for invalid user username from 109.230.196.26 port 47892 ssh2
Oct  1 10:01:08 nativespace-cdp sshd[20495]: Received disconnect from 109.230.196.26 port 47892:11: Bye Bye [preauth]
Oct  1 10:01:08 nativespace-cdp sshd[20495]: Disconnected from 109.230.196.26 port 47892 [preauth]
Oct  1 10:01:30 nativespace-cdp sshd[20557]: Invalid user superman from 61.240.156.16 port 46934
Oct  1 10:01:30 nativespace-cdp sshd[20557]: input_userauth_request: invalid user superman [preauth]
Oct  1 10:01:30 nativespace-cdp sshd[20557]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:01:30 nativespace-cdp sshd[20557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 10:01:32 nativespace-cdp sshd[20557]: Failed password for invalid user superman from 61.240.156.16 port 46934 ssh2
Oct  1 10:01:33 nativespace-cdp sshd[20557]: Received disconnect from 61.240.156.16 port 46934:11: Bye Bye [preauth]
Oct  1 10:01:33 nativespace-cdp sshd[20557]: Disconnected from 61.240.156.16 port 46934 [preauth]
Oct  1 10:01:33 nativespace-cdp sshd[20566]: Connection closed by 159.100.136.21 port 46336 [preauth]
Oct  1 10:01:34 nativespace-cdp sshd[20568]: Invalid user abhishek from 46.101.108.159 port 40918
Oct  1 10:01:34 nativespace-cdp sshd[20568]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 10:01:34 nativespace-cdp sshd[20568]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:01:34 nativespace-cdp sshd[20568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 10:01:36 nativespace-cdp sshd[20568]: Failed password for invalid user abhishek from 46.101.108.159 port 40918 ssh2
Oct  1 10:01:36 nativespace-cdp sshd[20568]: Received disconnect from 46.101.108.159 port 40918:11: Bye Bye [preauth]
Oct  1 10:01:36 nativespace-cdp sshd[20568]: Disconnected from 46.101.108.159 port 40918 [preauth]
Oct  1 10:01:56 nativespace-cdp sshd[20693]: Invalid user user from 109.230.196.26 port 60794
Oct  1 10:01:56 nativespace-cdp sshd[20693]: input_userauth_request: invalid user user [preauth]
Oct  1 10:01:56 nativespace-cdp sshd[20693]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:01:56 nativespace-cdp sshd[20693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:01:58 nativespace-cdp sshd[20693]: Failed password for invalid user user from 109.230.196.26 port 60794 ssh2
Oct  1 10:01:58 nativespace-cdp sshd[20693]: Received disconnect from 109.230.196.26 port 60794:11: Bye Bye [preauth]
Oct  1 10:01:58 nativespace-cdp sshd[20693]: Disconnected from 109.230.196.26 port 60794 [preauth]
Oct  1 10:02:15 nativespace-cdp sshd[20849]: Connection closed by 61.240.156.16 port 57656 [preauth]
Oct  1 10:02:44 nativespace-cdp sshd[20921]: Invalid user user from 109.230.196.26 port 45468
Oct  1 10:02:44 nativespace-cdp sshd[20921]: input_userauth_request: invalid user user [preauth]
Oct  1 10:02:44 nativespace-cdp sshd[20921]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:02:44 nativespace-cdp sshd[20921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:02:45 nativespace-cdp sshd[20921]: Failed password for invalid user user from 109.230.196.26 port 45468 ssh2
Oct  1 10:02:46 nativespace-cdp sshd[20921]: Received disconnect from 109.230.196.26 port 45468:11: Bye Bye [preauth]
Oct  1 10:02:46 nativespace-cdp sshd[20921]: Disconnected from 109.230.196.26 port 45468 [preauth]
Oct  1 10:02:48 nativespace-cdp sshd[20994]: Invalid user ubuntu from 46.101.108.159 port 52924
Oct  1 10:02:48 nativespace-cdp sshd[20994]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 10:02:48 nativespace-cdp sshd[20994]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:02:48 nativespace-cdp sshd[20994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.108.159
Oct  1 10:02:50 nativespace-cdp sshd[20994]: Failed password for invalid user ubuntu from 46.101.108.159 port 52924 ssh2
Oct  1 10:02:51 nativespace-cdp sshd[20994]: Received disconnect from 46.101.108.159 port 52924:11: Bye Bye [preauth]
Oct  1 10:02:51 nativespace-cdp sshd[20994]: Disconnected from 46.101.108.159 port 52924 [preauth]
Oct  1 10:02:51 nativespace-cdp sshd[21006]: Invalid user test_user from 61.240.156.16 port 40152
Oct  1 10:02:51 nativespace-cdp sshd[21006]: input_userauth_request: invalid user test_user [preauth]
Oct  1 10:02:51 nativespace-cdp sshd[21006]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:02:51 nativespace-cdp sshd[21006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 10:02:53 nativespace-cdp sshd[21006]: Failed password for invalid user test_user from 61.240.156.16 port 40152 ssh2
Oct  1 10:02:54 nativespace-cdp sshd[21006]: Received disconnect from 61.240.156.16 port 40152:11: Bye Bye [preauth]
Oct  1 10:02:54 nativespace-cdp sshd[21006]: Disconnected from 61.240.156.16 port 40152 [preauth]
Oct  1 10:03:00 nativespace-cdp sshd[21030]: Invalid user username from 140.246.79.129 port 34420
Oct  1 10:03:00 nativespace-cdp sshd[21030]: input_userauth_request: invalid user username [preauth]
Oct  1 10:03:01 nativespace-cdp sshd[21030]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:03:01 nativespace-cdp sshd[21030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:03:03 nativespace-cdp sshd[21030]: Failed password for invalid user username from 140.246.79.129 port 34420 ssh2
Oct  1 10:03:04 nativespace-cdp sshd[21030]: Received disconnect from 140.246.79.129 port 34420:11: Bye Bye [preauth]
Oct  1 10:03:04 nativespace-cdp sshd[21030]: Disconnected from 140.246.79.129 port 34420 [preauth]
Oct  1 10:03:27 nativespace-cdp sshd[21123]: Invalid user test from 109.230.196.26 port 58370
Oct  1 10:03:27 nativespace-cdp sshd[21123]: input_userauth_request: invalid user test [preauth]
Oct  1 10:03:27 nativespace-cdp sshd[21123]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:03:27 nativespace-cdp sshd[21123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:03:29 nativespace-cdp sshd[21123]: Failed password for invalid user test from 109.230.196.26 port 58370 ssh2
Oct  1 10:03:29 nativespace-cdp sshd[21123]: Received disconnect from 109.230.196.26 port 58370:11: Bye Bye [preauth]
Oct  1 10:03:29 nativespace-cdp sshd[21123]: Disconnected from 109.230.196.26 port 58370 [preauth]
Oct  1 10:03:32 nativespace-cdp sshd[21135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16  user=root
Oct  1 10:03:32 nativespace-cdp sshd[21135]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 10:03:34 nativespace-cdp sshd[21135]: Failed password for root from 61.240.156.16 port 50880 ssh2
Oct  1 10:03:34 nativespace-cdp sshd[21135]: Received disconnect from 61.240.156.16 port 50880:11: Bye Bye [preauth]
Oct  1 10:03:34 nativespace-cdp sshd[21135]: Disconnected from 61.240.156.16 port 50880 [preauth]
Oct  1 10:04:13 nativespace-cdp sshd[21283]: Invalid user testuser from 61.240.156.16 port 33374
Oct  1 10:04:13 nativespace-cdp sshd[21283]: input_userauth_request: invalid user testuser [preauth]
Oct  1 10:04:13 nativespace-cdp sshd[21283]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:04:13 nativespace-cdp sshd[21283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 10:04:13 nativespace-cdp sshd[21289]: Invalid user ubuntu from 109.230.196.26 port 43040
Oct  1 10:04:13 nativespace-cdp sshd[21289]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 10:04:13 nativespace-cdp sshd[21289]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:04:13 nativespace-cdp sshd[21289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:04:15 nativespace-cdp sshd[21283]: Failed password for invalid user testuser from 61.240.156.16 port 33374 ssh2
Oct  1 10:04:15 nativespace-cdp sshd[21289]: Failed password for invalid user ubuntu from 109.230.196.26 port 43040 ssh2
Oct  1 10:04:15 nativespace-cdp sshd[21283]: Received disconnect from 61.240.156.16 port 33374:11: Bye Bye [preauth]
Oct  1 10:04:15 nativespace-cdp sshd[21283]: Disconnected from 61.240.156.16 port 33374 [preauth]
Oct  1 10:04:15 nativespace-cdp sshd[21289]: Received disconnect from 109.230.196.26 port 43040:11: Bye Bye [preauth]
Oct  1 10:04:15 nativespace-cdp sshd[21289]: Disconnected from 109.230.196.26 port 43040 [preauth]
Oct  1 10:05:06 nativespace-cdp sshd[21515]: Invalid user test from 140.246.79.129 port 34146
Oct  1 10:05:06 nativespace-cdp sshd[21515]: input_userauth_request: invalid user test [preauth]
Oct  1 10:05:06 nativespace-cdp sshd[21515]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:05:06 nativespace-cdp sshd[21515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:05:07 nativespace-cdp sshd[21515]: Failed password for invalid user test from 140.246.79.129 port 34146 ssh2
Oct  1 10:05:07 nativespace-cdp sshd[21515]: Received disconnect from 140.246.79.129 port 34146:11: Bye Bye [preauth]
Oct  1 10:05:07 nativespace-cdp sshd[21515]: Disconnected from 140.246.79.129 port 34146 [preauth]
Oct  1 10:05:32 nativespace-cdp sshd[21937]: Invalid user steam from 61.240.156.16 port 54826
Oct  1 10:05:32 nativespace-cdp sshd[21937]: input_userauth_request: invalid user steam [preauth]
Oct  1 10:05:32 nativespace-cdp sshd[21937]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:05:32 nativespace-cdp sshd[21937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 10:05:34 nativespace-cdp sshd[21937]: Failed password for invalid user steam from 61.240.156.16 port 54826 ssh2
Oct  1 10:05:34 nativespace-cdp sshd[21937]: Received disconnect from 61.240.156.16 port 54826:11: Bye Bye [preauth]
Oct  1 10:05:34 nativespace-cdp sshd[21937]: Disconnected from 61.240.156.16 port 54826 [preauth]
Oct  1 10:05:45 nativespace-cdp sshd[21998]: Invalid user tomcat from 109.230.196.26 port 40610
Oct  1 10:05:45 nativespace-cdp sshd[21998]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 10:05:45 nativespace-cdp sshd[21998]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:05:45 nativespace-cdp sshd[21998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:05:47 nativespace-cdp sshd[21998]: Failed password for invalid user tomcat from 109.230.196.26 port 40610 ssh2
Oct  1 10:05:47 nativespace-cdp sshd[21998]: Received disconnect from 109.230.196.26 port 40610:11: Bye Bye [preauth]
Oct  1 10:05:47 nativespace-cdp sshd[21998]: Disconnected from 109.230.196.26 port 40610 [preauth]
Oct  1 10:06:09 nativespace-cdp sshd[22097]: Invalid user steam from 140.246.79.129 port 59134
Oct  1 10:06:09 nativespace-cdp sshd[22097]: input_userauth_request: invalid user steam [preauth]
Oct  1 10:06:09 nativespace-cdp sshd[22097]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:06:09 nativespace-cdp sshd[22097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:06:11 nativespace-cdp sshd[22104]: Invalid user user1 from 61.240.156.16 port 37322
Oct  1 10:06:11 nativespace-cdp sshd[22104]: input_userauth_request: invalid user user1 [preauth]
Oct  1 10:06:11 nativespace-cdp sshd[22104]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:06:11 nativespace-cdp sshd[22104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 10:06:11 nativespace-cdp sshd[22097]: Failed password for invalid user steam from 140.246.79.129 port 59134 ssh2
Oct  1 10:06:11 nativespace-cdp sshd[22097]: Received disconnect from 140.246.79.129 port 59134:11: Bye Bye [preauth]
Oct  1 10:06:11 nativespace-cdp sshd[22097]: Disconnected from 140.246.79.129 port 59134 [preauth]
Oct  1 10:06:13 nativespace-cdp sshd[22104]: Failed password for invalid user user1 from 61.240.156.16 port 37322 ssh2
Oct  1 10:06:13 nativespace-cdp sshd[22104]: Received disconnect from 61.240.156.16 port 37322:11: Bye Bye [preauth]
Oct  1 10:06:13 nativespace-cdp sshd[22104]: Disconnected from 61.240.156.16 port 37322 [preauth]
Oct  1 10:06:33 nativespace-cdp sshd[22221]: Connection closed by 159.100.136.21 port 55254 [preauth]
Oct  1 10:06:34 nativespace-cdp sshd[22214]: Invalid user ubuntu from 109.230.196.26 port 53514
Oct  1 10:06:34 nativespace-cdp sshd[22214]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 10:06:34 nativespace-cdp sshd[22214]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:06:34 nativespace-cdp sshd[22214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:06:36 nativespace-cdp sshd[22214]: Failed password for invalid user ubuntu from 109.230.196.26 port 53514 ssh2
Oct  1 10:06:38 nativespace-cdp sshd[22214]: Received disconnect from 109.230.196.26 port 53514:11: Bye Bye [preauth]
Oct  1 10:06:38 nativespace-cdp sshd[22214]: Disconnected from 109.230.196.26 port 53514 [preauth]
Oct  1 10:06:51 nativespace-cdp sshd[22269]: Invalid user nexus from 61.240.156.16 port 48050
Oct  1 10:06:51 nativespace-cdp sshd[22269]: input_userauth_request: invalid user nexus [preauth]
Oct  1 10:06:51 nativespace-cdp sshd[22269]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:06:51 nativespace-cdp sshd[22269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 10:06:53 nativespace-cdp sshd[22269]: Failed password for invalid user nexus from 61.240.156.16 port 48050 ssh2
Oct  1 10:06:56 nativespace-cdp sshd[22269]: Received disconnect from 61.240.156.16 port 48050:11: Bye Bye [preauth]
Oct  1 10:06:56 nativespace-cdp sshd[22269]: Disconnected from 61.240.156.16 port 48050 [preauth]
Oct  1 10:07:12 nativespace-cdp sshd[22411]: Invalid user testuser from 140.246.79.129 port 42248
Oct  1 10:07:12 nativespace-cdp sshd[22411]: input_userauth_request: invalid user testuser [preauth]
Oct  1 10:07:12 nativespace-cdp sshd[22411]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:07:12 nativespace-cdp sshd[22411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:07:14 nativespace-cdp sshd[22411]: Failed password for invalid user testuser from 140.246.79.129 port 42248 ssh2
Oct  1 10:07:14 nativespace-cdp sshd[22411]: Received disconnect from 140.246.79.129 port 42248:11: Bye Bye [preauth]
Oct  1 10:07:14 nativespace-cdp sshd[22411]: Disconnected from 140.246.79.129 port 42248 [preauth]
Oct  1 10:07:16 nativespace-cdp sshd[22440]: Invalid user nexus from 109.230.196.26 port 38188
Oct  1 10:07:16 nativespace-cdp sshd[22440]: input_userauth_request: invalid user nexus [preauth]
Oct  1 10:07:16 nativespace-cdp sshd[22440]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:07:16 nativespace-cdp sshd[22440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:07:19 nativespace-cdp sshd[22440]: Failed password for invalid user nexus from 109.230.196.26 port 38188 ssh2
Oct  1 10:07:19 nativespace-cdp sshd[22440]: Received disconnect from 109.230.196.26 port 38188:11: Bye Bye [preauth]
Oct  1 10:07:19 nativespace-cdp sshd[22440]: Disconnected from 109.230.196.26 port 38188 [preauth]
Oct  1 10:07:32 nativespace-cdp sshd[22468]: Invalid user tomcat from 61.240.156.16 port 58776
Oct  1 10:07:32 nativespace-cdp sshd[22468]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 10:07:32 nativespace-cdp sshd[22468]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:07:32 nativespace-cdp sshd[22468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 10:07:34 nativespace-cdp sshd[22468]: Failed password for invalid user tomcat from 61.240.156.16 port 58776 ssh2
Oct  1 10:07:35 nativespace-cdp sshd[22468]: Received disconnect from 61.240.156.16 port 58776:11: Bye Bye [preauth]
Oct  1 10:07:35 nativespace-cdp sshd[22468]: Disconnected from 61.240.156.16 port 58776 [preauth]
Oct  1 10:08:06 nativespace-cdp sshd[22624]: Invalid user ubuntu from 109.230.196.26 port 51090
Oct  1 10:08:06 nativespace-cdp sshd[22624]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 10:08:06 nativespace-cdp sshd[22624]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:08:06 nativespace-cdp sshd[22624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:08:07 nativespace-cdp sshd[22624]: Failed password for invalid user ubuntu from 109.230.196.26 port 51090 ssh2
Oct  1 10:08:07 nativespace-cdp sshd[22624]: Received disconnect from 109.230.196.26 port 51090:11: Bye Bye [preauth]
Oct  1 10:08:07 nativespace-cdp sshd[22624]: Disconnected from 109.230.196.26 port 51090 [preauth]
Oct  1 10:08:15 nativespace-cdp sshd[22634]: Invalid user ubuntu from 140.246.79.129 port 34238
Oct  1 10:08:15 nativespace-cdp sshd[22634]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 10:08:15 nativespace-cdp sshd[22634]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:08:15 nativespace-cdp sshd[22634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:08:16 nativespace-cdp sshd[22640]: Connection closed by 61.240.156.16 port 41272 [preauth]
Oct  1 10:08:17 nativespace-cdp sshd[22634]: Failed password for invalid user ubuntu from 140.246.79.129 port 34238 ssh2
Oct  1 10:08:17 nativespace-cdp sshd[22634]: Received disconnect from 140.246.79.129 port 34238:11: Bye Bye [preauth]
Oct  1 10:08:17 nativespace-cdp sshd[22634]: Disconnected from 140.246.79.129 port 34238 [preauth]
Oct  1 10:08:53 nativespace-cdp sshd[22767]: Invalid user user from 61.240.156.16 port 52000
Oct  1 10:08:53 nativespace-cdp sshd[22767]: input_userauth_request: invalid user user [preauth]
Oct  1 10:08:53 nativespace-cdp sshd[22767]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:08:53 nativespace-cdp sshd[22767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.240.156.16
Oct  1 10:08:54 nativespace-cdp sshd[22775]: Invalid user deploy from 109.230.196.26 port 35760
Oct  1 10:08:54 nativespace-cdp sshd[22775]: input_userauth_request: invalid user deploy [preauth]
Oct  1 10:08:54 nativespace-cdp sshd[22775]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:08:54 nativespace-cdp sshd[22775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:08:55 nativespace-cdp sshd[22767]: Failed password for invalid user user from 61.240.156.16 port 52000 ssh2
Oct  1 10:08:55 nativespace-cdp sshd[22767]: Received disconnect from 61.240.156.16 port 52000:11: Bye Bye [preauth]
Oct  1 10:08:55 nativespace-cdp sshd[22767]: Disconnected from 61.240.156.16 port 52000 [preauth]
Oct  1 10:08:56 nativespace-cdp sshd[22775]: Failed password for invalid user deploy from 109.230.196.26 port 35760 ssh2
Oct  1 10:08:56 nativespace-cdp sshd[22775]: Received disconnect from 109.230.196.26 port 35760:11: Bye Bye [preauth]
Oct  1 10:08:56 nativespace-cdp sshd[22775]: Disconnected from 109.230.196.26 port 35760 [preauth]
Oct  1 10:09:17 nativespace-cdp sshd[22842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129  user=root
Oct  1 10:09:17 nativespace-cdp sshd[22842]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 10:09:19 nativespace-cdp sshd[22842]: Failed password for root from 140.246.79.129 port 52050 ssh2
Oct  1 10:09:19 nativespace-cdp sshd[22842]: Received disconnect from 140.246.79.129 port 52050:11: Bye Bye [preauth]
Oct  1 10:09:19 nativespace-cdp sshd[22842]: Disconnected from 140.246.79.129 port 52050 [preauth]
Oct  1 10:09:41 nativespace-cdp sshd[22950]: Invalid user smart from 109.230.196.26 port 48666
Oct  1 10:09:41 nativespace-cdp sshd[22950]: input_userauth_request: invalid user smart [preauth]
Oct  1 10:09:41 nativespace-cdp sshd[22950]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:09:41 nativespace-cdp sshd[22950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:09:43 nativespace-cdp sshd[22950]: Failed password for invalid user smart from 109.230.196.26 port 48666 ssh2
Oct  1 10:09:43 nativespace-cdp sshd[22950]: Received disconnect from 109.230.196.26 port 48666:11: Bye Bye [preauth]
Oct  1 10:09:43 nativespace-cdp sshd[22950]: Disconnected from 109.230.196.26 port 48666 [preauth]
Oct  1 10:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 10:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:00 nativespace-cdp sudo[23001]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 10:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:00 nativespace-cdp sudo[23005]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 10:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:01 nativespace-cdp sudo[23008]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 10:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:01 nativespace-cdp sudo[23063]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 10:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:06 nativespace-cdp sudo[23093]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:06 nativespace-cdp sudo[23156]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:06 nativespace-cdp sudo[23159]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:06 nativespace-cdp sudo[23162]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:06 nativespace-cdp sudo[23165]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:06 nativespace-cdp sudo[23168]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 10:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:06 nativespace-cdp sudo[23173]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:09 nativespace-cdp sudo[23192]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 10:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:11 nativespace-cdp sudo[23196]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nstriton user-2=brighto1 user-3=vivienn1 user-4=firstre2 user-5=oneoarco user-6=battlere user-7=bedfords user-8=newstoda user-9=belle user-10=ggaaorgu user-11=bemadonn user-12=alexadmin user-13=skyfirec user-14=innovat1 user-15=askhform user-16=stuartge user-17=nativene user-18=ultbcrra user-19=seftvta user-20=jonhartl user-21=firstres user-22=coursemc user-23=opaiscyx user-24=clarkass user-25=firstrel user-26=costestimatorco user-27=firstred user-28=highlegh user-29=southlon user-30=gilpin user-31=milloyco user-32=elecleis user-33=hubmaster user-34=fetch user-35=carsinyo user-36=accooper user-37=ianrayne user-38=connectedshoppin user-39=thqkgnbz user-40=lakesan1 user-41=brmrjxl user-42=strathar user-43=atestord user-44=sarafoundation user-45=wilsonsw user-46=megacards user-47=musorguk
Oct  1 10:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=martsblo user-49=dickemery123 user-50=ptkxhsbt user-51=hhdugcor user-52=lbhyisi user-53=magichat user-54=foundation user-55=booff user-56=markward user-57=vantagep user-58=connect9 user-59=athenare user-60=lbscrmod user-61=maflemin user-62=ulsukarm user-63=jarvisin user-64=spectrum user-65=theblack user-66=hodgesonweb user-67=agproduc user-68=still user-69=stephani user-70=leereyn1 user-71=nove user-72=boldover user-73=bakery user-74=crrtipdl user-75=sosevalu user-76=tstardom user-77=oubpgvbx user-78=what user-79=havantho user-80=cath user-81=sketchy user-82=nvihkvu user-83=stagingerris user-84=dancinggardener user-85=ladburyp user-86=kategilpin user-87=design user-88=tomandle user-89=jennimil user-90=chrisdal user-91=mcdermos user-92=david user-93=careers user-94=nbhavers user-95=lucy user-96=attlebor user-97=onlycont user-98=hodgsonmail user-99=outdoorc user-100=ranxterc user-101=branko
Oct  1 10:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=romaldki user-103=nscdp user-104=leftie user-105=foods user-106=fortunaz user-107=health2045 user-108=lkpier user-109=donnychicago user-110=firstre5 user-111=steakbridieme user-112=ctedorgu user-113=philmcph user-114=isleofwi user-115=smrszyqg user-116=nomistakes user-117=hidden user-118=barbersh user-119=tigerlet user-120=cambria1 user-121=cathski user-122=ninejimm user-123=reliable user-124=cwsocial user-125=howardon user-126=pugwash user-127=paulmca1 user-128=hirefootballgame user-129=eugincou user-130=courseme user-131=sibtoncc user-132=asandcoc user-133=bwppodcast user-134=zebrapho user-135=steve user-136=fawcettd user-137=burydropin user-138=nsceres user-139=beauty user-140=darkstar user-141=eatspam user-142=dhyana feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 10:10:11 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 10:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:12 nativespace-cdp sudo[23204]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 10:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:13 nativespace-cdp sudo[23219]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qiBDw393d2KcWrFK.~
Oct  1 10:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:13 nativespace-cdp sudo[23223]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qiBDw393d2KcWrFK.~'
Oct  1 10:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:13 nativespace-cdp sudo[23226]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qiBDw393d2KcWrFK.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 10:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:13 nativespace-cdp sudo[23230]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 10:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:13 nativespace-cdp sudo[23233]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 10:10:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 10:10:26 nativespace-cdp sudo[23397]: pam_unix(sudo:session): session closed for user root
Oct  1 10:10:30 nativespace-cdp sshd[23407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26  user=root
Oct  1 10:10:30 nativespace-cdp sshd[23407]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 10:10:32 nativespace-cdp sshd[23407]: Failed password for root from 109.230.196.26 port 33336 ssh2
Oct  1 10:10:32 nativespace-cdp sshd[23407]: Received disconnect from 109.230.196.26 port 33336:11: Bye Bye [preauth]
Oct  1 10:10:32 nativespace-cdp sshd[23407]: Disconnected from 109.230.196.26 port 33336 [preauth]
Oct  1 10:10:39 nativespace-cdp sshd[23234]: Connection closed by 140.246.79.129 port 37864 [preauth]
Oct  1 10:11:18 nativespace-cdp sshd[23516]: Invalid user test from 140.246.79.129 port 51446
Oct  1 10:11:18 nativespace-cdp sshd[23516]: input_userauth_request: invalid user test [preauth]
Oct  1 10:11:18 nativespace-cdp sshd[23516]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:11:18 nativespace-cdp sshd[23516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:11:19 nativespace-cdp sshd[23516]: Failed password for invalid user test from 140.246.79.129 port 51446 ssh2
Oct  1 10:11:24 nativespace-cdp sshd[23537]: Invalid user support from 109.230.196.26 port 46244
Oct  1 10:11:24 nativespace-cdp sshd[23537]: input_userauth_request: invalid user support [preauth]
Oct  1 10:11:24 nativespace-cdp sshd[23537]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:11:24 nativespace-cdp sshd[23537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:11:25 nativespace-cdp sshd[23516]: Received disconnect from 140.246.79.129 port 51446:11: Bye Bye [preauth]
Oct  1 10:11:25 nativespace-cdp sshd[23516]: Disconnected from 140.246.79.129 port 51446 [preauth]
Oct  1 10:11:26 nativespace-cdp sshd[23537]: Failed password for invalid user support from 109.230.196.26 port 46244 ssh2
Oct  1 10:11:26 nativespace-cdp sshd[23537]: Received disconnect from 109.230.196.26 port 46244:11: Bye Bye [preauth]
Oct  1 10:11:26 nativespace-cdp sshd[23537]: Disconnected from 109.230.196.26 port 46244 [preauth]
Oct  1 10:11:33 nativespace-cdp sshd[23556]: Connection closed by 159.100.136.21 port 36544 [preauth]
Oct  1 10:12:11 nativespace-cdp sshd[23653]: Invalid user tuan from 109.230.196.26 port 59150
Oct  1 10:12:11 nativespace-cdp sshd[23653]: input_userauth_request: invalid user tuan [preauth]
Oct  1 10:12:11 nativespace-cdp sshd[23653]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:12:11 nativespace-cdp sshd[23653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.230.196.26
Oct  1 10:12:13 nativespace-cdp sshd[23653]: Failed password for invalid user tuan from 109.230.196.26 port 59150 ssh2
Oct  1 10:12:13 nativespace-cdp sshd[23653]: Received disconnect from 109.230.196.26 port 59150:11: Bye Bye [preauth]
Oct  1 10:12:13 nativespace-cdp sshd[23653]: Disconnected from 109.230.196.26 port 59150 [preauth]
Oct  1 10:13:23 nativespace-cdp sshd[23947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129  user=root
Oct  1 10:13:23 nativespace-cdp sshd[23947]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 10:13:25 nativespace-cdp sshd[23947]: Failed password for root from 140.246.79.129 port 46870 ssh2
Oct  1 10:13:26 nativespace-cdp sshd[23947]: Received disconnect from 140.246.79.129 port 46870:11: Bye Bye [preauth]
Oct  1 10:13:26 nativespace-cdp sshd[23947]: Disconnected from 140.246.79.129 port 46870 [preauth]
Oct  1 10:14:29 nativespace-cdp sshd[24158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129  user=root
Oct  1 10:14:29 nativespace-cdp sshd[24158]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 10:14:32 nativespace-cdp sshd[24158]: Failed password for root from 140.246.79.129 port 53168 ssh2
Oct  1 10:14:32 nativespace-cdp sshd[24158]: Received disconnect from 140.246.79.129 port 53168:11: Bye Bye [preauth]
Oct  1 10:14:32 nativespace-cdp sshd[24158]: Disconnected from 140.246.79.129 port 53168 [preauth]
Oct  1 10:15:30 nativespace-cdp sshd[24658]: Invalid user user from 140.246.79.129 port 41076
Oct  1 10:15:30 nativespace-cdp sshd[24658]: input_userauth_request: invalid user user [preauth]
Oct  1 10:15:30 nativespace-cdp sshd[24658]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:15:30 nativespace-cdp sshd[24658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:15:32 nativespace-cdp sshd[24658]: Failed password for invalid user user from 140.246.79.129 port 41076 ssh2
Oct  1 10:15:33 nativespace-cdp sshd[24658]: Received disconnect from 140.246.79.129 port 41076:11: Bye Bye [preauth]
Oct  1 10:15:33 nativespace-cdp sshd[24658]: Disconnected from 140.246.79.129 port 41076 [preauth]
Oct  1 10:16:34 nativespace-cdp sshd[24869]: Connection closed by 159.100.136.21 port 46484 [preauth]
Oct  1 10:16:37 nativespace-cdp sshd[24867]: Invalid user tomcat from 140.246.79.129 port 41126
Oct  1 10:16:37 nativespace-cdp sshd[24867]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 10:16:37 nativespace-cdp sshd[24867]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:16:37 nativespace-cdp sshd[24867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:16:39 nativespace-cdp sshd[24867]: Failed password for invalid user tomcat from 140.246.79.129 port 41126 ssh2
Oct  1 10:16:39 nativespace-cdp sshd[24867]: Received disconnect from 140.246.79.129 port 41126:11: Bye Bye [preauth]
Oct  1 10:16:39 nativespace-cdp sshd[24867]: Disconnected from 140.246.79.129 port 41126 [preauth]
Oct  1 10:17:39 nativespace-cdp sshd[25126]: Invalid user user from 140.246.79.129 port 55184
Oct  1 10:17:39 nativespace-cdp sshd[25126]: input_userauth_request: invalid user user [preauth]
Oct  1 10:17:39 nativespace-cdp sshd[25126]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:17:39 nativespace-cdp sshd[25126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:17:42 nativespace-cdp sshd[25126]: Failed password for invalid user user from 140.246.79.129 port 55184 ssh2
Oct  1 10:17:42 nativespace-cdp sshd[25126]: Received disconnect from 140.246.79.129 port 55184:11: Bye Bye [preauth]
Oct  1 10:17:42 nativespace-cdp sshd[25126]: Disconnected from 140.246.79.129 port 55184 [preauth]
Oct  1 10:18:42 nativespace-cdp sshd[25295]: Invalid user nexus from 140.246.79.129 port 60570
Oct  1 10:18:42 nativespace-cdp sshd[25295]: input_userauth_request: invalid user nexus [preauth]
Oct  1 10:18:42 nativespace-cdp sshd[25295]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:18:42 nativespace-cdp sshd[25295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:18:43 nativespace-cdp sshd[25295]: Failed password for invalid user nexus from 140.246.79.129 port 60570 ssh2
Oct  1 10:18:43 nativespace-cdp sshd[25295]: Received disconnect from 140.246.79.129 port 60570:11: Bye Bye [preauth]
Oct  1 10:18:43 nativespace-cdp sshd[25295]: Disconnected from 140.246.79.129 port 60570 [preauth]
Oct  1 10:19:41 nativespace-cdp sshd[25548]: Invalid user ubuntu from 140.246.79.129 port 48078
Oct  1 10:19:41 nativespace-cdp sshd[25548]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 10:19:41 nativespace-cdp sshd[25548]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:19:41 nativespace-cdp sshd[25548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:19:43 nativespace-cdp sshd[25548]: Failed password for invalid user ubuntu from 140.246.79.129 port 48078 ssh2
Oct  1 10:19:44 nativespace-cdp sshd[25548]: Received disconnect from 140.246.79.129 port 48078:11: Bye Bye [preauth]
Oct  1 10:19:44 nativespace-cdp sshd[25548]: Disconnected from 140.246.79.129 port 48078 [preauth]
Oct  1 10:20:47 nativespace-cdp sshd[26118]: Invalid user deploy from 140.246.79.129 port 51370
Oct  1 10:20:47 nativespace-cdp sshd[26118]: input_userauth_request: invalid user deploy [preauth]
Oct  1 10:20:47 nativespace-cdp sshd[26118]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:20:47 nativespace-cdp sshd[26118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:20:50 nativespace-cdp sshd[26118]: Failed password for invalid user deploy from 140.246.79.129 port 51370 ssh2
Oct  1 10:20:50 nativespace-cdp sshd[26118]: Received disconnect from 140.246.79.129 port 51370:11: Bye Bye [preauth]
Oct  1 10:20:50 nativespace-cdp sshd[26118]: Disconnected from 140.246.79.129 port 51370 [preauth]
Oct  1 10:21:34 nativespace-cdp sshd[26253]: Connection closed by 159.100.136.21 port 56200 [preauth]
Oct  1 10:21:46 nativespace-cdp sshd[26302]: Invalid user smart from 140.246.79.129 port 47256
Oct  1 10:21:46 nativespace-cdp sshd[26302]: input_userauth_request: invalid user smart [preauth]
Oct  1 10:21:46 nativespace-cdp sshd[26302]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:21:46 nativespace-cdp sshd[26302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:21:49 nativespace-cdp sshd[26302]: Failed password for invalid user smart from 140.246.79.129 port 47256 ssh2
Oct  1 10:21:49 nativespace-cdp sshd[26302]: Received disconnect from 140.246.79.129 port 47256:11: Bye Bye [preauth]
Oct  1 10:21:49 nativespace-cdp sshd[26302]: Disconnected from 140.246.79.129 port 47256 [preauth]
Oct  1 10:22:57 nativespace-cdp sshd[26589]: Invalid user test from 140.246.79.129 port 36254
Oct  1 10:22:57 nativespace-cdp sshd[26589]: input_userauth_request: invalid user test [preauth]
Oct  1 10:22:57 nativespace-cdp sshd[26589]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:22:57 nativespace-cdp sshd[26589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:23:00 nativespace-cdp sshd[26589]: Failed password for invalid user test from 140.246.79.129 port 36254 ssh2
Oct  1 10:23:00 nativespace-cdp sshd[26589]: Received disconnect from 140.246.79.129 port 36254:11: Bye Bye [preauth]
Oct  1 10:23:00 nativespace-cdp sshd[26589]: Disconnected from 140.246.79.129 port 36254 [preauth]
Oct  1 10:23:53 nativespace-cdp sshd[26722]: Invalid user user1 from 140.246.79.129 port 39726
Oct  1 10:23:53 nativespace-cdp sshd[26722]: input_userauth_request: invalid user user1 [preauth]
Oct  1 10:23:53 nativespace-cdp sshd[26722]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:23:53 nativespace-cdp sshd[26722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.79.129
Oct  1 10:23:55 nativespace-cdp sshd[26722]: Failed password for invalid user user1 from 140.246.79.129 port 39726 ssh2
Oct  1 10:23:55 nativespace-cdp sshd[26722]: Received disconnect from 140.246.79.129 port 39726:11: Bye Bye [preauth]
Oct  1 10:23:55 nativespace-cdp sshd[26722]: Disconnected from 140.246.79.129 port 39726 [preauth]
Oct  1 10:26:33 nativespace-cdp sshd[27381]: Connection closed by 159.100.136.21 port 38062 [preauth]
Oct  1 10:31:36 nativespace-cdp sshd[28663]: Connection closed by 159.100.136.21 port 47328 [preauth]
Oct  1 10:36:33 nativespace-cdp sshd[30099]: Connection closed by 159.100.136.21 port 57086 [preauth]
Oct  1 10:41:34 nativespace-cdp sshd[31255]: Connection closed by 159.100.136.21 port 38182 [preauth]
Oct  1 10:46:34 nativespace-cdp sshd[32679]: Connection closed by 159.100.136.21 port 47320 [preauth]
Oct  1 10:51:33 nativespace-cdp sshd[1707]: Connection closed by 159.100.136.21 port 56844 [preauth]
Oct  1 10:56:07 nativespace-cdp sshd[2592]: Invalid user ubuntu from 103.231.46.66 port 38278
Oct  1 10:56:07 nativespace-cdp sshd[2592]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 10:56:07 nativespace-cdp sshd[2592]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:56:07 nativespace-cdp sshd[2592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 10:56:08 nativespace-cdp sshd[2592]: Failed password for invalid user ubuntu from 103.231.46.66 port 38278 ssh2
Oct  1 10:56:08 nativespace-cdp sshd[2592]: Received disconnect from 103.231.46.66 port 38278:11: Bye Bye [preauth]
Oct  1 10:56:08 nativespace-cdp sshd[2592]: Disconnected from 103.231.46.66 port 38278 [preauth]
Oct  1 10:56:33 nativespace-cdp sshd[2664]: Connection closed by 159.100.136.21 port 38486 [preauth]
Oct  1 10:57:38 nativespace-cdp sshd[3003]: Invalid user deploy from 104.131.93.177 port 38188
Oct  1 10:57:38 nativespace-cdp sshd[3003]: input_userauth_request: invalid user deploy [preauth]
Oct  1 10:57:38 nativespace-cdp sshd[3003]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 10:57:38 nativespace-cdp sshd[3003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 10:57:40 nativespace-cdp sshd[3003]: Failed password for invalid user deploy from 104.131.93.177 port 38188 ssh2
Oct  1 10:57:40 nativespace-cdp sshd[3003]: Received disconnect from 104.131.93.177 port 38188:11: Bye Bye [preauth]
Oct  1 10:57:40 nativespace-cdp sshd[3003]: Disconnected from 104.131.93.177 port 38188 [preauth]
Oct  1 11:00:06 nativespace-cdp sshd[3608]: Invalid user steam from 223.17.0.181 port 40740
Oct  1 11:00:06 nativespace-cdp sshd[3608]: input_userauth_request: invalid user steam [preauth]
Oct  1 11:00:06 nativespace-cdp sshd[3608]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:00:06 nativespace-cdp sshd[3608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:00:08 nativespace-cdp sshd[3608]: Failed password for invalid user steam from 223.17.0.181 port 40740 ssh2
Oct  1 11:00:08 nativespace-cdp sshd[3608]: Received disconnect from 223.17.0.181 port 40740:11: Bye Bye [preauth]
Oct  1 11:00:08 nativespace-cdp sshd[3608]: Disconnected from 223.17.0.181 port 40740 [preauth]
Oct  1 11:00:56 nativespace-cdp sshd[3891]: Invalid user ubuntu from 46.181.61.58 port 37030
Oct  1 11:00:56 nativespace-cdp sshd[3891]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:00:56 nativespace-cdp sshd[3891]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:00:56 nativespace-cdp sshd[3891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:00:58 nativespace-cdp sshd[3891]: Failed password for invalid user ubuntu from 46.181.61.58 port 37030 ssh2
Oct  1 11:00:58 nativespace-cdp sshd[3891]: Received disconnect from 46.181.61.58 port 37030:11: Bye Bye [preauth]
Oct  1 11:00:58 nativespace-cdp sshd[3891]: Disconnected from 46.181.61.58 port 37030 [preauth]
Oct  1 11:01:24 nativespace-cdp sshd[4011]: Invalid user sopuser from 200.109.234.38 port 50228
Oct  1 11:01:24 nativespace-cdp sshd[4011]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 11:01:24 nativespace-cdp sshd[4011]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:01:24 nativespace-cdp sshd[4011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:01:26 nativespace-cdp sshd[4011]: Failed password for invalid user sopuser from 200.109.234.38 port 50228 ssh2
Oct  1 11:01:26 nativespace-cdp sshd[4011]: Received disconnect from 200.109.234.38 port 50228:11: Bye Bye [preauth]
Oct  1 11:01:26 nativespace-cdp sshd[4011]: Disconnected from 200.109.234.38 port 50228 [preauth]
Oct  1 11:01:30 nativespace-cdp sshd[4036]: Invalid user ubuntu from 103.231.46.66 port 34176
Oct  1 11:01:30 nativespace-cdp sshd[4036]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:01:30 nativespace-cdp sshd[4036]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:01:30 nativespace-cdp sshd[4036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:01:31 nativespace-cdp sshd[4036]: Failed password for invalid user ubuntu from 103.231.46.66 port 34176 ssh2
Oct  1 11:01:35 nativespace-cdp sshd[4099]: Connection closed by 159.100.136.21 port 46742 [preauth]
Oct  1 11:01:38 nativespace-cdp sshd[4106]: Invalid user testuser from 104.131.93.177 port 58537
Oct  1 11:01:38 nativespace-cdp sshd[4106]: input_userauth_request: invalid user testuser [preauth]
Oct  1 11:01:38 nativespace-cdp sshd[4106]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:01:38 nativespace-cdp sshd[4106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:01:38 nativespace-cdp sshd[4036]: Received disconnect from 103.231.46.66 port 34176:11: Bye Bye [preauth]
Oct  1 11:01:38 nativespace-cdp sshd[4036]: Disconnected from 103.231.46.66 port 34176 [preauth]
Oct  1 11:01:40 nativespace-cdp sshd[4106]: Failed password for invalid user testuser from 104.131.93.177 port 58537 ssh2
Oct  1 11:01:40 nativespace-cdp sshd[4106]: Received disconnect from 104.131.93.177 port 58537:11: Bye Bye [preauth]
Oct  1 11:01:40 nativespace-cdp sshd[4106]: Disconnected from 104.131.93.177 port 58537 [preauth]
Oct  1 11:02:10 nativespace-cdp sshd[4225]: Invalid user ubuntu from 223.17.0.181 port 41650
Oct  1 11:02:10 nativespace-cdp sshd[4225]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:02:10 nativespace-cdp sshd[4225]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:02:10 nativespace-cdp sshd[4225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:02:12 nativespace-cdp sshd[4225]: Failed password for invalid user ubuntu from 223.17.0.181 port 41650 ssh2
Oct  1 11:02:12 nativespace-cdp sshd[4225]: Received disconnect from 223.17.0.181 port 41650:11: Bye Bye [preauth]
Oct  1 11:02:12 nativespace-cdp sshd[4225]: Disconnected from 223.17.0.181 port 41650 [preauth]
Oct  1 11:02:17 nativespace-cdp sshd[4252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177  user=root
Oct  1 11:02:17 nativespace-cdp sshd[4252]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:02:19 nativespace-cdp sshd[4252]: Failed password for root from 104.131.93.177 port 36716 ssh2
Oct  1 11:02:19 nativespace-cdp sshd[4252]: Received disconnect from 104.131.93.177 port 36716:11: Bye Bye [preauth]
Oct  1 11:02:19 nativespace-cdp sshd[4252]: Disconnected from 104.131.93.177 port 36716 [preauth]
Oct  1 11:02:26 nativespace-cdp sshd[4310]: Invalid user deploy from 103.231.46.66 port 48920
Oct  1 11:02:26 nativespace-cdp sshd[4310]: input_userauth_request: invalid user deploy [preauth]
Oct  1 11:02:26 nativespace-cdp sshd[4310]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:02:26 nativespace-cdp sshd[4310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:02:28 nativespace-cdp sshd[4310]: Failed password for invalid user deploy from 103.231.46.66 port 48920 ssh2
Oct  1 11:02:32 nativespace-cdp sshd[4310]: Received disconnect from 103.231.46.66 port 48920:11: Bye Bye [preauth]
Oct  1 11:02:32 nativespace-cdp sshd[4310]: Disconnected from 103.231.46.66 port 48920 [preauth]
Oct  1 11:02:52 nativespace-cdp sshd[4516]: Invalid user test_user from 104.131.93.177 port 43130
Oct  1 11:02:52 nativespace-cdp sshd[4516]: input_userauth_request: invalid user test_user [preauth]
Oct  1 11:02:52 nativespace-cdp sshd[4516]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:02:52 nativespace-cdp sshd[4516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:02:54 nativespace-cdp sshd[4516]: Failed password for invalid user test_user from 104.131.93.177 port 43130 ssh2
Oct  1 11:02:57 nativespace-cdp sshd[4516]: Received disconnect from 104.131.93.177 port 43130:11: Bye Bye [preauth]
Oct  1 11:02:57 nativespace-cdp sshd[4516]: Disconnected from 104.131.93.177 port 43130 [preauth]
Oct  1 11:03:12 nativespace-cdp sshd[4630]: Invalid user sysadmin from 223.17.0.181 port 60106
Oct  1 11:03:12 nativespace-cdp sshd[4630]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 11:03:12 nativespace-cdp sshd[4630]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:03:12 nativespace-cdp sshd[4630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:03:13 nativespace-cdp sshd[4630]: Failed password for invalid user sysadmin from 223.17.0.181 port 60106 ssh2
Oct  1 11:03:14 nativespace-cdp sshd[4630]: Received disconnect from 223.17.0.181 port 60106:11: Bye Bye [preauth]
Oct  1 11:03:14 nativespace-cdp sshd[4630]: Disconnected from 223.17.0.181 port 60106 [preauth]
Oct  1 11:03:20 nativespace-cdp sshd[4692]: Invalid user odoo from 103.231.46.66 port 35424
Oct  1 11:03:20 nativespace-cdp sshd[4692]: input_userauth_request: invalid user odoo [preauth]
Oct  1 11:03:20 nativespace-cdp sshd[4692]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:03:20 nativespace-cdp sshd[4692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:03:21 nativespace-cdp sshd[4692]: Failed password for invalid user odoo from 103.231.46.66 port 35424 ssh2
Oct  1 11:03:21 nativespace-cdp sshd[4692]: Received disconnect from 103.231.46.66 port 35424:11: Bye Bye [preauth]
Oct  1 11:03:21 nativespace-cdp sshd[4692]: Disconnected from 103.231.46.66 port 35424 [preauth]
Oct  1 11:03:27 nativespace-cdp sshd[4712]: Invalid user test from 104.131.93.177 port 49542
Oct  1 11:03:27 nativespace-cdp sshd[4712]: input_userauth_request: invalid user test [preauth]
Oct  1 11:03:27 nativespace-cdp sshd[4712]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:03:27 nativespace-cdp sshd[4712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:03:29 nativespace-cdp sshd[4712]: Failed password for invalid user test from 104.131.93.177 port 49542 ssh2
Oct  1 11:03:32 nativespace-cdp sshd[4712]: Received disconnect from 104.131.93.177 port 49542:11: Bye Bye [preauth]
Oct  1 11:03:32 nativespace-cdp sshd[4712]: Disconnected from 104.131.93.177 port 49542 [preauth]
Oct  1 11:04:04 nativespace-cdp sshd[4846]: Invalid user test from 104.131.93.177 port 55954
Oct  1 11:04:04 nativespace-cdp sshd[4846]: input_userauth_request: invalid user test [preauth]
Oct  1 11:04:04 nativespace-cdp sshd[4846]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:04:04 nativespace-cdp sshd[4846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:04:07 nativespace-cdp sshd[4846]: Failed password for invalid user test from 104.131.93.177 port 55954 ssh2
Oct  1 11:04:07 nativespace-cdp sshd[4846]: Received disconnect from 104.131.93.177 port 55954:11: Bye Bye [preauth]
Oct  1 11:04:07 nativespace-cdp sshd[4846]: Disconnected from 104.131.93.177 port 55954 [preauth]
Oct  1 11:04:07 nativespace-cdp sshd[4839]: Connection closed by 223.17.0.181 port 35978 [preauth]
Oct  1 11:04:40 nativespace-cdp sshd[4975]: Invalid user thomas from 104.131.93.177 port 34133
Oct  1 11:04:40 nativespace-cdp sshd[4975]: input_userauth_request: invalid user thomas [preauth]
Oct  1 11:04:40 nativespace-cdp sshd[4975]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:04:40 nativespace-cdp sshd[4975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:04:42 nativespace-cdp sshd[4975]: Failed password for invalid user thomas from 104.131.93.177 port 34133 ssh2
Oct  1 11:04:42 nativespace-cdp sshd[4975]: Received disconnect from 104.131.93.177 port 34133:11: Bye Bye [preauth]
Oct  1 11:04:42 nativespace-cdp sshd[4975]: Disconnected from 104.131.93.177 port 34133 [preauth]
Oct  1 11:05:02 nativespace-cdp sshd[5286]: Invalid user test_user from 103.231.46.66 port 36690
Oct  1 11:05:02 nativespace-cdp sshd[5286]: input_userauth_request: invalid user test_user [preauth]
Oct  1 11:05:02 nativespace-cdp sshd[5286]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:05:02 nativespace-cdp sshd[5286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:05:04 nativespace-cdp sshd[5286]: Failed password for invalid user test_user from 103.231.46.66 port 36690 ssh2
Oct  1 11:05:04 nativespace-cdp sshd[5286]: Received disconnect from 103.231.46.66 port 36690:11: Bye Bye [preauth]
Oct  1 11:05:04 nativespace-cdp sshd[5286]: Disconnected from 103.231.46.66 port 36690 [preauth]
Oct  1 11:05:14 nativespace-cdp sshd[5416]: Received disconnect from 223.17.0.181 port 50316:11: Bye Bye [preauth]
Oct  1 11:05:14 nativespace-cdp sshd[5416]: Disconnected from 223.17.0.181 port 50316 [preauth]
Oct  1 11:05:18 nativespace-cdp sshd[5506]: Invalid user tomcat from 104.131.93.177 port 40545
Oct  1 11:05:18 nativespace-cdp sshd[5506]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 11:05:18 nativespace-cdp sshd[5506]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:05:18 nativespace-cdp sshd[5506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:05:21 nativespace-cdp sshd[5506]: Failed password for invalid user tomcat from 104.131.93.177 port 40545 ssh2
Oct  1 11:05:23 nativespace-cdp sshd[5506]: Received disconnect from 104.131.93.177 port 40545:11: Bye Bye [preauth]
Oct  1 11:05:23 nativespace-cdp sshd[5506]: Disconnected from 104.131.93.177 port 40545 [preauth]
Oct  1 11:05:34 nativespace-cdp sshd[5540]: Invalid user acer from 210.59.205.48 port 60536
Oct  1 11:05:34 nativespace-cdp sshd[5540]: input_userauth_request: invalid user acer [preauth]
Oct  1 11:05:34 nativespace-cdp sshd[5540]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:05:34 nativespace-cdp sshd[5540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:05:36 nativespace-cdp sshd[5540]: Failed password for invalid user acer from 210.59.205.48 port 60536 ssh2
Oct  1 11:05:37 nativespace-cdp sshd[5540]: Received disconnect from 210.59.205.48 port 60536:11: Bye Bye [preauth]
Oct  1 11:05:37 nativespace-cdp sshd[5540]: Disconnected from 210.59.205.48 port 60536 [preauth]
Oct  1 11:06:01 nativespace-cdp sshd[5620]: Did not receive identification string from 103.231.46.66 port 51434
Oct  1 11:06:06 nativespace-cdp sshd[5641]: Invalid user username from 223.17.0.181 port 48060
Oct  1 11:06:06 nativespace-cdp sshd[5641]: input_userauth_request: invalid user username [preauth]
Oct  1 11:06:06 nativespace-cdp sshd[5641]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:06:06 nativespace-cdp sshd[5641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:06:09 nativespace-cdp sshd[5641]: Failed password for invalid user username from 223.17.0.181 port 48060 ssh2
Oct  1 11:06:16 nativespace-cdp sshd[5641]: Received disconnect from 223.17.0.181 port 48060:11: Bye Bye [preauth]
Oct  1 11:06:16 nativespace-cdp sshd[5641]: Disconnected from 223.17.0.181 port 48060 [preauth]
Oct  1 11:06:33 nativespace-cdp sshd[5766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177  user=root
Oct  1 11:06:33 nativespace-cdp sshd[5766]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:06:33 nativespace-cdp sshd[5769]: Connection closed by 159.100.136.21 port 56646 [preauth]
Oct  1 11:06:34 nativespace-cdp sshd[5766]: Failed password for root from 104.131.93.177 port 53369 ssh2
Oct  1 11:06:34 nativespace-cdp sshd[5766]: Received disconnect from 104.131.93.177 port 53369:11: Bye Bye [preauth]
Oct  1 11:06:34 nativespace-cdp sshd[5766]: Disconnected from 104.131.93.177 port 53369 [preauth]
Oct  1 11:06:51 nativespace-cdp sshd[5872]: Invalid user tg from 103.231.46.66 port 37958
Oct  1 11:06:51 nativespace-cdp sshd[5872]: input_userauth_request: invalid user tg [preauth]
Oct  1 11:06:51 nativespace-cdp sshd[5872]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:06:51 nativespace-cdp sshd[5872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:06:53 nativespace-cdp sshd[5872]: Failed password for invalid user tg from 103.231.46.66 port 37958 ssh2
Oct  1 11:06:56 nativespace-cdp sshd[5872]: Received disconnect from 103.231.46.66 port 37958:11: Bye Bye [preauth]
Oct  1 11:06:56 nativespace-cdp sshd[5872]: Disconnected from 103.231.46.66 port 37958 [preauth]
Oct  1 11:07:09 nativespace-cdp sshd[5924]: Invalid user sysadmin from 223.17.0.181 port 49962
Oct  1 11:07:09 nativespace-cdp sshd[5924]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 11:07:09 nativespace-cdp sshd[5924]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:07:09 nativespace-cdp sshd[5924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:07:11 nativespace-cdp sshd[5924]: Failed password for invalid user sysadmin from 223.17.0.181 port 49962 ssh2
Oct  1 11:07:11 nativespace-cdp sshd[5924]: Received disconnect from 223.17.0.181 port 49962:11: Bye Bye [preauth]
Oct  1 11:07:11 nativespace-cdp sshd[5924]: Disconnected from 223.17.0.181 port 49962 [preauth]
Oct  1 11:07:12 nativespace-cdp sshd[5959]: Invalid user sysadmin from 104.131.93.177 port 59783
Oct  1 11:07:12 nativespace-cdp sshd[5959]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 11:07:12 nativespace-cdp sshd[5959]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:07:12 nativespace-cdp sshd[5959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:07:15 nativespace-cdp sshd[5959]: Failed password for invalid user sysadmin from 104.131.93.177 port 59783 ssh2
Oct  1 11:07:15 nativespace-cdp sshd[5959]: Received disconnect from 104.131.93.177 port 59783:11: Bye Bye [preauth]
Oct  1 11:07:15 nativespace-cdp sshd[5959]: Disconnected from 104.131.93.177 port 59783 [preauth]
Oct  1 11:07:28 nativespace-cdp sshd[6074]: Invalid user test_user from 46.181.61.58 port 46000
Oct  1 11:07:28 nativespace-cdp sshd[6074]: input_userauth_request: invalid user test_user [preauth]
Oct  1 11:07:28 nativespace-cdp sshd[6074]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:07:28 nativespace-cdp sshd[6074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:07:30 nativespace-cdp sshd[6074]: Failed password for invalid user test_user from 46.181.61.58 port 46000 ssh2
Oct  1 11:07:30 nativespace-cdp sshd[6074]: Received disconnect from 46.181.61.58 port 46000:11: Bye Bye [preauth]
Oct  1 11:07:30 nativespace-cdp sshd[6074]: Disconnected from 46.181.61.58 port 46000 [preauth]
Oct  1 11:07:44 nativespace-cdp sshd[6200]: Invalid user thomas from 103.231.46.66 port 52704
Oct  1 11:07:44 nativespace-cdp sshd[6200]: input_userauth_request: invalid user thomas [preauth]
Oct  1 11:07:44 nativespace-cdp sshd[6200]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:07:44 nativespace-cdp sshd[6200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:07:46 nativespace-cdp sshd[6212]: Invalid user tg from 200.109.234.38 port 49050
Oct  1 11:07:46 nativespace-cdp sshd[6212]: input_userauth_request: invalid user tg [preauth]
Oct  1 11:07:46 nativespace-cdp sshd[6212]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:07:46 nativespace-cdp sshd[6212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:07:46 nativespace-cdp sshd[6200]: Failed password for invalid user thomas from 103.231.46.66 port 52704 ssh2
Oct  1 11:07:46 nativespace-cdp sshd[6200]: Received disconnect from 103.231.46.66 port 52704:11: Bye Bye [preauth]
Oct  1 11:07:46 nativespace-cdp sshd[6200]: Disconnected from 103.231.46.66 port 52704 [preauth]
Oct  1 11:07:48 nativespace-cdp sshd[6212]: Failed password for invalid user tg from 200.109.234.38 port 49050 ssh2
Oct  1 11:07:48 nativespace-cdp sshd[6212]: Received disconnect from 200.109.234.38 port 49050:11: Bye Bye [preauth]
Oct  1 11:07:48 nativespace-cdp sshd[6212]: Disconnected from 200.109.234.38 port 49050 [preauth]
Oct  1 11:07:51 nativespace-cdp sshd[6239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177  user=root
Oct  1 11:07:51 nativespace-cdp sshd[6239]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:07:53 nativespace-cdp sshd[6239]: Failed password for root from 104.131.93.177 port 37962 ssh2
Oct  1 11:07:53 nativespace-cdp sshd[6239]: Received disconnect from 104.131.93.177 port 37962:11: Bye Bye [preauth]
Oct  1 11:07:53 nativespace-cdp sshd[6239]: Disconnected from 104.131.93.177 port 37962 [preauth]
Oct  1 11:08:09 nativespace-cdp sshd[6293]: Invalid user testuser from 223.17.0.181 port 46348
Oct  1 11:08:09 nativespace-cdp sshd[6293]: input_userauth_request: invalid user testuser [preauth]
Oct  1 11:08:09 nativespace-cdp sshd[6293]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:08:09 nativespace-cdp sshd[6293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:08:11 nativespace-cdp sshd[6293]: Failed password for invalid user testuser from 223.17.0.181 port 46348 ssh2
Oct  1 11:08:11 nativespace-cdp sshd[6293]: Received disconnect from 223.17.0.181 port 46348:11: Bye Bye [preauth]
Oct  1 11:08:11 nativespace-cdp sshd[6293]: Disconnected from 223.17.0.181 port 46348 [preauth]
Oct  1 11:08:27 nativespace-cdp sshd[6353]: Invalid user svn from 104.131.93.177 port 44376
Oct  1 11:08:27 nativespace-cdp sshd[6353]: input_userauth_request: invalid user svn [preauth]
Oct  1 11:08:28 nativespace-cdp sshd[6353]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:08:28 nativespace-cdp sshd[6353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:08:29 nativespace-cdp sshd[6353]: Failed password for invalid user svn from 104.131.93.177 port 44376 ssh2
Oct  1 11:08:32 nativespace-cdp sshd[6353]: Received disconnect from 104.131.93.177 port 44376:11: Bye Bye [preauth]
Oct  1 11:08:32 nativespace-cdp sshd[6353]: Disconnected from 104.131.93.177 port 44376 [preauth]
Oct  1 11:08:34 nativespace-cdp sshd[6364]: Invalid user test from 103.231.46.66 port 39218
Oct  1 11:08:34 nativespace-cdp sshd[6364]: input_userauth_request: invalid user test [preauth]
Oct  1 11:08:34 nativespace-cdp sshd[6364]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:08:34 nativespace-cdp sshd[6364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:08:36 nativespace-cdp sshd[6364]: Failed password for invalid user test from 103.231.46.66 port 39218 ssh2
Oct  1 11:08:36 nativespace-cdp sshd[6364]: Received disconnect from 103.231.46.66 port 39218:11: Bye Bye [preauth]
Oct  1 11:08:36 nativespace-cdp sshd[6364]: Disconnected from 103.231.46.66 port 39218 [preauth]
Oct  1 11:08:40 nativespace-cdp sshd[6386]: Invalid user test_user from 210.59.205.48 port 54152
Oct  1 11:08:40 nativespace-cdp sshd[6386]: input_userauth_request: invalid user test_user [preauth]
Oct  1 11:08:40 nativespace-cdp sshd[6386]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:08:40 nativespace-cdp sshd[6386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:08:42 nativespace-cdp sshd[6386]: Failed password for invalid user test_user from 210.59.205.48 port 54152 ssh2
Oct  1 11:08:45 nativespace-cdp sshd[6386]: Received disconnect from 210.59.205.48 port 54152:11: Bye Bye [preauth]
Oct  1 11:08:45 nativespace-cdp sshd[6386]: Disconnected from 210.59.205.48 port 54152 [preauth]
Oct  1 11:09:05 nativespace-cdp sshd[6533]: Invalid user ubuntu from 104.131.93.177 port 50788
Oct  1 11:09:05 nativespace-cdp sshd[6533]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:09:05 nativespace-cdp sshd[6533]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:09:05 nativespace-cdp sshd[6533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:09:07 nativespace-cdp sshd[6533]: Failed password for invalid user ubuntu from 104.131.93.177 port 50788 ssh2
Oct  1 11:09:07 nativespace-cdp sshd[6533]: Received disconnect from 104.131.93.177 port 50788:11: Bye Bye [preauth]
Oct  1 11:09:07 nativespace-cdp sshd[6533]: Disconnected from 104.131.93.177 port 50788 [preauth]
Oct  1 11:09:07 nativespace-cdp sshd[6535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181  user=root
Oct  1 11:09:07 nativespace-cdp sshd[6535]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:09:09 nativespace-cdp sshd[6535]: Failed password for root from 223.17.0.181 port 33848 ssh2
Oct  1 11:09:09 nativespace-cdp sshd[6535]: Received disconnect from 223.17.0.181 port 33848:11: Bye Bye [preauth]
Oct  1 11:09:09 nativespace-cdp sshd[6535]: Disconnected from 223.17.0.181 port 33848 [preauth]
Oct  1 11:09:23 nativespace-cdp sshd[6585]: Invalid user acer from 103.231.46.66 port 53956
Oct  1 11:09:23 nativespace-cdp sshd[6585]: input_userauth_request: invalid user acer [preauth]
Oct  1 11:09:23 nativespace-cdp sshd[6585]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:09:23 nativespace-cdp sshd[6585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:09:25 nativespace-cdp sshd[6585]: Failed password for invalid user acer from 103.231.46.66 port 53956 ssh2
Oct  1 11:09:25 nativespace-cdp sshd[6585]: Received disconnect from 103.231.46.66 port 53956:11: Bye Bye [preauth]
Oct  1 11:09:25 nativespace-cdp sshd[6585]: Disconnected from 103.231.46.66 port 53956 [preauth]
Oct  1 11:09:28 nativespace-cdp sshd[6611]: Invalid user test from 200.109.234.38 port 40534
Oct  1 11:09:28 nativespace-cdp sshd[6611]: input_userauth_request: invalid user test [preauth]
Oct  1 11:09:28 nativespace-cdp sshd[6611]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:09:28 nativespace-cdp sshd[6611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:09:30 nativespace-cdp sshd[6611]: Failed password for invalid user test from 200.109.234.38 port 40534 ssh2
Oct  1 11:09:30 nativespace-cdp sshd[6611]: Received disconnect from 200.109.234.38 port 40534:11: Bye Bye [preauth]
Oct  1 11:09:30 nativespace-cdp sshd[6611]: Disconnected from 200.109.234.38 port 40534 [preauth]
Oct  1 11:09:37 nativespace-cdp sshd[6646]: Invalid user test from 104.131.93.177 port 57200
Oct  1 11:09:37 nativespace-cdp sshd[6646]: input_userauth_request: invalid user test [preauth]
Oct  1 11:09:37 nativespace-cdp sshd[6646]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:09:37 nativespace-cdp sshd[6646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:09:38 nativespace-cdp sshd[6646]: Failed password for invalid user test from 104.131.93.177 port 57200 ssh2
Oct  1 11:09:38 nativespace-cdp sshd[6646]: Received disconnect from 104.131.93.177 port 57200:11: Bye Bye [preauth]
Oct  1 11:09:38 nativespace-cdp sshd[6646]: Disconnected from 104.131.93.177 port 57200 [preauth]
Oct  1 11:09:56 nativespace-cdp sshd[6722]: Invalid user test_user from 223.17.0.181 port 38642
Oct  1 11:09:56 nativespace-cdp sshd[6722]: input_userauth_request: invalid user test_user [preauth]
Oct  1 11:09:56 nativespace-cdp sshd[6722]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:09:56 nativespace-cdp sshd[6722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:09:58 nativespace-cdp sshd[6722]: Failed password for invalid user test_user from 223.17.0.181 port 38642 ssh2
Oct  1 11:09:58 nativespace-cdp sshd[6722]: Received disconnect from 223.17.0.181 port 38642:11: Bye Bye [preauth]
Oct  1 11:09:58 nativespace-cdp sshd[6722]: Disconnected from 223.17.0.181 port 38642 [preauth]
Oct  1 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:00 nativespace-cdp sudo[6739]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:00 nativespace-cdp sudo[6742]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 11:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:03 nativespace-cdp sudo[6745]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 11:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:03 nativespace-cdp sudo[6858]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 11:10:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:10 nativespace-cdp sudo[6869]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:11 nativespace-cdp sudo[6971]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:11 nativespace-cdp sudo[6974]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:11 nativespace-cdp sudo[6977]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:11 nativespace-cdp sudo[6981]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:11 nativespace-cdp sudo[6984]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 11:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:11 nativespace-cdp sudo[6987]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 11:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:13 nativespace-cdp sshd[6992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66  user=root
Oct  1 11:10:13 nativespace-cdp sshd[6992]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:10:13 nativespace-cdp sudo[7004]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 11:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:14 nativespace-cdp sshd[7009]: Invalid user sopuser from 104.131.93.177 port 35379
Oct  1 11:10:14 nativespace-cdp sshd[7009]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 11:10:14 nativespace-cdp sshd[7009]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:10:14 nativespace-cdp sshd[7009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:10:15 nativespace-cdp sudo[7011]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jonhartl user-2=seftvta user-3=ultbcrra user-4=firstres user-5=opaiscyx user-6=coursemc user-7=clarkass user-8=firstrel user-9=costestimatorco user-10=firstred user-11=southlon user-12=highlegh user-13=gilpin user-14=milloyco user-15=elecleis user-16=hubmaster user-17=carsinyo user-18=fetch user-19=accooper user-20=ianrayne user-21=connectedshoppin user-22=thqkgnbz user-23=brighto1 user-24=nstriton user-25=firstre2 user-26=vivienn1 user-27=battlere user-28=oneoarco user-29=bedfords user-30=ggaaorgu user-31=belle user-32=newstoda user-33=bemadonn user-34=alexadmin user-35=skyfirec user-36=innovat1 user-37=askhform user-38=stuartge user-39=nativene user-40=booff user-41=foundation user-42=markward user-43=athenare user-44=connect9 user-45=vantagep user-46=maflemin user-47=lbscrmod user-48=ulsukarm
Oct  1 11:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=jarvisin user-50=spectrum user-51=hodgesonweb user-52=theblack user-53=still user-54=agproduc user-55=stephani user-56=leereyn1 user-57=lakesan1 user-58=brmrjxl user-59=strathar user-60=sarafoundation user-61=atestord user-62=wilsonsw user-63=musorguk user-64=megacards user-65=martsblo user-66=dickemery123 user-67=ptkxhsbt user-68=lbhyisi user-69=hhdugcor user-70=magichat user-71=tomandle user-72=jennimil user-73=chrisdal user-74=mcdermos user-75=careers user-76=nbhavers user-77=david user-78=attlebor user-79=lucy user-80=onlycont user-81=hodgsonmail user-82=outdoorc user-83=ranxterc user-84=branko user-85=romaldki user-86=nove user-87=boldover user-88=bakery user-89=sosevalu user-90=crrtipdl user-91=oubpgvbx user-92=tstardom user-93=what user-94=sketchy user-95=cath user-96=havantho user-97=nvihkvu user-98=ladburyp user-99=stagingerris user-100=dancinggardener user-101=kategilpin user-102=design
Oct  1 11:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=sibtoncc user-104=asandcoc user-105=bwppodcast user-106=zebrapho user-107=steve user-108=burydropin user-109=fawcettd user-110=nsceres user-111=beauty user-112=eatspam user-113=darkstar user-114=dhyana user-115=nscdp user-116=health2045 user-117=fortunaz user-118=foods user-119=leftie user-120=lkpier user-121=philmcph user-122=ctedorgu user-123=firstre5 user-124=steakbridieme user-125=donnychicago user-126=isleofwi user-127=smrszyqg user-128=hidden user-129=nomistakes user-130=tigerlet user-131=barbersh user-132=cathski user-133=cambria1 user-134=ninejimm user-135=reliable user-136=paulmca1 user-137=howardon user-138=pugwash user-139=cwsocial user-140=hirefootballgame user-141=eugincou user-142=courseme feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 11:10:15 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 11:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:15 nativespace-cdp sshd[6992]: Failed password for root from 103.231.46.66 port 40470 ssh2
Oct  1 11:10:16 nativespace-cdp sshd[7009]: Failed password for invalid user sopuser from 104.131.93.177 port 35379 ssh2
Oct  1 11:10:16 nativespace-cdp sudo[7028]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Oct  1 11:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:18 nativespace-cdp sshd[6992]: Received disconnect from 103.231.46.66 port 40470:11: Bye Bye [preauth]
Oct  1 11:10:18 nativespace-cdp sshd[6992]: Disconnected from 103.231.46.66 port 40470 [preauth]
Oct  1 11:10:18 nativespace-cdp sudo[7087]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Oct  1 11:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  1 11:10:18 nativespace-cdp sudo[7095]: pam_unix(sudo:session): session closed for user onlycont
Oct  1 11:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Oct  1 11:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:19 nativespace-cdp sshd[7009]: Received disconnect from 104.131.93.177 port 35379:11: Bye Bye [preauth]
Oct  1 11:10:19 nativespace-cdp sshd[7009]: Disconnected from 104.131.93.177 port 35379 [preauth]
Oct  1 11:10:19 nativespace-cdp sudo[7107]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Oct  1 11:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 11:10:19 nativespace-cdp sudo[7120]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 11:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Oct  1 11:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:21 nativespace-cdp sudo[7143]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Oct  1 11:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  1 11:10:21 nativespace-cdp sudo[7149]: pam_unix(sudo:session): session closed for user lkpier
Oct  1 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Oct  1 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:22 nativespace-cdp sudo[7161]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Oct  1 11:10:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Oct  1 11:10:23 nativespace-cdp sudo[7166]: pam_unix(sudo:session): session closed for user bwppodcast
Oct  1 11:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Oct  1 11:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  1 11:10:23 nativespace-cdp sudo[7177]: pam_unix(sudo:session): session closed for user oneoarco
Oct  1 11:10:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Oct  1 11:10:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:24 nativespace-cdp sudo[7188]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Oct  1 11:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Oct  1 11:10:24 nativespace-cdp sudo[7194]: pam_unix(sudo:session): session closed for user fortunaz
Oct  1 11:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Oct  1 11:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:24 nativespace-cdp sudo[7205]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 11:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:24 nativespace-cdp sudo[7208]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:30 nativespace-cdp sshd[7487]: Invalid user test from 210.59.205.48 port 42038
Oct  1 11:10:30 nativespace-cdp sshd[7487]: input_userauth_request: invalid user test [preauth]
Oct  1 11:10:30 nativespace-cdp sshd[7487]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:10:30 nativespace-cdp sshd[7487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:10:33 nativespace-cdp sshd[7487]: Failed password for invalid user test from 210.59.205.48 port 42038 ssh2
Oct  1 11:10:33 nativespace-cdp sshd[7487]: Received disconnect from 210.59.205.48 port 42038:11: Bye Bye [preauth]
Oct  1 11:10:33 nativespace-cdp sshd[7487]: Disconnected from 210.59.205.48 port 42038 [preauth]
Oct  1 11:10:36 nativespace-cdp sshd[7832]: Invalid user tg from 46.181.61.58 port 48960
Oct  1 11:10:36 nativespace-cdp sshd[7832]: input_userauth_request: invalid user tg [preauth]
Oct  1 11:10:36 nativespace-cdp sshd[7832]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:10:36 nativespace-cdp sshd[7832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:10:38 nativespace-cdp sshd[7832]: Failed password for invalid user tg from 46.181.61.58 port 48960 ssh2
Oct  1 11:10:38 nativespace-cdp sshd[7832]: Received disconnect from 46.181.61.58 port 48960:11: Bye Bye [preauth]
Oct  1 11:10:38 nativespace-cdp sshd[7832]: Disconnected from 46.181.61.58 port 48960 [preauth]
Oct  1 11:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Oct  1 11:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:41 nativespace-cdp sudo[8176]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Oct  1 11:10:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:41 nativespace-cdp sudo[8181]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:46 nativespace-cdp sshd[8201]: Invalid user tom from 223.17.0.181 port 54828
Oct  1 11:10:46 nativespace-cdp sshd[8201]: input_userauth_request: invalid user tom [preauth]
Oct  1 11:10:46 nativespace-cdp sshd[8201]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:10:46 nativespace-cdp sshd[8201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:10:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 11:10:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:47 nativespace-cdp sudo[8214]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LlyBgHVZoDKdopEM.~
Oct  1 11:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:48 nativespace-cdp sudo[8218]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LlyBgHVZoDKdopEM.~'
Oct  1 11:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:48 nativespace-cdp sudo[8221]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-LlyBgHVZoDKdopEM.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 11:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:48 nativespace-cdp sudo[8225]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 11:10:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:48 nativespace-cdp sudo[8229]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:48 nativespace-cdp sshd[8201]: Failed password for invalid user tom from 223.17.0.181 port 54828 ssh2
Oct  1 11:10:49 nativespace-cdp sshd[8201]: Received disconnect from 223.17.0.181 port 54828:11: Bye Bye [preauth]
Oct  1 11:10:49 nativespace-cdp sshd[8201]: Disconnected from 223.17.0.181 port 54828 [preauth]
Oct  1 11:10:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 11:10:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 11:10:50 nativespace-cdp sudo[8245]: pam_unix(sudo:session): session closed for user root
Oct  1 11:10:53 nativespace-cdp sshd[8233]: Invalid user user from 104.131.93.177 port 41791
Oct  1 11:10:53 nativespace-cdp sshd[8233]: input_userauth_request: invalid user user [preauth]
Oct  1 11:10:53 nativespace-cdp sshd[8233]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:10:53 nativespace-cdp sshd[8233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:10:55 nativespace-cdp sshd[8233]: Failed password for invalid user user from 104.131.93.177 port 41791 ssh2
Oct  1 11:10:56 nativespace-cdp sshd[8233]: Received disconnect from 104.131.93.177 port 41791:11: Bye Bye [preauth]
Oct  1 11:10:56 nativespace-cdp sshd[8233]: Disconnected from 104.131.93.177 port 41791 [preauth]
Oct  1 11:11:08 nativespace-cdp sshd[8297]: Connection closed by 103.231.46.66 port 55208 [preauth]
Oct  1 11:11:08 nativespace-cdp sshd[8303]: Invalid user test from 200.109.234.38 port 39394
Oct  1 11:11:08 nativespace-cdp sshd[8303]: input_userauth_request: invalid user test [preauth]
Oct  1 11:11:08 nativespace-cdp sshd[8303]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:11:08 nativespace-cdp sshd[8303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:11:10 nativespace-cdp sshd[8303]: Failed password for invalid user test from 200.109.234.38 port 39394 ssh2
Oct  1 11:11:10 nativespace-cdp sshd[8303]: Received disconnect from 200.109.234.38 port 39394:11: Bye Bye [preauth]
Oct  1 11:11:10 nativespace-cdp sshd[8303]: Disconnected from 200.109.234.38 port 39394 [preauth]
Oct  1 11:11:26 nativespace-cdp sshd[8342]: Invalid user test from 104.131.93.177 port 48203
Oct  1 11:11:26 nativespace-cdp sshd[8342]: input_userauth_request: invalid user test [preauth]
Oct  1 11:11:26 nativespace-cdp sshd[8342]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:11:26 nativespace-cdp sshd[8342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:11:28 nativespace-cdp sshd[8342]: Failed password for invalid user test from 104.131.93.177 port 48203 ssh2
Oct  1 11:11:28 nativespace-cdp sshd[8342]: Received disconnect from 104.131.93.177 port 48203:11: Bye Bye [preauth]
Oct  1 11:11:28 nativespace-cdp sshd[8342]: Disconnected from 104.131.93.177 port 48203 [preauth]
Oct  1 11:11:33 nativespace-cdp sshd[8415]: Connection closed by 159.100.136.21 port 37154 [preauth]
Oct  1 11:11:44 nativespace-cdp sshd[8440]: Invalid user user from 223.17.0.181 port 58982
Oct  1 11:11:44 nativespace-cdp sshd[8440]: input_userauth_request: invalid user user [preauth]
Oct  1 11:11:44 nativespace-cdp sshd[8440]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:11:44 nativespace-cdp sshd[8440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:11:46 nativespace-cdp sshd[8440]: Failed password for invalid user user from 223.17.0.181 port 58982 ssh2
Oct  1 11:11:48 nativespace-cdp sshd[8440]: Received disconnect from 223.17.0.181 port 58982:11: Bye Bye [preauth]
Oct  1 11:11:48 nativespace-cdp sshd[8440]: Disconnected from 223.17.0.181 port 58982 [preauth]
Oct  1 11:11:57 nativespace-cdp sshd[8502]: Invalid user usuario from 103.231.46.66 port 41710
Oct  1 11:11:57 nativespace-cdp sshd[8502]: input_userauth_request: invalid user usuario [preauth]
Oct  1 11:11:57 nativespace-cdp sshd[8502]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:11:57 nativespace-cdp sshd[8502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:11:59 nativespace-cdp sshd[8502]: Failed password for invalid user usuario from 103.231.46.66 port 41710 ssh2
Oct  1 11:12:00 nativespace-cdp sshd[8502]: Received disconnect from 103.231.46.66 port 41710:11: Bye Bye [preauth]
Oct  1 11:12:00 nativespace-cdp sshd[8502]: Disconnected from 103.231.46.66 port 41710 [preauth]
Oct  1 11:12:02 nativespace-cdp sshd[8529]: Invalid user nexus from 104.131.93.177 port 54615
Oct  1 11:12:02 nativespace-cdp sshd[8529]: input_userauth_request: invalid user nexus [preauth]
Oct  1 11:12:02 nativespace-cdp sshd[8529]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:12:02 nativespace-cdp sshd[8529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:12:04 nativespace-cdp sshd[8529]: Failed password for invalid user nexus from 104.131.93.177 port 54615 ssh2
Oct  1 11:12:04 nativespace-cdp sshd[8529]: Received disconnect from 104.131.93.177 port 54615:11: Bye Bye [preauth]
Oct  1 11:12:04 nativespace-cdp sshd[8529]: Disconnected from 104.131.93.177 port 54615 [preauth]
Oct  1 11:12:13 nativespace-cdp sshd[8548]: Invalid user svn from 46.181.61.58 port 36324
Oct  1 11:12:13 nativespace-cdp sshd[8548]: input_userauth_request: invalid user svn [preauth]
Oct  1 11:12:13 nativespace-cdp sshd[8548]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:12:13 nativespace-cdp sshd[8548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:12:15 nativespace-cdp sshd[8548]: Failed password for invalid user svn from 46.181.61.58 port 36324 ssh2
Oct  1 11:12:15 nativespace-cdp sshd[8548]: Received disconnect from 46.181.61.58 port 36324:11: Bye Bye [preauth]
Oct  1 11:12:15 nativespace-cdp sshd[8548]: Disconnected from 46.181.61.58 port 36324 [preauth]
Oct  1 11:12:23 nativespace-cdp sshd[8574]: Invalid user user from 210.59.205.48 port 58152
Oct  1 11:12:23 nativespace-cdp sshd[8574]: input_userauth_request: invalid user user [preauth]
Oct  1 11:12:23 nativespace-cdp sshd[8574]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:12:23 nativespace-cdp sshd[8574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:12:26 nativespace-cdp sshd[8574]: Failed password for invalid user user from 210.59.205.48 port 58152 ssh2
Oct  1 11:12:26 nativespace-cdp sshd[8574]: Received disconnect from 210.59.205.48 port 58152:11: Bye Bye [preauth]
Oct  1 11:12:26 nativespace-cdp sshd[8574]: Disconnected from 210.59.205.48 port 58152 [preauth]
Oct  1 11:12:41 nativespace-cdp sshd[8707]: Invalid user test01 from 104.131.93.177 port 32794
Oct  1 11:12:41 nativespace-cdp sshd[8707]: input_userauth_request: invalid user test01 [preauth]
Oct  1 11:12:41 nativespace-cdp sshd[8707]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:12:41 nativespace-cdp sshd[8707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:12:44 nativespace-cdp sshd[8707]: Failed password for invalid user test01 from 104.131.93.177 port 32794 ssh2
Oct  1 11:12:46 nativespace-cdp sshd[8707]: Received disconnect from 104.131.93.177 port 32794:11: Bye Bye [preauth]
Oct  1 11:12:46 nativespace-cdp sshd[8707]: Disconnected from 104.131.93.177 port 32794 [preauth]
Oct  1 11:12:48 nativespace-cdp sshd[8716]: Invalid user tg from 223.17.0.181 port 34012
Oct  1 11:12:48 nativespace-cdp sshd[8716]: input_userauth_request: invalid user tg [preauth]
Oct  1 11:12:48 nativespace-cdp sshd[8716]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:12:48 nativespace-cdp sshd[8716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:12:50 nativespace-cdp sshd[8731]: Invalid user test from 200.109.234.38 port 41026
Oct  1 11:12:50 nativespace-cdp sshd[8731]: input_userauth_request: invalid user test [preauth]
Oct  1 11:12:50 nativespace-cdp sshd[8731]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:12:50 nativespace-cdp sshd[8731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:12:50 nativespace-cdp sshd[8733]: Invalid user sysadmin from 103.231.46.66 port 56460
Oct  1 11:12:50 nativespace-cdp sshd[8733]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 11:12:50 nativespace-cdp sshd[8733]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:12:50 nativespace-cdp sshd[8733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:12:50 nativespace-cdp sshd[8716]: Failed password for invalid user tg from 223.17.0.181 port 34012 ssh2
Oct  1 11:12:51 nativespace-cdp sshd[8716]: Received disconnect from 223.17.0.181 port 34012:11: Bye Bye [preauth]
Oct  1 11:12:51 nativespace-cdp sshd[8716]: Disconnected from 223.17.0.181 port 34012 [preauth]
Oct  1 11:12:51 nativespace-cdp sshd[8731]: Failed password for invalid user test from 200.109.234.38 port 41026 ssh2
Oct  1 11:12:52 nativespace-cdp sshd[8731]: Received disconnect from 200.109.234.38 port 41026:11: Bye Bye [preauth]
Oct  1 11:12:52 nativespace-cdp sshd[8731]: Disconnected from 200.109.234.38 port 41026 [preauth]
Oct  1 11:12:52 nativespace-cdp sshd[8733]: Failed password for invalid user sysadmin from 103.231.46.66 port 56460 ssh2
Oct  1 11:12:52 nativespace-cdp sshd[8733]: Received disconnect from 103.231.46.66 port 56460:11: Bye Bye [preauth]
Oct  1 11:12:52 nativespace-cdp sshd[8733]: Disconnected from 103.231.46.66 port 56460 [preauth]
Oct  1 11:13:21 nativespace-cdp sshd[8825]: Invalid user steam from 104.131.93.177 port 39206
Oct  1 11:13:21 nativespace-cdp sshd[8825]: input_userauth_request: invalid user steam [preauth]
Oct  1 11:13:21 nativespace-cdp sshd[8825]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:13:21 nativespace-cdp sshd[8825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:13:23 nativespace-cdp sshd[8825]: Failed password for invalid user steam from 104.131.93.177 port 39206 ssh2
Oct  1 11:13:23 nativespace-cdp sshd[8825]: Received disconnect from 104.131.93.177 port 39206:11: Bye Bye [preauth]
Oct  1 11:13:23 nativespace-cdp sshd[8825]: Disconnected from 104.131.93.177 port 39206 [preauth]
Oct  1 11:13:39 nativespace-cdp sshd[8864]: Invalid user abhishek from 223.17.0.181 port 42640
Oct  1 11:13:39 nativespace-cdp sshd[8864]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 11:13:39 nativespace-cdp sshd[8864]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:13:39 nativespace-cdp sshd[8864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:13:41 nativespace-cdp sshd[8864]: Failed password for invalid user abhishek from 223.17.0.181 port 42640 ssh2
Oct  1 11:13:42 nativespace-cdp sshd[8864]: Received disconnect from 223.17.0.181 port 42640:11: Bye Bye [preauth]
Oct  1 11:13:42 nativespace-cdp sshd[8864]: Disconnected from 223.17.0.181 port 42640 [preauth]
Oct  1 11:13:47 nativespace-cdp sshd[8894]: Invalid user user from 103.231.46.66 port 42960
Oct  1 11:13:47 nativespace-cdp sshd[8894]: input_userauth_request: invalid user user [preauth]
Oct  1 11:13:47 nativespace-cdp sshd[8894]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:13:47 nativespace-cdp sshd[8894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:13:48 nativespace-cdp sshd[8894]: Failed password for invalid user user from 103.231.46.66 port 42960 ssh2
Oct  1 11:13:48 nativespace-cdp sshd[8894]: Received disconnect from 103.231.46.66 port 42960:11: Bye Bye [preauth]
Oct  1 11:13:48 nativespace-cdp sshd[8894]: Disconnected from 103.231.46.66 port 42960 [preauth]
Oct  1 11:13:52 nativespace-cdp sshd[8913]: Invalid user deploy from 46.181.61.58 port 51920
Oct  1 11:13:52 nativespace-cdp sshd[8913]: input_userauth_request: invalid user deploy [preauth]
Oct  1 11:13:52 nativespace-cdp sshd[8913]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:13:52 nativespace-cdp sshd[8913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:13:54 nativespace-cdp sshd[8913]: Failed password for invalid user deploy from 46.181.61.58 port 51920 ssh2
Oct  1 11:13:59 nativespace-cdp sshd[8929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177  user=root
Oct  1 11:13:59 nativespace-cdp sshd[8929]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:13:59 nativespace-cdp sshd[8913]: Received disconnect from 46.181.61.58 port 51920:11: Bye Bye [preauth]
Oct  1 11:13:59 nativespace-cdp sshd[8913]: Disconnected from 46.181.61.58 port 51920 [preauth]
Oct  1 11:14:01 nativespace-cdp sshd[8929]: Failed password for root from 104.131.93.177 port 45618 ssh2
Oct  1 11:14:01 nativespace-cdp sshd[8929]: Received disconnect from 104.131.93.177 port 45618:11: Bye Bye [preauth]
Oct  1 11:14:01 nativespace-cdp sshd[8929]: Disconnected from 104.131.93.177 port 45618 [preauth]
Oct  1 11:14:09 nativespace-cdp sshd[8966]: Invalid user ubuntu from 210.59.205.48 port 46030
Oct  1 11:14:09 nativespace-cdp sshd[8966]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:14:09 nativespace-cdp sshd[8966]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:14:09 nativespace-cdp sshd[8966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:14:11 nativespace-cdp sshd[8966]: Failed password for invalid user ubuntu from 210.59.205.48 port 46030 ssh2
Oct  1 11:14:11 nativespace-cdp sshd[8966]: Received disconnect from 210.59.205.48 port 46030:11: Bye Bye [preauth]
Oct  1 11:14:11 nativespace-cdp sshd[8966]: Disconnected from 210.59.205.48 port 46030 [preauth]
Oct  1 11:14:28 nativespace-cdp sshd[9027]: Invalid user usuario from 200.109.234.38 port 50820
Oct  1 11:14:28 nativespace-cdp sshd[9027]: input_userauth_request: invalid user usuario [preauth]
Oct  1 11:14:28 nativespace-cdp sshd[9027]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:14:28 nativespace-cdp sshd[9027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:14:30 nativespace-cdp sshd[9027]: Failed password for invalid user usuario from 200.109.234.38 port 50820 ssh2
Oct  1 11:14:30 nativespace-cdp sshd[9027]: Received disconnect from 200.109.234.38 port 50820:11: Bye Bye [preauth]
Oct  1 11:14:30 nativespace-cdp sshd[9027]: Disconnected from 200.109.234.38 port 50820 [preauth]
Oct  1 11:14:31 nativespace-cdp sshd[9034]: Invalid user ali from 223.17.0.181 port 33088
Oct  1 11:14:31 nativespace-cdp sshd[9034]: input_userauth_request: invalid user ali [preauth]
Oct  1 11:14:31 nativespace-cdp sshd[9034]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:14:31 nativespace-cdp sshd[9034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:14:33 nativespace-cdp sshd[9034]: Failed password for invalid user ali from 223.17.0.181 port 33088 ssh2
Oct  1 11:14:33 nativespace-cdp sshd[9034]: Received disconnect from 223.17.0.181 port 33088:11: Bye Bye [preauth]
Oct  1 11:14:33 nativespace-cdp sshd[9034]: Disconnected from 223.17.0.181 port 33088 [preauth]
Oct  1 11:14:35 nativespace-cdp sshd[9051]: Invalid user vss from 104.131.93.177 port 52030
Oct  1 11:14:35 nativespace-cdp sshd[9051]: input_userauth_request: invalid user vss [preauth]
Oct  1 11:14:35 nativespace-cdp sshd[9051]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:14:35 nativespace-cdp sshd[9051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:14:38 nativespace-cdp sshd[9051]: Failed password for invalid user vss from 104.131.93.177 port 52030 ssh2
Oct  1 11:14:39 nativespace-cdp sshd[9051]: Received disconnect from 104.131.93.177 port 52030:11: Bye Bye [preauth]
Oct  1 11:14:39 nativespace-cdp sshd[9051]: Disconnected from 104.131.93.177 port 52030 [preauth]
Oct  1 11:14:44 nativespace-cdp sshd[9074]: Invalid user ubuntu from 103.231.46.66 port 57708
Oct  1 11:14:44 nativespace-cdp sshd[9074]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:14:44 nativespace-cdp sshd[9074]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:14:44 nativespace-cdp sshd[9074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:14:45 nativespace-cdp sshd[9074]: Failed password for invalid user ubuntu from 103.231.46.66 port 57708 ssh2
Oct  1 11:14:45 nativespace-cdp sshd[9074]: Received disconnect from 103.231.46.66 port 57708:11: Bye Bye [preauth]
Oct  1 11:14:45 nativespace-cdp sshd[9074]: Disconnected from 103.231.46.66 port 57708 [preauth]
Oct  1 11:15:12 nativespace-cdp sshd[9269]: Invalid user acer from 104.131.93.177 port 58442
Oct  1 11:15:12 nativespace-cdp sshd[9269]: input_userauth_request: invalid user acer [preauth]
Oct  1 11:15:12 nativespace-cdp sshd[9269]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:15:12 nativespace-cdp sshd[9269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:15:14 nativespace-cdp sshd[9269]: Failed password for invalid user acer from 104.131.93.177 port 58442 ssh2
Oct  1 11:15:14 nativespace-cdp sshd[9269]: Received disconnect from 104.131.93.177 port 58442:11: Bye Bye [preauth]
Oct  1 11:15:14 nativespace-cdp sshd[9269]: Disconnected from 104.131.93.177 port 58442 [preauth]
Oct  1 11:15:30 nativespace-cdp sshd[9315]: Invalid user sopuser from 46.181.61.58 port 39284
Oct  1 11:15:31 nativespace-cdp sshd[9315]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 11:15:31 nativespace-cdp sshd[9315]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:15:31 nativespace-cdp sshd[9315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:15:32 nativespace-cdp sshd[9315]: Failed password for invalid user sopuser from 46.181.61.58 port 39284 ssh2
Oct  1 11:15:32 nativespace-cdp sshd[9315]: Received disconnect from 46.181.61.58 port 39284:11: Bye Bye [preauth]
Oct  1 11:15:32 nativespace-cdp sshd[9315]: Disconnected from 46.181.61.58 port 39284 [preauth]
Oct  1 11:15:42 nativespace-cdp sshd[9337]: Invalid user test from 103.231.46.66 port 44220
Oct  1 11:15:42 nativespace-cdp sshd[9337]: input_userauth_request: invalid user test [preauth]
Oct  1 11:15:42 nativespace-cdp sshd[9337]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:15:42 nativespace-cdp sshd[9337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:15:42 nativespace-cdp sshd[9325]: Connection closed by 223.17.0.181 port 39078 [preauth]
Oct  1 11:15:43 nativespace-cdp sshd[9337]: Failed password for invalid user test from 103.231.46.66 port 44220 ssh2
Oct  1 11:15:44 nativespace-cdp sshd[9337]: Received disconnect from 103.231.46.66 port 44220:11: Bye Bye [preauth]
Oct  1 11:15:44 nativespace-cdp sshd[9337]: Disconnected from 103.231.46.66 port 44220 [preauth]
Oct  1 11:15:47 nativespace-cdp sshd[9360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177  user=root
Oct  1 11:15:47 nativespace-cdp sshd[9360]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:15:49 nativespace-cdp sshd[9360]: Failed password for root from 104.131.93.177 port 36621 ssh2
Oct  1 11:15:49 nativespace-cdp sshd[9360]: Received disconnect from 104.131.93.177 port 36621:11: Bye Bye [preauth]
Oct  1 11:15:49 nativespace-cdp sshd[9360]: Disconnected from 104.131.93.177 port 36621 [preauth]
Oct  1 11:15:51 nativespace-cdp sshd[9421]: Invalid user ubuntu from 210.59.205.48 port 33910
Oct  1 11:15:51 nativespace-cdp sshd[9421]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:15:51 nativespace-cdp sshd[9421]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:15:51 nativespace-cdp sshd[9421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:15:52 nativespace-cdp sshd[9421]: Failed password for invalid user ubuntu from 210.59.205.48 port 33910 ssh2
Oct  1 11:15:53 nativespace-cdp sshd[9421]: Received disconnect from 210.59.205.48 port 33910:11: Bye Bye [preauth]
Oct  1 11:15:53 nativespace-cdp sshd[9421]: Disconnected from 210.59.205.48 port 33910 [preauth]
Oct  1 11:16:22 nativespace-cdp sshd[9600]: Invalid user username from 104.131.93.177 port 43033
Oct  1 11:16:22 nativespace-cdp sshd[9600]: input_userauth_request: invalid user username [preauth]
Oct  1 11:16:22 nativespace-cdp sshd[9600]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:16:22 nativespace-cdp sshd[9600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:16:24 nativespace-cdp sshd[9600]: Failed password for invalid user username from 104.131.93.177 port 43033 ssh2
Oct  1 11:16:24 nativespace-cdp sshd[9600]: Received disconnect from 104.131.93.177 port 43033:11: Bye Bye [preauth]
Oct  1 11:16:24 nativespace-cdp sshd[9600]: Disconnected from 104.131.93.177 port 43033 [preauth]
Oct  1 11:16:29 nativespace-cdp sshd[9618]: Invalid user tuan from 223.17.0.181 port 56004
Oct  1 11:16:29 nativespace-cdp sshd[9618]: input_userauth_request: invalid user tuan [preauth]
Oct  1 11:16:29 nativespace-cdp sshd[9618]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:16:29 nativespace-cdp sshd[9618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:16:31 nativespace-cdp sshd[9618]: Failed password for invalid user tuan from 223.17.0.181 port 56004 ssh2
Oct  1 11:16:32 nativespace-cdp sshd[9618]: Received disconnect from 223.17.0.181 port 56004:11: Bye Bye [preauth]
Oct  1 11:16:32 nativespace-cdp sshd[9618]: Disconnected from 223.17.0.181 port 56004 [preauth]
Oct  1 11:16:33 nativespace-cdp sshd[9629]: Connection closed by 159.100.136.21 port 46592 [preauth]
Oct  1 11:16:36 nativespace-cdp sshd[9638]: Invalid user support from 103.231.46.66 port 58966
Oct  1 11:16:36 nativespace-cdp sshd[9638]: input_userauth_request: invalid user support [preauth]
Oct  1 11:16:36 nativespace-cdp sshd[9638]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:16:36 nativespace-cdp sshd[9638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:16:38 nativespace-cdp sshd[9638]: Failed password for invalid user support from 103.231.46.66 port 58966 ssh2
Oct  1 11:16:38 nativespace-cdp sshd[9638]: Received disconnect from 103.231.46.66 port 58966:11: Bye Bye [preauth]
Oct  1 11:16:38 nativespace-cdp sshd[9638]: Disconnected from 103.231.46.66 port 58966 [preauth]
Oct  1 11:16:58 nativespace-cdp sshd[9688]: Invalid user user from 104.131.93.177 port 49445
Oct  1 11:16:58 nativespace-cdp sshd[9688]: input_userauth_request: invalid user user [preauth]
Oct  1 11:16:58 nativespace-cdp sshd[9688]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:16:58 nativespace-cdp sshd[9688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:17:00 nativespace-cdp sshd[9688]: Failed password for invalid user user from 104.131.93.177 port 49445 ssh2
Oct  1 11:17:01 nativespace-cdp sshd[9688]: Received disconnect from 104.131.93.177 port 49445:11: Bye Bye [preauth]
Oct  1 11:17:01 nativespace-cdp sshd[9688]: Disconnected from 104.131.93.177 port 49445 [preauth]
Oct  1 11:17:11 nativespace-cdp sshd[9726]: Invalid user ubuntu from 46.181.61.58 port 54880
Oct  1 11:17:11 nativespace-cdp sshd[9726]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:17:11 nativespace-cdp sshd[9726]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:17:11 nativespace-cdp sshd[9726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:17:13 nativespace-cdp sshd[9726]: Failed password for invalid user ubuntu from 46.181.61.58 port 54880 ssh2
Oct  1 11:17:13 nativespace-cdp sshd[9726]: Received disconnect from 46.181.61.58 port 54880:11: Bye Bye [preauth]
Oct  1 11:17:13 nativespace-cdp sshd[9726]: Disconnected from 46.181.61.58 port 54880 [preauth]
Oct  1 11:17:19 nativespace-cdp sshd[9755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181  user=root
Oct  1 11:17:19 nativespace-cdp sshd[9755]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:17:20 nativespace-cdp sshd[9755]: Failed password for root from 223.17.0.181 port 59256 ssh2
Oct  1 11:17:20 nativespace-cdp sshd[9755]: Received disconnect from 223.17.0.181 port 59256:11: Bye Bye [preauth]
Oct  1 11:17:20 nativespace-cdp sshd[9755]: Disconnected from 223.17.0.181 port 59256 [preauth]
Oct  1 11:17:33 nativespace-cdp sshd[9879]: Invalid user ubuntu from 103.231.46.66 port 45476
Oct  1 11:17:33 nativespace-cdp sshd[9879]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:17:33 nativespace-cdp sshd[9879]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:17:33 nativespace-cdp sshd[9879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:17:35 nativespace-cdp sshd[9879]: Failed password for invalid user ubuntu from 103.231.46.66 port 45476 ssh2
Oct  1 11:17:35 nativespace-cdp sshd[9885]: Invalid user test from 104.131.93.177 port 55857
Oct  1 11:17:35 nativespace-cdp sshd[9885]: input_userauth_request: invalid user test [preauth]
Oct  1 11:17:35 nativespace-cdp sshd[9885]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:17:35 nativespace-cdp sshd[9885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:17:35 nativespace-cdp sshd[9879]: Received disconnect from 103.231.46.66 port 45476:11: Bye Bye [preauth]
Oct  1 11:17:35 nativespace-cdp sshd[9879]: Disconnected from 103.231.46.66 port 45476 [preauth]
Oct  1 11:17:36 nativespace-cdp sshd[9887]: Invalid user tuan from 210.59.205.48 port 50020
Oct  1 11:17:36 nativespace-cdp sshd[9887]: input_userauth_request: invalid user tuan [preauth]
Oct  1 11:17:36 nativespace-cdp sshd[9887]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:17:36 nativespace-cdp sshd[9887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:17:37 nativespace-cdp sshd[9885]: Failed password for invalid user test from 104.131.93.177 port 55857 ssh2
Oct  1 11:17:38 nativespace-cdp sshd[9887]: Failed password for invalid user tuan from 210.59.205.48 port 50020 ssh2
Oct  1 11:17:39 nativespace-cdp sshd[9887]: Received disconnect from 210.59.205.48 port 50020:11: Bye Bye [preauth]
Oct  1 11:17:39 nativespace-cdp sshd[9887]: Disconnected from 210.59.205.48 port 50020 [preauth]
Oct  1 11:17:39 nativespace-cdp sshd[9885]: Received disconnect from 104.131.93.177 port 55857:11: Bye Bye [preauth]
Oct  1 11:17:39 nativespace-cdp sshd[9885]: Disconnected from 104.131.93.177 port 55857 [preauth]
Oct  1 11:18:03 nativespace-cdp sshd[10081]: Invalid user ali from 200.109.234.38 port 53536
Oct  1 11:18:03 nativespace-cdp sshd[10081]: input_userauth_request: invalid user ali [preauth]
Oct  1 11:18:03 nativespace-cdp sshd[10081]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:18:03 nativespace-cdp sshd[10081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:18:05 nativespace-cdp sshd[10081]: Failed password for invalid user ali from 200.109.234.38 port 53536 ssh2
Oct  1 11:18:05 nativespace-cdp sshd[10081]: Received disconnect from 200.109.234.38 port 53536:11: Bye Bye [preauth]
Oct  1 11:18:05 nativespace-cdp sshd[10081]: Disconnected from 200.109.234.38 port 53536 [preauth]
Oct  1 11:18:12 nativespace-cdp sshd[10130]: Invalid user test from 104.131.93.177 port 34036
Oct  1 11:18:12 nativespace-cdp sshd[10130]: input_userauth_request: invalid user test [preauth]
Oct  1 11:18:12 nativespace-cdp sshd[10130]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:18:12 nativespace-cdp sshd[10130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:18:12 nativespace-cdp sshd[10122]: Connection closed by 223.17.0.181 port 36940 [preauth]
Oct  1 11:18:14 nativespace-cdp sshd[10130]: Failed password for invalid user test from 104.131.93.177 port 34036 ssh2
Oct  1 11:18:14 nativespace-cdp sshd[10130]: Received disconnect from 104.131.93.177 port 34036:11: Bye Bye [preauth]
Oct  1 11:18:14 nativespace-cdp sshd[10130]: Disconnected from 104.131.93.177 port 34036 [preauth]
Oct  1 11:18:33 nativespace-cdp sshd[10188]: Invalid user user from 103.231.46.66 port 60214
Oct  1 11:18:33 nativespace-cdp sshd[10188]: input_userauth_request: invalid user user [preauth]
Oct  1 11:18:33 nativespace-cdp sshd[10188]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:18:33 nativespace-cdp sshd[10188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:18:36 nativespace-cdp sshd[10188]: Failed password for invalid user user from 103.231.46.66 port 60214 ssh2
Oct  1 11:18:36 nativespace-cdp sshd[10188]: Received disconnect from 103.231.46.66 port 60214:11: Bye Bye [preauth]
Oct  1 11:18:36 nativespace-cdp sshd[10188]: Disconnected from 103.231.46.66 port 60214 [preauth]
Oct  1 11:18:49 nativespace-cdp sshd[10239]: Invalid user ubuntu from 104.131.93.177 port 40448
Oct  1 11:18:49 nativespace-cdp sshd[10239]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:18:49 nativespace-cdp sshd[10239]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:18:49 nativespace-cdp sshd[10239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:18:50 nativespace-cdp sshd[10245]: Invalid user test from 46.181.61.58 port 42244
Oct  1 11:18:50 nativespace-cdp sshd[10245]: input_userauth_request: invalid user test [preauth]
Oct  1 11:18:50 nativespace-cdp sshd[10245]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:18:50 nativespace-cdp sshd[10245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:18:52 nativespace-cdp sshd[10245]: Failed password for invalid user test from 46.181.61.58 port 42244 ssh2
Oct  1 11:18:52 nativespace-cdp sshd[10239]: Failed password for invalid user ubuntu from 104.131.93.177 port 40448 ssh2
Oct  1 11:18:55 nativespace-cdp sshd[10245]: Received disconnect from 46.181.61.58 port 42244:11: Bye Bye [preauth]
Oct  1 11:18:55 nativespace-cdp sshd[10245]: Disconnected from 46.181.61.58 port 42244 [preauth]
Oct  1 11:18:55 nativespace-cdp sshd[10239]: Received disconnect from 104.131.93.177 port 40448:11: Bye Bye [preauth]
Oct  1 11:18:55 nativespace-cdp sshd[10239]: Disconnected from 104.131.93.177 port 40448 [preauth]
Oct  1 11:19:06 nativespace-cdp sshd[10286]: Invalid user tomcat from 223.17.0.181 port 52836
Oct  1 11:19:06 nativespace-cdp sshd[10286]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 11:19:06 nativespace-cdp sshd[10286]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:19:06 nativespace-cdp sshd[10286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:19:08 nativespace-cdp sshd[10286]: Failed password for invalid user tomcat from 223.17.0.181 port 52836 ssh2
Oct  1 11:19:08 nativespace-cdp sshd[10286]: Received disconnect from 223.17.0.181 port 52836:11: Bye Bye [preauth]
Oct  1 11:19:08 nativespace-cdp sshd[10286]: Disconnected from 223.17.0.181 port 52836 [preauth]
Oct  1 11:19:22 nativespace-cdp sshd[10329]: Invalid user sopuser from 210.59.205.48 port 37898
Oct  1 11:19:22 nativespace-cdp sshd[10329]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 11:19:22 nativespace-cdp sshd[10329]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:19:22 nativespace-cdp sshd[10329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:19:25 nativespace-cdp sshd[10329]: Failed password for invalid user sopuser from 210.59.205.48 port 37898 ssh2
Oct  1 11:19:27 nativespace-cdp sshd[10341]: Invalid user tg from 104.131.93.177 port 46860
Oct  1 11:19:27 nativespace-cdp sshd[10341]: input_userauth_request: invalid user tg [preauth]
Oct  1 11:19:27 nativespace-cdp sshd[10341]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:19:27 nativespace-cdp sshd[10341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:19:28 nativespace-cdp sshd[10329]: Received disconnect from 210.59.205.48 port 37898:11: Bye Bye [preauth]
Oct  1 11:19:28 nativespace-cdp sshd[10329]: Disconnected from 210.59.205.48 port 37898 [preauth]
Oct  1 11:19:29 nativespace-cdp sshd[10341]: Failed password for invalid user tg from 104.131.93.177 port 46860 ssh2
Oct  1 11:19:29 nativespace-cdp sshd[10341]: Received disconnect from 104.131.93.177 port 46860:11: Bye Bye [preauth]
Oct  1 11:19:29 nativespace-cdp sshd[10341]: Disconnected from 104.131.93.177 port 46860 [preauth]
Oct  1 11:19:29 nativespace-cdp sshd[10345]: Invalid user svn from 103.231.46.66 port 46720
Oct  1 11:19:29 nativespace-cdp sshd[10345]: input_userauth_request: invalid user svn [preauth]
Oct  1 11:19:29 nativespace-cdp sshd[10345]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:19:29 nativespace-cdp sshd[10345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:19:32 nativespace-cdp sshd[10345]: Failed password for invalid user svn from 103.231.46.66 port 46720 ssh2
Oct  1 11:19:32 nativespace-cdp sshd[10345]: Received disconnect from 103.231.46.66 port 46720:11: Bye Bye [preauth]
Oct  1 11:19:32 nativespace-cdp sshd[10345]: Disconnected from 103.231.46.66 port 46720 [preauth]
Oct  1 11:19:53 nativespace-cdp sshd[10571]: Invalid user user from 200.109.234.38 port 59922
Oct  1 11:19:53 nativespace-cdp sshd[10571]: input_userauth_request: invalid user user [preauth]
Oct  1 11:19:53 nativespace-cdp sshd[10571]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:19:53 nativespace-cdp sshd[10571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:19:56 nativespace-cdp sshd[10571]: Failed password for invalid user user from 200.109.234.38 port 59922 ssh2
Oct  1 11:19:56 nativespace-cdp sshd[10571]: Received disconnect from 200.109.234.38 port 59922:11: Bye Bye [preauth]
Oct  1 11:19:56 nativespace-cdp sshd[10571]: Disconnected from 200.109.234.38 port 59922 [preauth]
Oct  1 11:20:03 nativespace-cdp sshd[10804]: Invalid user ubuntu from 104.131.93.177 port 53272
Oct  1 11:20:03 nativespace-cdp sshd[10804]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:20:03 nativespace-cdp sshd[10804]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:20:03 nativespace-cdp sshd[10804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:20:05 nativespace-cdp sshd[10804]: Failed password for invalid user ubuntu from 104.131.93.177 port 53272 ssh2
Oct  1 11:20:05 nativespace-cdp sshd[10804]: Received disconnect from 104.131.93.177 port 53272:11: Bye Bye [preauth]
Oct  1 11:20:05 nativespace-cdp sshd[10804]: Disconnected from 104.131.93.177 port 53272 [preauth]
Oct  1 11:20:15 nativespace-cdp sshd[10842]: Invalid user test01 from 223.17.0.181 port 45144
Oct  1 11:20:15 nativespace-cdp sshd[10842]: input_userauth_request: invalid user test01 [preauth]
Oct  1 11:20:15 nativespace-cdp sshd[10842]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:20:15 nativespace-cdp sshd[10842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:20:17 nativespace-cdp sshd[10842]: Failed password for invalid user test01 from 223.17.0.181 port 45144 ssh2
Oct  1 11:20:22 nativespace-cdp sshd[10842]: Received disconnect from 223.17.0.181 port 45144:11: Bye Bye [preauth]
Oct  1 11:20:22 nativespace-cdp sshd[10842]: Disconnected from 223.17.0.181 port 45144 [preauth]
Oct  1 11:20:26 nativespace-cdp sshd[10875]: Invalid user nexus from 103.231.46.66 port 33226
Oct  1 11:20:26 nativespace-cdp sshd[10875]: input_userauth_request: invalid user nexus [preauth]
Oct  1 11:20:26 nativespace-cdp sshd[10875]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:20:26 nativespace-cdp sshd[10875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:20:28 nativespace-cdp sshd[10875]: Failed password for invalid user nexus from 103.231.46.66 port 33226 ssh2
Oct  1 11:20:30 nativespace-cdp sshd[10875]: Received disconnect from 103.231.46.66 port 33226:11: Bye Bye [preauth]
Oct  1 11:20:30 nativespace-cdp sshd[10875]: Disconnected from 103.231.46.66 port 33226 [preauth]
Oct  1 11:20:31 nativespace-cdp sshd[10930]: Invalid user test01 from 46.181.61.58 port 57844
Oct  1 11:20:31 nativespace-cdp sshd[10930]: input_userauth_request: invalid user test01 [preauth]
Oct  1 11:20:31 nativespace-cdp sshd[10930]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:20:31 nativespace-cdp sshd[10930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:20:32 nativespace-cdp sshd[10930]: Failed password for invalid user test01 from 46.181.61.58 port 57844 ssh2
Oct  1 11:20:33 nativespace-cdp sshd[10930]: Received disconnect from 46.181.61.58 port 57844:11: Bye Bye [preauth]
Oct  1 11:20:33 nativespace-cdp sshd[10930]: Disconnected from 46.181.61.58 port 57844 [preauth]
Oct  1 11:20:45 nativespace-cdp sshd[10972]: Invalid user support from 104.131.93.177 port 59684
Oct  1 11:20:45 nativespace-cdp sshd[10972]: input_userauth_request: invalid user support [preauth]
Oct  1 11:20:45 nativespace-cdp sshd[10972]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:20:45 nativespace-cdp sshd[10972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:20:46 nativespace-cdp sshd[10972]: Failed password for invalid user support from 104.131.93.177 port 59684 ssh2
Oct  1 11:20:47 nativespace-cdp sshd[10972]: Received disconnect from 104.131.93.177 port 59684:11: Bye Bye [preauth]
Oct  1 11:20:47 nativespace-cdp sshd[10972]: Disconnected from 104.131.93.177 port 59684 [preauth]
Oct  1 11:21:10 nativespace-cdp sshd[11051]: Invalid user support from 210.59.205.48 port 54008
Oct  1 11:21:10 nativespace-cdp sshd[11051]: input_userauth_request: invalid user support [preauth]
Oct  1 11:21:10 nativespace-cdp sshd[11051]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:21:10 nativespace-cdp sshd[11051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:21:12 nativespace-cdp sshd[11051]: Failed password for invalid user support from 210.59.205.48 port 54008 ssh2
Oct  1 11:21:12 nativespace-cdp sshd[11051]: Received disconnect from 210.59.205.48 port 54008:11: Bye Bye [preauth]
Oct  1 11:21:12 nativespace-cdp sshd[11051]: Disconnected from 210.59.205.48 port 54008 [preauth]
Oct  1 11:21:20 nativespace-cdp sshd[11075]: Invalid user ubuntu from 104.131.93.177 port 37863
Oct  1 11:21:20 nativespace-cdp sshd[11075]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:21:20 nativespace-cdp sshd[11075]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:21:20 nativespace-cdp sshd[11075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:21:22 nativespace-cdp sshd[11075]: Failed password for invalid user ubuntu from 104.131.93.177 port 37863 ssh2
Oct  1 11:21:22 nativespace-cdp sshd[11079]: Invalid user ali from 103.231.46.66 port 47964
Oct  1 11:21:22 nativespace-cdp sshd[11079]: input_userauth_request: invalid user ali [preauth]
Oct  1 11:21:22 nativespace-cdp sshd[11079]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:21:22 nativespace-cdp sshd[11079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:21:22 nativespace-cdp sshd[11075]: Received disconnect from 104.131.93.177 port 37863:11: Bye Bye [preauth]
Oct  1 11:21:22 nativespace-cdp sshd[11075]: Disconnected from 104.131.93.177 port 37863 [preauth]
Oct  1 11:21:24 nativespace-cdp sshd[11079]: Failed password for invalid user ali from 103.231.46.66 port 47964 ssh2
Oct  1 11:21:24 nativespace-cdp sshd[11079]: Received disconnect from 103.231.46.66 port 47964:11: Bye Bye [preauth]
Oct  1 11:21:24 nativespace-cdp sshd[11079]: Disconnected from 103.231.46.66 port 47964 [preauth]
Oct  1 11:21:33 nativespace-cdp sshd[11108]: Connection closed by 159.100.136.21 port 55354 [preauth]
Oct  1 11:21:49 nativespace-cdp sshd[11136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38  user=root
Oct  1 11:21:49 nativespace-cdp sshd[11136]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:21:52 nativespace-cdp sshd[11136]: Failed password for root from 200.109.234.38 port 53868 ssh2
Oct  1 11:21:52 nativespace-cdp sshd[11136]: Received disconnect from 200.109.234.38 port 53868:11: Bye Bye [preauth]
Oct  1 11:21:52 nativespace-cdp sshd[11136]: Disconnected from 200.109.234.38 port 53868 [preauth]
Oct  1 11:21:58 nativespace-cdp sshd[11168]: Invalid user odoo from 104.131.93.177 port 44275
Oct  1 11:21:58 nativespace-cdp sshd[11168]: input_userauth_request: invalid user odoo [preauth]
Oct  1 11:21:58 nativespace-cdp sshd[11168]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:21:58 nativespace-cdp sshd[11168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:22:00 nativespace-cdp sshd[11168]: Failed password for invalid user odoo from 104.131.93.177 port 44275 ssh2
Oct  1 11:22:00 nativespace-cdp sshd[11168]: Received disconnect from 104.131.93.177 port 44275:11: Bye Bye [preauth]
Oct  1 11:22:00 nativespace-cdp sshd[11168]: Disconnected from 104.131.93.177 port 44275 [preauth]
Oct  1 11:22:00 nativespace-cdp sshd[11173]: Invalid user test from 223.17.0.181 port 45300
Oct  1 11:22:00 nativespace-cdp sshd[11173]: input_userauth_request: invalid user test [preauth]
Oct  1 11:22:00 nativespace-cdp sshd[11173]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:22:00 nativespace-cdp sshd[11173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:22:02 nativespace-cdp sshd[11173]: Failed password for invalid user test from 223.17.0.181 port 45300 ssh2
Oct  1 11:22:11 nativespace-cdp sshd[11214]: Invalid user test from 46.181.61.58 port 45208
Oct  1 11:22:11 nativespace-cdp sshd[11214]: input_userauth_request: invalid user test [preauth]
Oct  1 11:22:11 nativespace-cdp sshd[11214]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:22:11 nativespace-cdp sshd[11214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:22:11 nativespace-cdp sshd[11173]: Received disconnect from 223.17.0.181 port 45300:11: Bye Bye [preauth]
Oct  1 11:22:11 nativespace-cdp sshd[11173]: Disconnected from 223.17.0.181 port 45300 [preauth]
Oct  1 11:22:12 nativespace-cdp sshd[11214]: Failed password for invalid user test from 46.181.61.58 port 45208 ssh2
Oct  1 11:22:13 nativespace-cdp sshd[11214]: Received disconnect from 46.181.61.58 port 45208:11: Bye Bye [preauth]
Oct  1 11:22:13 nativespace-cdp sshd[11214]: Disconnected from 46.181.61.58 port 45208 [preauth]
Oct  1 11:22:18 nativespace-cdp sshd[11237]: Invalid user username from 103.231.46.66 port 34484
Oct  1 11:22:18 nativespace-cdp sshd[11237]: input_userauth_request: invalid user username [preauth]
Oct  1 11:22:18 nativespace-cdp sshd[11237]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:22:18 nativespace-cdp sshd[11237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:22:20 nativespace-cdp sshd[11237]: Failed password for invalid user username from 103.231.46.66 port 34484 ssh2
Oct  1 11:22:20 nativespace-cdp sshd[11237]: Received disconnect from 103.231.46.66 port 34484:11: Bye Bye [preauth]
Oct  1 11:22:20 nativespace-cdp sshd[11237]: Disconnected from 103.231.46.66 port 34484 [preauth]
Oct  1 11:22:30 nativespace-cdp sshd[11272]: Invalid user superman from 104.131.93.177 port 50687
Oct  1 11:22:30 nativespace-cdp sshd[11272]: input_userauth_request: invalid user superman [preauth]
Oct  1 11:22:30 nativespace-cdp sshd[11272]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:22:30 nativespace-cdp sshd[11272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:22:32 nativespace-cdp sshd[11272]: Failed password for invalid user superman from 104.131.93.177 port 50687 ssh2
Oct  1 11:22:32 nativespace-cdp sshd[11272]: Received disconnect from 104.131.93.177 port 50687:11: Bye Bye [preauth]
Oct  1 11:22:32 nativespace-cdp sshd[11272]: Disconnected from 104.131.93.177 port 50687 [preauth]
Oct  1 11:23:01 nativespace-cdp sshd[11502]: Invalid user ali from 210.59.205.48 port 41886
Oct  1 11:23:01 nativespace-cdp sshd[11502]: input_userauth_request: invalid user ali [preauth]
Oct  1 11:23:01 nativespace-cdp sshd[11502]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:23:01 nativespace-cdp sshd[11502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:23:03 nativespace-cdp sshd[11502]: Failed password for invalid user ali from 210.59.205.48 port 41886 ssh2
Oct  1 11:23:04 nativespace-cdp sshd[11502]: Received disconnect from 210.59.205.48 port 41886:11: Bye Bye [preauth]
Oct  1 11:23:04 nativespace-cdp sshd[11502]: Disconnected from 210.59.205.48 port 41886 [preauth]
Oct  1 11:23:06 nativespace-cdp sshd[11544]: Invalid user user from 104.131.93.177 port 57099
Oct  1 11:23:06 nativespace-cdp sshd[11544]: input_userauth_request: invalid user user [preauth]
Oct  1 11:23:06 nativespace-cdp sshd[11544]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:23:06 nativespace-cdp sshd[11544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:23:08 nativespace-cdp sshd[11544]: Failed password for invalid user user from 104.131.93.177 port 57099 ssh2
Oct  1 11:23:09 nativespace-cdp sshd[11544]: Received disconnect from 104.131.93.177 port 57099:11: Bye Bye [preauth]
Oct  1 11:23:09 nativespace-cdp sshd[11544]: Disconnected from 104.131.93.177 port 57099 [preauth]
Oct  1 11:23:16 nativespace-cdp sshd[11566]: Invalid user test from 103.231.46.66 port 49214
Oct  1 11:23:16 nativespace-cdp sshd[11566]: input_userauth_request: invalid user test [preauth]
Oct  1 11:23:16 nativespace-cdp sshd[11566]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:23:16 nativespace-cdp sshd[11566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:23:18 nativespace-cdp sshd[11566]: Failed password for invalid user test from 103.231.46.66 port 49214 ssh2
Oct  1 11:23:18 nativespace-cdp sshd[11566]: Received disconnect from 103.231.46.66 port 49214:11: Bye Bye [preauth]
Oct  1 11:23:18 nativespace-cdp sshd[11566]: Disconnected from 103.231.46.66 port 49214 [preauth]
Oct  1 11:23:38 nativespace-cdp sshd[11621]: Invalid user tomcat from 200.109.234.38 port 38744
Oct  1 11:23:38 nativespace-cdp sshd[11621]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 11:23:38 nativespace-cdp sshd[11621]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:23:38 nativespace-cdp sshd[11621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:23:40 nativespace-cdp sshd[11621]: Failed password for invalid user tomcat from 200.109.234.38 port 38744 ssh2
Oct  1 11:23:41 nativespace-cdp sshd[11621]: Received disconnect from 200.109.234.38 port 38744:11: Bye Bye [preauth]
Oct  1 11:23:41 nativespace-cdp sshd[11621]: Disconnected from 200.109.234.38 port 38744 [preauth]
Oct  1 11:23:43 nativespace-cdp sshd[11651]: Invalid user usuario from 104.131.93.177 port 35278
Oct  1 11:23:43 nativespace-cdp sshd[11651]: input_userauth_request: invalid user usuario [preauth]
Oct  1 11:23:43 nativespace-cdp sshd[11651]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:23:43 nativespace-cdp sshd[11651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:23:45 nativespace-cdp sshd[11651]: Failed password for invalid user usuario from 104.131.93.177 port 35278 ssh2
Oct  1 11:23:45 nativespace-cdp sshd[11651]: Received disconnect from 104.131.93.177 port 35278:11: Bye Bye [preauth]
Oct  1 11:23:45 nativespace-cdp sshd[11651]: Disconnected from 104.131.93.177 port 35278 [preauth]
Oct  1 11:23:54 nativespace-cdp sshd[11678]: Invalid user testuser from 46.181.61.58 port 60808
Oct  1 11:23:54 nativespace-cdp sshd[11678]: input_userauth_request: invalid user testuser [preauth]
Oct  1 11:23:54 nativespace-cdp sshd[11678]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:23:54 nativespace-cdp sshd[11678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:23:56 nativespace-cdp sshd[11678]: Failed password for invalid user testuser from 46.181.61.58 port 60808 ssh2
Oct  1 11:23:56 nativespace-cdp sshd[11678]: Received disconnect from 46.181.61.58 port 60808:11: Bye Bye [preauth]
Oct  1 11:23:56 nativespace-cdp sshd[11678]: Disconnected from 46.181.61.58 port 60808 [preauth]
Oct  1 11:24:06 nativespace-cdp sshd[11722]: Invalid user user from 223.17.0.181 port 56260
Oct  1 11:24:06 nativespace-cdp sshd[11722]: input_userauth_request: invalid user user [preauth]
Oct  1 11:24:06 nativespace-cdp sshd[11722]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:24:06 nativespace-cdp sshd[11722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:24:08 nativespace-cdp sshd[11722]: Failed password for invalid user user from 223.17.0.181 port 56260 ssh2
Oct  1 11:24:13 nativespace-cdp sshd[11722]: Received disconnect from 223.17.0.181 port 56260:11: Bye Bye [preauth]
Oct  1 11:24:13 nativespace-cdp sshd[11722]: Disconnected from 223.17.0.181 port 56260 [preauth]
Oct  1 11:24:14 nativespace-cdp sshd[11755]: Invalid user testuser from 103.231.46.66 port 35724
Oct  1 11:24:14 nativespace-cdp sshd[11755]: input_userauth_request: invalid user testuser [preauth]
Oct  1 11:24:14 nativespace-cdp sshd[11755]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:24:14 nativespace-cdp sshd[11755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:24:16 nativespace-cdp sshd[11755]: Failed password for invalid user testuser from 103.231.46.66 port 35724 ssh2
Oct  1 11:24:17 nativespace-cdp sshd[11755]: Received disconnect from 103.231.46.66 port 35724:11: Bye Bye [preauth]
Oct  1 11:24:17 nativespace-cdp sshd[11755]: Disconnected from 103.231.46.66 port 35724 [preauth]
Oct  1 11:24:21 nativespace-cdp sshd[11773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177  user=root
Oct  1 11:24:21 nativespace-cdp sshd[11773]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:24:23 nativespace-cdp sshd[11773]: Failed password for root from 104.131.93.177 port 41689 ssh2
Oct  1 11:24:23 nativespace-cdp sshd[11773]: Received disconnect from 104.131.93.177 port 41689:11: Bye Bye [preauth]
Oct  1 11:24:23 nativespace-cdp sshd[11773]: Disconnected from 104.131.93.177 port 41689 [preauth]
Oct  1 11:24:56 nativespace-cdp sshd[11948]: Invalid user hz from 210.59.205.48 port 58002
Oct  1 11:24:56 nativespace-cdp sshd[11948]: input_userauth_request: invalid user hz [preauth]
Oct  1 11:24:56 nativespace-cdp sshd[11948]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:24:56 nativespace-cdp sshd[11948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:24:58 nativespace-cdp sshd[11948]: Failed password for invalid user hz from 210.59.205.48 port 58002 ssh2
Oct  1 11:24:58 nativespace-cdp sshd[11948]: Received disconnect from 210.59.205.48 port 58002:11: Bye Bye [preauth]
Oct  1 11:24:58 nativespace-cdp sshd[11948]: Disconnected from 210.59.205.48 port 58002 [preauth]
Oct  1 11:25:00 nativespace-cdp sshd[11962]: Invalid user ubuntu from 104.131.93.177 port 48102
Oct  1 11:25:00 nativespace-cdp sshd[11962]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:25:00 nativespace-cdp sshd[11962]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:25:00 nativespace-cdp sshd[11962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:25:02 nativespace-cdp sshd[11962]: Failed password for invalid user ubuntu from 104.131.93.177 port 48102 ssh2
Oct  1 11:25:02 nativespace-cdp sshd[11962]: Received disconnect from 104.131.93.177 port 48102:11: Bye Bye [preauth]
Oct  1 11:25:02 nativespace-cdp sshd[11962]: Disconnected from 104.131.93.177 port 48102 [preauth]
Oct  1 11:25:08 nativespace-cdp sshd[12073]: Invalid user deploy from 223.17.0.181 port 43294
Oct  1 11:25:08 nativespace-cdp sshd[12073]: input_userauth_request: invalid user deploy [preauth]
Oct  1 11:25:08 nativespace-cdp sshd[12073]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:25:08 nativespace-cdp sshd[12073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:25:10 nativespace-cdp sshd[12073]: Failed password for invalid user deploy from 223.17.0.181 port 43294 ssh2
Oct  1 11:25:11 nativespace-cdp sshd[12073]: Received disconnect from 223.17.0.181 port 43294:11: Bye Bye [preauth]
Oct  1 11:25:11 nativespace-cdp sshd[12073]: Disconnected from 223.17.0.181 port 43294 [preauth]
Oct  1 11:25:17 nativespace-cdp sshd[12097]: Invalid user tomcat from 103.231.46.66 port 50460
Oct  1 11:25:17 nativespace-cdp sshd[12097]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 11:25:17 nativespace-cdp sshd[12097]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:25:17 nativespace-cdp sshd[12097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:25:19 nativespace-cdp sshd[12097]: Failed password for invalid user tomcat from 103.231.46.66 port 50460 ssh2
Oct  1 11:25:19 nativespace-cdp sshd[12097]: Received disconnect from 103.231.46.66 port 50460:11: Bye Bye [preauth]
Oct  1 11:25:19 nativespace-cdp sshd[12097]: Disconnected from 103.231.46.66 port 50460 [preauth]
Oct  1 11:25:34 nativespace-cdp sshd[12133]: Invalid user ubuntu from 200.109.234.38 port 55960
Oct  1 11:25:34 nativespace-cdp sshd[12133]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:25:34 nativespace-cdp sshd[12133]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:25:34 nativespace-cdp sshd[12133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:25:36 nativespace-cdp sshd[12133]: Failed password for invalid user ubuntu from 200.109.234.38 port 55960 ssh2
Oct  1 11:25:36 nativespace-cdp sshd[12133]: Received disconnect from 200.109.234.38 port 55960:11: Bye Bye [preauth]
Oct  1 11:25:36 nativespace-cdp sshd[12133]: Disconnected from 200.109.234.38 port 55960 [preauth]
Oct  1 11:25:44 nativespace-cdp sshd[12171]: Invalid user ubuntu from 104.131.93.177 port 54514
Oct  1 11:25:44 nativespace-cdp sshd[12171]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:25:44 nativespace-cdp sshd[12171]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:25:44 nativespace-cdp sshd[12171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:25:46 nativespace-cdp sshd[12187]: Invalid user ubuntu from 46.181.61.58 port 48172
Oct  1 11:25:46 nativespace-cdp sshd[12171]: Failed password for invalid user ubuntu from 104.131.93.177 port 54514 ssh2
Oct  1 11:25:46 nativespace-cdp sshd[12187]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:25:46 nativespace-cdp sshd[12187]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:25:46 nativespace-cdp sshd[12187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:25:46 nativespace-cdp sshd[12171]: Received disconnect from 104.131.93.177 port 54514:11: Bye Bye [preauth]
Oct  1 11:25:46 nativespace-cdp sshd[12171]: Disconnected from 104.131.93.177 port 54514 [preauth]
Oct  1 11:25:48 nativespace-cdp sshd[12187]: Failed password for invalid user ubuntu from 46.181.61.58 port 48172 ssh2
Oct  1 11:25:48 nativespace-cdp sshd[12187]: Received disconnect from 46.181.61.58 port 48172:11: Bye Bye [preauth]
Oct  1 11:25:48 nativespace-cdp sshd[12187]: Disconnected from 46.181.61.58 port 48172 [preauth]
Oct  1 11:26:09 nativespace-cdp sshd[12298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181  user=root
Oct  1 11:26:09 nativespace-cdp sshd[12298]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:26:11 nativespace-cdp sshd[12298]: Failed password for root from 223.17.0.181 port 51396 ssh2
Oct  1 11:26:11 nativespace-cdp sshd[12298]: Received disconnect from 223.17.0.181 port 51396:11: Bye Bye [preauth]
Oct  1 11:26:11 nativespace-cdp sshd[12298]: Disconnected from 223.17.0.181 port 51396 [preauth]
Oct  1 11:26:18 nativespace-cdp sshd[12323]: Invalid user test from 103.231.46.66 port 36976
Oct  1 11:26:18 nativespace-cdp sshd[12323]: input_userauth_request: invalid user test [preauth]
Oct  1 11:26:18 nativespace-cdp sshd[12323]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:26:18 nativespace-cdp sshd[12323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:26:18 nativespace-cdp sshd[12336]: Invalid user ubuntu from 104.131.93.177 port 60926
Oct  1 11:26:18 nativespace-cdp sshd[12336]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:26:18 nativespace-cdp sshd[12336]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:26:18 nativespace-cdp sshd[12336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:26:20 nativespace-cdp sshd[12323]: Failed password for invalid user test from 103.231.46.66 port 36976 ssh2
Oct  1 11:26:20 nativespace-cdp sshd[12323]: Received disconnect from 103.231.46.66 port 36976:11: Bye Bye [preauth]
Oct  1 11:26:20 nativespace-cdp sshd[12323]: Disconnected from 103.231.46.66 port 36976 [preauth]
Oct  1 11:26:21 nativespace-cdp sshd[12336]: Failed password for invalid user ubuntu from 104.131.93.177 port 60926 ssh2
Oct  1 11:26:21 nativespace-cdp sshd[12336]: Received disconnect from 104.131.93.177 port 60926:11: Bye Bye [preauth]
Oct  1 11:26:21 nativespace-cdp sshd[12336]: Disconnected from 104.131.93.177 port 60926 [preauth]
Oct  1 11:26:33 nativespace-cdp sshd[12379]: Connection closed by 159.100.136.21 port 35602 [preauth]
Oct  1 11:26:46 nativespace-cdp sshd[12413]: Invalid user test from 210.59.205.48 port 45892
Oct  1 11:26:46 nativespace-cdp sshd[12413]: input_userauth_request: invalid user test [preauth]
Oct  1 11:26:46 nativespace-cdp sshd[12413]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:26:46 nativespace-cdp sshd[12413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:26:48 nativespace-cdp sshd[12413]: Failed password for invalid user test from 210.59.205.48 port 45892 ssh2
Oct  1 11:26:48 nativespace-cdp sshd[12413]: Received disconnect from 210.59.205.48 port 45892:11: Bye Bye [preauth]
Oct  1 11:26:48 nativespace-cdp sshd[12413]: Disconnected from 210.59.205.48 port 45892 [preauth]
Oct  1 11:26:57 nativespace-cdp sshd[12430]: Invalid user support from 104.131.93.177 port 39105
Oct  1 11:26:57 nativespace-cdp sshd[12430]: input_userauth_request: invalid user support [preauth]
Oct  1 11:26:57 nativespace-cdp sshd[12430]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:26:57 nativespace-cdp sshd[12430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:26:58 nativespace-cdp sshd[12430]: Failed password for invalid user support from 104.131.93.177 port 39105 ssh2
Oct  1 11:26:58 nativespace-cdp sshd[12430]: Received disconnect from 104.131.93.177 port 39105:11: Bye Bye [preauth]
Oct  1 11:26:58 nativespace-cdp sshd[12430]: Disconnected from 104.131.93.177 port 39105 [preauth]
Oct  1 11:27:16 nativespace-cdp sshd[12496]: Invalid user abhishek from 103.231.46.66 port 51704
Oct  1 11:27:16 nativespace-cdp sshd[12496]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 11:27:16 nativespace-cdp sshd[12496]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:27:16 nativespace-cdp sshd[12496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:27:16 nativespace-cdp sshd[12491]: Invalid user usuario from 223.17.0.181 port 60882
Oct  1 11:27:16 nativespace-cdp sshd[12491]: input_userauth_request: invalid user usuario [preauth]
Oct  1 11:27:16 nativespace-cdp sshd[12491]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:27:16 nativespace-cdp sshd[12491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:27:19 nativespace-cdp sshd[12496]: Failed password for invalid user abhishek from 103.231.46.66 port 51704 ssh2
Oct  1 11:27:19 nativespace-cdp sshd[12496]: Received disconnect from 103.231.46.66 port 51704:11: Bye Bye [preauth]
Oct  1 11:27:19 nativespace-cdp sshd[12496]: Disconnected from 103.231.46.66 port 51704 [preauth]
Oct  1 11:27:19 nativespace-cdp sshd[12491]: Failed password for invalid user usuario from 223.17.0.181 port 60882 ssh2
Oct  1 11:27:19 nativespace-cdp sshd[12491]: Received disconnect from 223.17.0.181 port 60882:11: Bye Bye [preauth]
Oct  1 11:27:19 nativespace-cdp sshd[12491]: Disconnected from 223.17.0.181 port 60882 [preauth]
Oct  1 11:27:27 nativespace-cdp sshd[12519]: Invalid user test from 200.109.234.38 port 33018
Oct  1 11:27:27 nativespace-cdp sshd[12519]: input_userauth_request: invalid user test [preauth]
Oct  1 11:27:27 nativespace-cdp sshd[12519]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:27:27 nativespace-cdp sshd[12519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:27:29 nativespace-cdp sshd[12519]: Failed password for invalid user test from 200.109.234.38 port 33018 ssh2
Oct  1 11:27:30 nativespace-cdp sshd[12519]: Received disconnect from 200.109.234.38 port 33018:11: Bye Bye [preauth]
Oct  1 11:27:30 nativespace-cdp sshd[12519]: Disconnected from 200.109.234.38 port 33018 [preauth]
Oct  1 11:27:32 nativespace-cdp sshd[12547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58  user=root
Oct  1 11:27:32 nativespace-cdp sshd[12547]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:27:34 nativespace-cdp sshd[12547]: Failed password for root from 46.181.61.58 port 35536 ssh2
Oct  1 11:27:34 nativespace-cdp sshd[12547]: Received disconnect from 46.181.61.58 port 35536:11: Bye Bye [preauth]
Oct  1 11:27:34 nativespace-cdp sshd[12547]: Disconnected from 46.181.61.58 port 35536 [preauth]
Oct  1 11:27:38 nativespace-cdp sshd[12555]: Invalid user ubuntu from 104.131.93.177 port 45517
Oct  1 11:27:38 nativespace-cdp sshd[12555]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:27:39 nativespace-cdp sshd[12555]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:27:39 nativespace-cdp sshd[12555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:27:41 nativespace-cdp sshd[12555]: Failed password for invalid user ubuntu from 104.131.93.177 port 45517 ssh2
Oct  1 11:27:41 nativespace-cdp sshd[12555]: Received disconnect from 104.131.93.177 port 45517:11: Bye Bye [preauth]
Oct  1 11:27:41 nativespace-cdp sshd[12555]: Disconnected from 104.131.93.177 port 45517 [preauth]
Oct  1 11:28:11 nativespace-cdp sshd[12775]: Invalid user test from 103.231.46.66 port 38206
Oct  1 11:28:11 nativespace-cdp sshd[12775]: input_userauth_request: invalid user test [preauth]
Oct  1 11:28:11 nativespace-cdp sshd[12775]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:28:11 nativespace-cdp sshd[12775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:28:11 nativespace-cdp sshd[12777]: Invalid user user from 104.131.93.177 port 51929
Oct  1 11:28:11 nativespace-cdp sshd[12777]: input_userauth_request: invalid user user [preauth]
Oct  1 11:28:11 nativespace-cdp sshd[12777]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:28:11 nativespace-cdp sshd[12777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:28:13 nativespace-cdp sshd[12775]: Failed password for invalid user test from 103.231.46.66 port 38206 ssh2
Oct  1 11:28:13 nativespace-cdp sshd[12777]: Failed password for invalid user user from 104.131.93.177 port 51929 ssh2
Oct  1 11:28:13 nativespace-cdp sshd[12775]: Received disconnect from 103.231.46.66 port 38206:11: Bye Bye [preauth]
Oct  1 11:28:13 nativespace-cdp sshd[12775]: Disconnected from 103.231.46.66 port 38206 [preauth]
Oct  1 11:28:13 nativespace-cdp sshd[12777]: Received disconnect from 104.131.93.177 port 51929:11: Bye Bye [preauth]
Oct  1 11:28:13 nativespace-cdp sshd[12777]: Disconnected from 104.131.93.177 port 51929 [preauth]
Oct  1 11:28:21 nativespace-cdp sshd[12799]: Connection closed by 223.17.0.181 port 38974 [preauth]
Oct  1 11:28:32 nativespace-cdp sshd[12821]: Invalid user ubuntu from 210.59.205.48 port 33774
Oct  1 11:28:32 nativespace-cdp sshd[12821]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:28:32 nativespace-cdp sshd[12821]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:28:32 nativespace-cdp sshd[12821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:28:33 nativespace-cdp sshd[12821]: Failed password for invalid user ubuntu from 210.59.205.48 port 33774 ssh2
Oct  1 11:28:34 nativespace-cdp sshd[12821]: Received disconnect from 210.59.205.48 port 33774:11: Bye Bye [preauth]
Oct  1 11:28:34 nativespace-cdp sshd[12821]: Disconnected from 210.59.205.48 port 33774 [preauth]
Oct  1 11:28:47 nativespace-cdp sshd[12899]: Invalid user abhishek from 104.131.93.177 port 58341
Oct  1 11:28:47 nativespace-cdp sshd[12899]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 11:28:47 nativespace-cdp sshd[12899]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:28:47 nativespace-cdp sshd[12899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:28:50 nativespace-cdp sshd[12899]: Failed password for invalid user abhishek from 104.131.93.177 port 58341 ssh2
Oct  1 11:28:50 nativespace-cdp sshd[12899]: Received disconnect from 104.131.93.177 port 58341:11: Bye Bye [preauth]
Oct  1 11:28:50 nativespace-cdp sshd[12899]: Disconnected from 104.131.93.177 port 58341 [preauth]
Oct  1 11:29:08 nativespace-cdp sshd[13024]: Invalid user ubuntu from 103.231.46.66 port 52936
Oct  1 11:29:08 nativespace-cdp sshd[13024]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:29:08 nativespace-cdp sshd[13024]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:29:08 nativespace-cdp sshd[13024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:29:10 nativespace-cdp sshd[13028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38  user=root
Oct  1 11:29:10 nativespace-cdp sshd[13028]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:29:10 nativespace-cdp sshd[13024]: Failed password for invalid user ubuntu from 103.231.46.66 port 52936 ssh2
Oct  1 11:29:10 nativespace-cdp sshd[13031]: Invalid user tom from 46.181.61.58 port 51136
Oct  1 11:29:10 nativespace-cdp sshd[13031]: input_userauth_request: invalid user tom [preauth]
Oct  1 11:29:10 nativespace-cdp sshd[13031]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:29:10 nativespace-cdp sshd[13031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:29:10 nativespace-cdp sshd[13024]: Received disconnect from 103.231.46.66 port 52936:11: Bye Bye [preauth]
Oct  1 11:29:10 nativespace-cdp sshd[13024]: Disconnected from 103.231.46.66 port 52936 [preauth]
Oct  1 11:29:11 nativespace-cdp sshd[13028]: Failed password for root from 200.109.234.38 port 58786 ssh2
Oct  1 11:29:12 nativespace-cdp sshd[13031]: Failed password for invalid user tom from 46.181.61.58 port 51136 ssh2
Oct  1 11:29:12 nativespace-cdp sshd[13031]: Received disconnect from 46.181.61.58 port 51136:11: Bye Bye [preauth]
Oct  1 11:29:12 nativespace-cdp sshd[13031]: Disconnected from 46.181.61.58 port 51136 [preauth]
Oct  1 11:29:13 nativespace-cdp sshd[13028]: Received disconnect from 200.109.234.38 port 58786:11: Bye Bye [preauth]
Oct  1 11:29:13 nativespace-cdp sshd[13028]: Disconnected from 200.109.234.38 port 58786 [preauth]
Oct  1 11:29:19 nativespace-cdp sshd[13051]: Invalid user hz from 223.17.0.181 port 55334
Oct  1 11:29:19 nativespace-cdp sshd[13051]: input_userauth_request: invalid user hz [preauth]
Oct  1 11:29:19 nativespace-cdp sshd[13051]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:29:19 nativespace-cdp sshd[13051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:29:21 nativespace-cdp sshd[13051]: Failed password for invalid user hz from 223.17.0.181 port 55334 ssh2
Oct  1 11:29:24 nativespace-cdp sshd[13051]: Received disconnect from 223.17.0.181 port 55334:11: Bye Bye [preauth]
Oct  1 11:29:24 nativespace-cdp sshd[13051]: Disconnected from 223.17.0.181 port 55334 [preauth]
Oct  1 11:29:26 nativespace-cdp sshd[13063]: Invalid user ubuntu from 104.131.93.177 port 36520
Oct  1 11:29:26 nativespace-cdp sshd[13063]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:29:26 nativespace-cdp sshd[13063]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:29:26 nativespace-cdp sshd[13063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:29:27 nativespace-cdp sshd[13063]: Failed password for invalid user ubuntu from 104.131.93.177 port 36520 ssh2
Oct  1 11:29:27 nativespace-cdp sshd[13063]: Received disconnect from 104.131.93.177 port 36520:11: Bye Bye [preauth]
Oct  1 11:29:27 nativespace-cdp sshd[13063]: Disconnected from 104.131.93.177 port 36520 [preauth]
Oct  1 11:29:58 nativespace-cdp sshd[13155]: Invalid user tuan from 104.131.93.177 port 42932
Oct  1 11:29:58 nativespace-cdp sshd[13155]: input_userauth_request: invalid user tuan [preauth]
Oct  1 11:29:58 nativespace-cdp sshd[13155]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:29:58 nativespace-cdp sshd[13155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177
Oct  1 11:30:00 nativespace-cdp sshd[13155]: Failed password for invalid user tuan from 104.131.93.177 port 42932 ssh2
Oct  1 11:30:06 nativespace-cdp sshd[13155]: Received disconnect from 104.131.93.177 port 42932:11: Bye Bye [preauth]
Oct  1 11:30:06 nativespace-cdp sshd[13155]: Disconnected from 104.131.93.177 port 42932 [preauth]
Oct  1 11:30:06 nativespace-cdp sshd[13328]: Invalid user ubuntu from 103.231.46.66 port 39434
Oct  1 11:30:06 nativespace-cdp sshd[13328]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:30:06 nativespace-cdp sshd[13328]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:30:06 nativespace-cdp sshd[13328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:30:08 nativespace-cdp sshd[13328]: Failed password for invalid user ubuntu from 103.231.46.66 port 39434 ssh2
Oct  1 11:30:08 nativespace-cdp sshd[13328]: Received disconnect from 103.231.46.66 port 39434:11: Bye Bye [preauth]
Oct  1 11:30:08 nativespace-cdp sshd[13328]: Disconnected from 103.231.46.66 port 39434 [preauth]
Oct  1 11:30:20 nativespace-cdp sshd[13383]: Invalid user user from 210.59.205.48 port 49896
Oct  1 11:30:20 nativespace-cdp sshd[13383]: input_userauth_request: invalid user user [preauth]
Oct  1 11:30:20 nativespace-cdp sshd[13383]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:30:20 nativespace-cdp sshd[13383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:30:22 nativespace-cdp sshd[13383]: Failed password for invalid user user from 210.59.205.48 port 49896 ssh2
Oct  1 11:30:22 nativespace-cdp sshd[13383]: Received disconnect from 210.59.205.48 port 49896:11: Bye Bye [preauth]
Oct  1 11:30:22 nativespace-cdp sshd[13383]: Disconnected from 210.59.205.48 port 49896 [preauth]
Oct  1 11:30:29 nativespace-cdp sshd[13401]: Invalid user test from 223.17.0.181 port 49926
Oct  1 11:30:29 nativespace-cdp sshd[13401]: input_userauth_request: invalid user test [preauth]
Oct  1 11:30:29 nativespace-cdp sshd[13401]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:30:29 nativespace-cdp sshd[13401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:30:30 nativespace-cdp sshd[13401]: Failed password for invalid user test from 223.17.0.181 port 49926 ssh2
Oct  1 11:30:31 nativespace-cdp sshd[13401]: Received disconnect from 223.17.0.181 port 49926:11: Bye Bye [preauth]
Oct  1 11:30:31 nativespace-cdp sshd[13401]: Disconnected from 223.17.0.181 port 49926 [preauth]
Oct  1 11:30:39 nativespace-cdp sshd[13425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.93.177  user=root
Oct  1 11:30:39 nativespace-cdp sshd[13425]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:30:41 nativespace-cdp sshd[13425]: Failed password for root from 104.131.93.177 port 49344 ssh2
Oct  1 11:30:41 nativespace-cdp sshd[13425]: Received disconnect from 104.131.93.177 port 49344:11: Bye Bye [preauth]
Oct  1 11:30:41 nativespace-cdp sshd[13425]: Disconnected from 104.131.93.177 port 49344 [preauth]
Oct  1 11:30:51 nativespace-cdp sshd[13485]: Invalid user user from 46.181.61.58 port 38498
Oct  1 11:30:51 nativespace-cdp sshd[13485]: input_userauth_request: invalid user user [preauth]
Oct  1 11:30:51 nativespace-cdp sshd[13485]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:30:51 nativespace-cdp sshd[13485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:30:53 nativespace-cdp sshd[13485]: Failed password for invalid user user from 46.181.61.58 port 38498 ssh2
Oct  1 11:30:54 nativespace-cdp sshd[13485]: Received disconnect from 46.181.61.58 port 38498:11: Bye Bye [preauth]
Oct  1 11:30:54 nativespace-cdp sshd[13485]: Disconnected from 46.181.61.58 port 38498 [preauth]
Oct  1 11:31:01 nativespace-cdp sshd[13564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66  user=root
Oct  1 11:31:01 nativespace-cdp sshd[13564]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:31:03 nativespace-cdp sshd[13589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38  user=root
Oct  1 11:31:03 nativespace-cdp sshd[13589]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:31:03 nativespace-cdp sshd[13564]: Failed password for root from 103.231.46.66 port 54166 ssh2
Oct  1 11:31:03 nativespace-cdp sshd[13564]: Received disconnect from 103.231.46.66 port 54166:11: Bye Bye [preauth]
Oct  1 11:31:03 nativespace-cdp sshd[13564]: Disconnected from 103.231.46.66 port 54166 [preauth]
Oct  1 11:31:06 nativespace-cdp sshd[13589]: Failed password for root from 200.109.234.38 port 52832 ssh2
Oct  1 11:31:07 nativespace-cdp sshd[13589]: Received disconnect from 200.109.234.38 port 52832:11: Bye Bye [preauth]
Oct  1 11:31:07 nativespace-cdp sshd[13589]: Disconnected from 200.109.234.38 port 52832 [preauth]
Oct  1 11:31:26 nativespace-cdp sshd[13680]: Invalid user thomas from 223.17.0.181 port 58712
Oct  1 11:31:26 nativespace-cdp sshd[13680]: input_userauth_request: invalid user thomas [preauth]
Oct  1 11:31:26 nativespace-cdp sshd[13680]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:31:26 nativespace-cdp sshd[13680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:31:28 nativespace-cdp sshd[13680]: Failed password for invalid user thomas from 223.17.0.181 port 58712 ssh2
Oct  1 11:31:29 nativespace-cdp sshd[13680]: Received disconnect from 223.17.0.181 port 58712:11: Bye Bye [preauth]
Oct  1 11:31:29 nativespace-cdp sshd[13680]: Disconnected from 223.17.0.181 port 58712 [preauth]
Oct  1 11:31:33 nativespace-cdp sshd[13702]: Connection closed by 159.100.136.21 port 45244 [preauth]
Oct  1 11:32:02 nativespace-cdp sshd[13834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66  user=root
Oct  1 11:32:02 nativespace-cdp sshd[13834]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:32:04 nativespace-cdp sshd[13834]: Failed password for root from 103.231.46.66 port 40686 ssh2
Oct  1 11:32:04 nativespace-cdp sshd[13834]: Received disconnect from 103.231.46.66 port 40686:11: Bye Bye [preauth]
Oct  1 11:32:04 nativespace-cdp sshd[13834]: Disconnected from 103.231.46.66 port 40686 [preauth]
Oct  1 11:32:09 nativespace-cdp sshd[13861]: Invalid user test from 210.59.205.48 port 37778
Oct  1 11:32:09 nativespace-cdp sshd[13861]: input_userauth_request: invalid user test [preauth]
Oct  1 11:32:09 nativespace-cdp sshd[13861]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:32:09 nativespace-cdp sshd[13861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:32:12 nativespace-cdp sshd[13861]: Failed password for invalid user test from 210.59.205.48 port 37778 ssh2
Oct  1 11:32:15 nativespace-cdp sshd[13861]: Received disconnect from 210.59.205.48 port 37778:11: Bye Bye [preauth]
Oct  1 11:32:15 nativespace-cdp sshd[13861]: Disconnected from 210.59.205.48 port 37778 [preauth]
Oct  1 11:32:37 nativespace-cdp sshd[13944]: Invalid user support from 223.17.0.181 port 49958
Oct  1 11:32:37 nativespace-cdp sshd[13944]: input_userauth_request: invalid user support [preauth]
Oct  1 11:32:37 nativespace-cdp sshd[13944]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:32:37 nativespace-cdp sshd[13944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:32:37 nativespace-cdp sshd[13948]: Invalid user user from 46.181.61.58 port 54098
Oct  1 11:32:37 nativespace-cdp sshd[13948]: input_userauth_request: invalid user user [preauth]
Oct  1 11:32:37 nativespace-cdp sshd[13948]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:32:37 nativespace-cdp sshd[13948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:32:38 nativespace-cdp sshd[13944]: Failed password for invalid user support from 223.17.0.181 port 49958 ssh2
Oct  1 11:32:39 nativespace-cdp sshd[13944]: Received disconnect from 223.17.0.181 port 49958:11: Bye Bye [preauth]
Oct  1 11:32:39 nativespace-cdp sshd[13944]: Disconnected from 223.17.0.181 port 49958 [preauth]
Oct  1 11:32:39 nativespace-cdp sshd[13948]: Failed password for invalid user user from 46.181.61.58 port 54098 ssh2
Oct  1 11:32:39 nativespace-cdp sshd[13948]: Received disconnect from 46.181.61.58 port 54098:11: Bye Bye [preauth]
Oct  1 11:32:39 nativespace-cdp sshd[13948]: Disconnected from 46.181.61.58 port 54098 [preauth]
Oct  1 11:32:59 nativespace-cdp sshd[14083]: Invalid user test from 200.109.234.38 port 51586
Oct  1 11:32:59 nativespace-cdp sshd[14083]: input_userauth_request: invalid user test [preauth]
Oct  1 11:32:59 nativespace-cdp sshd[14083]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:32:59 nativespace-cdp sshd[14083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:33:00 nativespace-cdp sshd[14090]: Invalid user tuan from 103.231.46.66 port 55430
Oct  1 11:33:00 nativespace-cdp sshd[14090]: input_userauth_request: invalid user tuan [preauth]
Oct  1 11:33:00 nativespace-cdp sshd[14090]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:33:00 nativespace-cdp sshd[14090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:33:02 nativespace-cdp sshd[14090]: Failed password for invalid user tuan from 103.231.46.66 port 55430 ssh2
Oct  1 11:33:02 nativespace-cdp sshd[14090]: Received disconnect from 103.231.46.66 port 55430:11: Bye Bye [preauth]
Oct  1 11:33:02 nativespace-cdp sshd[14090]: Disconnected from 103.231.46.66 port 55430 [preauth]
Oct  1 11:33:02 nativespace-cdp sshd[14083]: Failed password for invalid user test from 200.109.234.38 port 51586 ssh2
Oct  1 11:33:02 nativespace-cdp sshd[14083]: Received disconnect from 200.109.234.38 port 51586:11: Bye Bye [preauth]
Oct  1 11:33:02 nativespace-cdp sshd[14083]: Disconnected from 200.109.234.38 port 51586 [preauth]
Oct  1 11:33:29 nativespace-cdp sshd[14194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181  user=root
Oct  1 11:33:29 nativespace-cdp sshd[14194]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:33:31 nativespace-cdp sshd[14194]: Failed password for root from 223.17.0.181 port 59288 ssh2
Oct  1 11:33:32 nativespace-cdp sshd[14194]: Received disconnect from 223.17.0.181 port 59288:11: Bye Bye [preauth]
Oct  1 11:33:32 nativespace-cdp sshd[14194]: Disconnected from 223.17.0.181 port 59288 [preauth]
Oct  1 11:33:58 nativespace-cdp sshd[14283]: Invalid user superman from 210.59.205.48 port 53890
Oct  1 11:33:58 nativespace-cdp sshd[14283]: input_userauth_request: invalid user superman [preauth]
Oct  1 11:33:58 nativespace-cdp sshd[14283]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:33:58 nativespace-cdp sshd[14283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:33:58 nativespace-cdp sshd[14286]: Invalid user steam from 103.231.46.66 port 41942
Oct  1 11:33:58 nativespace-cdp sshd[14286]: input_userauth_request: invalid user steam [preauth]
Oct  1 11:33:58 nativespace-cdp sshd[14286]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:33:58 nativespace-cdp sshd[14286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:34:00 nativespace-cdp sshd[14283]: Failed password for invalid user superman from 210.59.205.48 port 53890 ssh2
Oct  1 11:34:00 nativespace-cdp sshd[14286]: Failed password for invalid user steam from 103.231.46.66 port 41942 ssh2
Oct  1 11:34:00 nativespace-cdp sshd[14286]: Received disconnect from 103.231.46.66 port 41942:11: Bye Bye [preauth]
Oct  1 11:34:00 nativespace-cdp sshd[14286]: Disconnected from 103.231.46.66 port 41942 [preauth]
Oct  1 11:34:00 nativespace-cdp sshd[14283]: Received disconnect from 210.59.205.48 port 53890:11: Bye Bye [preauth]
Oct  1 11:34:00 nativespace-cdp sshd[14283]: Disconnected from 210.59.205.48 port 53890 [preauth]
Oct  1 11:34:23 nativespace-cdp sshd[14350]: Connection closed by 46.181.61.58 port 41466 [preauth]
Oct  1 11:34:33 nativespace-cdp sshd[14377]: Connection reset by 223.17.0.181 port 51190 [preauth]
Oct  1 11:34:49 nativespace-cdp sshd[14424]: Invalid user support from 200.109.234.38 port 37042
Oct  1 11:34:49 nativespace-cdp sshd[14424]: input_userauth_request: invalid user support [preauth]
Oct  1 11:34:49 nativespace-cdp sshd[14424]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:34:49 nativespace-cdp sshd[14424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:34:50 nativespace-cdp sshd[14424]: Failed password for invalid user support from 200.109.234.38 port 37042 ssh2
Oct  1 11:34:52 nativespace-cdp sshd[14424]: Received disconnect from 200.109.234.38 port 37042:11: Bye Bye [preauth]
Oct  1 11:34:52 nativespace-cdp sshd[14424]: Disconnected from 200.109.234.38 port 37042 [preauth]
Oct  1 11:35:02 nativespace-cdp sshd[14673]: Connection closed by 103.231.46.66 port 56686 [preauth]
Oct  1 11:35:38 nativespace-cdp sshd[14899]: Invalid user ubuntu from 223.17.0.181 port 32864
Oct  1 11:35:38 nativespace-cdp sshd[14899]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:35:38 nativespace-cdp sshd[14899]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:35:38 nativespace-cdp sshd[14899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:35:40 nativespace-cdp sshd[14899]: Failed password for invalid user ubuntu from 223.17.0.181 port 32864 ssh2
Oct  1 11:35:40 nativespace-cdp sshd[14899]: Received disconnect from 223.17.0.181 port 32864:11: Bye Bye [preauth]
Oct  1 11:35:40 nativespace-cdp sshd[14899]: Disconnected from 223.17.0.181 port 32864 [preauth]
Oct  1 11:35:48 nativespace-cdp sshd[14991]: Invalid user ubuntu from 210.59.205.48 port 41768
Oct  1 11:35:48 nativespace-cdp sshd[14991]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:35:48 nativespace-cdp sshd[14991]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:35:48 nativespace-cdp sshd[14991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:35:50 nativespace-cdp sshd[14991]: Failed password for invalid user ubuntu from 210.59.205.48 port 41768 ssh2
Oct  1 11:35:50 nativespace-cdp sshd[14991]: Received disconnect from 210.59.205.48 port 41768:11: Bye Bye [preauth]
Oct  1 11:35:50 nativespace-cdp sshd[14991]: Disconnected from 210.59.205.48 port 41768 [preauth]
Oct  1 11:35:55 nativespace-cdp sshd[15020]: Invalid user user from 103.231.46.66 port 43198
Oct  1 11:35:55 nativespace-cdp sshd[15020]: input_userauth_request: invalid user user [preauth]
Oct  1 11:35:55 nativespace-cdp sshd[15020]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:35:55 nativespace-cdp sshd[15020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:35:57 nativespace-cdp sshd[15020]: Failed password for invalid user user from 103.231.46.66 port 43198 ssh2
Oct  1 11:35:57 nativespace-cdp sshd[15020]: Received disconnect from 103.231.46.66 port 43198:11: Bye Bye [preauth]
Oct  1 11:35:57 nativespace-cdp sshd[15020]: Disconnected from 103.231.46.66 port 43198 [preauth]
Oct  1 11:36:00 nativespace-cdp sshd[15033]: Invalid user user from 46.181.61.58 port 57062
Oct  1 11:36:00 nativespace-cdp sshd[15033]: input_userauth_request: invalid user user [preauth]
Oct  1 11:36:00 nativespace-cdp sshd[15033]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:36:00 nativespace-cdp sshd[15033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:36:02 nativespace-cdp sshd[15033]: Failed password for invalid user user from 46.181.61.58 port 57062 ssh2
Oct  1 11:36:02 nativespace-cdp sshd[15033]: Received disconnect from 46.181.61.58 port 57062:11: Bye Bye [preauth]
Oct  1 11:36:02 nativespace-cdp sshd[15033]: Disconnected from 46.181.61.58 port 57062 [preauth]
Oct  1 11:36:33 nativespace-cdp sshd[15145]: Connection closed by 159.100.136.21 port 54930 [preauth]
Oct  1 11:36:35 nativespace-cdp sshd[15156]: Invalid user test from 200.109.234.38 port 41212
Oct  1 11:36:35 nativespace-cdp sshd[15156]: input_userauth_request: invalid user test [preauth]
Oct  1 11:36:35 nativespace-cdp sshd[15156]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:36:35 nativespace-cdp sshd[15156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:36:35 nativespace-cdp sshd[15149]: Invalid user ubuntu from 223.17.0.181 port 38386
Oct  1 11:36:35 nativespace-cdp sshd[15149]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:36:35 nativespace-cdp sshd[15149]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:36:35 nativespace-cdp sshd[15149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:36:37 nativespace-cdp sshd[15156]: Failed password for invalid user test from 200.109.234.38 port 41212 ssh2
Oct  1 11:36:37 nativespace-cdp sshd[15149]: Failed password for invalid user ubuntu from 223.17.0.181 port 38386 ssh2
Oct  1 11:36:37 nativespace-cdp sshd[15149]: Received disconnect from 223.17.0.181 port 38386:11: Bye Bye [preauth]
Oct  1 11:36:37 nativespace-cdp sshd[15149]: Disconnected from 223.17.0.181 port 38386 [preauth]
Oct  1 11:36:38 nativespace-cdp sshd[15156]: Received disconnect from 200.109.234.38 port 41212:11: Bye Bye [preauth]
Oct  1 11:36:38 nativespace-cdp sshd[15156]: Disconnected from 200.109.234.38 port 41212 [preauth]
Oct  1 11:36:53 nativespace-cdp sshd[15235]: Invalid user test from 103.231.46.66 port 57930
Oct  1 11:36:53 nativespace-cdp sshd[15235]: input_userauth_request: invalid user test [preauth]
Oct  1 11:36:53 nativespace-cdp sshd[15235]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:36:53 nativespace-cdp sshd[15235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:36:55 nativespace-cdp sshd[15235]: Failed password for invalid user test from 103.231.46.66 port 57930 ssh2
Oct  1 11:36:57 nativespace-cdp sshd[15235]: Received disconnect from 103.231.46.66 port 57930:11: Bye Bye [preauth]
Oct  1 11:36:57 nativespace-cdp sshd[15235]: Disconnected from 103.231.46.66 port 57930 [preauth]
Oct  1 11:37:37 nativespace-cdp sshd[15459]: Invalid user ubuntu from 210.59.205.48 port 57878
Oct  1 11:37:37 nativespace-cdp sshd[15459]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:37:37 nativespace-cdp sshd[15459]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:37:37 nativespace-cdp sshd[15459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:37:37 nativespace-cdp sshd[15461]: Invalid user odoo from 223.17.0.181 port 42042
Oct  1 11:37:37 nativespace-cdp sshd[15461]: input_userauth_request: invalid user odoo [preauth]
Oct  1 11:37:37 nativespace-cdp sshd[15461]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:37:37 nativespace-cdp sshd[15461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:37:39 nativespace-cdp sshd[15459]: Failed password for invalid user ubuntu from 210.59.205.48 port 57878 ssh2
Oct  1 11:37:39 nativespace-cdp sshd[15461]: Failed password for invalid user odoo from 223.17.0.181 port 42042 ssh2
Oct  1 11:37:39 nativespace-cdp sshd[15459]: Received disconnect from 210.59.205.48 port 57878:11: Bye Bye [preauth]
Oct  1 11:37:39 nativespace-cdp sshd[15459]: Disconnected from 210.59.205.48 port 57878 [preauth]
Oct  1 11:37:39 nativespace-cdp sshd[15461]: Received disconnect from 223.17.0.181 port 42042:11: Bye Bye [preauth]
Oct  1 11:37:39 nativespace-cdp sshd[15461]: Disconnected from 223.17.0.181 port 42042 [preauth]
Oct  1 11:37:46 nativespace-cdp sshd[15493]: Invalid user username from 46.181.61.58 port 44430
Oct  1 11:37:46 nativespace-cdp sshd[15493]: input_userauth_request: invalid user username [preauth]
Oct  1 11:37:46 nativespace-cdp sshd[15493]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:37:46 nativespace-cdp sshd[15493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:37:49 nativespace-cdp sshd[15493]: Failed password for invalid user username from 46.181.61.58 port 44430 ssh2
Oct  1 11:37:49 nativespace-cdp sshd[15493]: Received disconnect from 46.181.61.58 port 44430:11: Bye Bye [preauth]
Oct  1 11:37:49 nativespace-cdp sshd[15493]: Disconnected from 46.181.61.58 port 44430 [preauth]
Oct  1 11:38:31 nativespace-cdp sshd[15748]: Invalid user superman from 200.109.234.38 port 41208
Oct  1 11:38:31 nativespace-cdp sshd[15748]: input_userauth_request: invalid user superman [preauth]
Oct  1 11:38:31 nativespace-cdp sshd[15748]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:38:31 nativespace-cdp sshd[15748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:38:33 nativespace-cdp sshd[15748]: Failed password for invalid user superman from 200.109.234.38 port 41208 ssh2
Oct  1 11:38:33 nativespace-cdp sshd[15748]: Received disconnect from 200.109.234.38 port 41208:11: Bye Bye [preauth]
Oct  1 11:38:33 nativespace-cdp sshd[15748]: Disconnected from 200.109.234.38 port 41208 [preauth]
Oct  1 11:38:34 nativespace-cdp sshd[15754]: Invalid user ubuntu from 223.17.0.181 port 54500
Oct  1 11:38:34 nativespace-cdp sshd[15754]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:38:34 nativespace-cdp sshd[15754]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:38:34 nativespace-cdp sshd[15754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:38:36 nativespace-cdp sshd[15754]: Failed password for invalid user ubuntu from 223.17.0.181 port 54500 ssh2
Oct  1 11:38:36 nativespace-cdp sshd[15754]: Received disconnect from 223.17.0.181 port 54500:11: Bye Bye [preauth]
Oct  1 11:38:36 nativespace-cdp sshd[15754]: Disconnected from 223.17.0.181 port 54500 [preauth]
Oct  1 11:38:52 nativespace-cdp sshd[15831]: Invalid user superman from 103.231.46.66 port 59180
Oct  1 11:38:52 nativespace-cdp sshd[15831]: input_userauth_request: invalid user superman [preauth]
Oct  1 11:38:52 nativespace-cdp sshd[15831]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:38:52 nativespace-cdp sshd[15831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:38:54 nativespace-cdp sshd[15831]: Failed password for invalid user superman from 103.231.46.66 port 59180 ssh2
Oct  1 11:38:56 nativespace-cdp sshd[15831]: Received disconnect from 103.231.46.66 port 59180:11: Bye Bye [preauth]
Oct  1 11:38:56 nativespace-cdp sshd[15831]: Disconnected from 103.231.46.66 port 59180 [preauth]
Oct  1 11:39:27 nativespace-cdp sshd[16043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48  user=root
Oct  1 11:39:27 nativespace-cdp sshd[16043]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:39:28 nativespace-cdp sshd[16047]: Invalid user test from 46.181.61.58 port 60026
Oct  1 11:39:28 nativespace-cdp sshd[16047]: input_userauth_request: invalid user test [preauth]
Oct  1 11:39:28 nativespace-cdp sshd[16047]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:39:28 nativespace-cdp sshd[16047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:39:29 nativespace-cdp sshd[16043]: Failed password for root from 210.59.205.48 port 45762 ssh2
Oct  1 11:39:30 nativespace-cdp sshd[16047]: Failed password for invalid user test from 46.181.61.58 port 60026 ssh2
Oct  1 11:39:33 nativespace-cdp sshd[16047]: Received disconnect from 46.181.61.58 port 60026:11: Bye Bye [preauth]
Oct  1 11:39:33 nativespace-cdp sshd[16047]: Disconnected from 46.181.61.58 port 60026 [preauth]
Oct  1 11:39:35 nativespace-cdp sshd[16049]: Invalid user acer from 223.17.0.181 port 47420
Oct  1 11:39:35 nativespace-cdp sshd[16049]: input_userauth_request: invalid user acer [preauth]
Oct  1 11:39:35 nativespace-cdp sshd[16049]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:39:35 nativespace-cdp sshd[16049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:39:37 nativespace-cdp sshd[16049]: Failed password for invalid user acer from 223.17.0.181 port 47420 ssh2
Oct  1 11:39:37 nativespace-cdp sshd[16049]: Received disconnect from 223.17.0.181 port 47420:11: Bye Bye [preauth]
Oct  1 11:39:37 nativespace-cdp sshd[16049]: Disconnected from 223.17.0.181 port 47420 [preauth]
Oct  1 11:39:38 nativespace-cdp sshd[16043]: Received disconnect from 210.59.205.48 port 45762:11: Bye Bye [preauth]
Oct  1 11:39:38 nativespace-cdp sshd[16043]: Disconnected from 210.59.205.48 port 45762 [preauth]
Oct  1 11:39:53 nativespace-cdp sshd[16122]: Invalid user tom from 103.231.46.66 port 45696
Oct  1 11:39:53 nativespace-cdp sshd[16122]: input_userauth_request: invalid user tom [preauth]
Oct  1 11:39:53 nativespace-cdp sshd[16122]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:39:53 nativespace-cdp sshd[16122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:39:55 nativespace-cdp sshd[16122]: Failed password for invalid user tom from 103.231.46.66 port 45696 ssh2
Oct  1 11:39:55 nativespace-cdp sshd[16122]: Received disconnect from 103.231.46.66 port 45696:11: Bye Bye [preauth]
Oct  1 11:39:55 nativespace-cdp sshd[16122]: Disconnected from 103.231.46.66 port 45696 [preauth]
Oct  1 11:40:21 nativespace-cdp sshd[16359]: Invalid user nexus from 200.109.234.38 port 39330
Oct  1 11:40:21 nativespace-cdp sshd[16359]: input_userauth_request: invalid user nexus [preauth]
Oct  1 11:40:21 nativespace-cdp sshd[16359]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:40:21 nativespace-cdp sshd[16359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:40:23 nativespace-cdp sshd[16359]: Failed password for invalid user nexus from 200.109.234.38 port 39330 ssh2
Oct  1 11:40:23 nativespace-cdp sshd[16359]: Received disconnect from 200.109.234.38 port 39330:11: Bye Bye [preauth]
Oct  1 11:40:23 nativespace-cdp sshd[16359]: Disconnected from 200.109.234.38 port 39330 [preauth]
Oct  1 11:40:35 nativespace-cdp sshd[16384]: Connection closed by 223.17.0.181 port 52302 [preauth]
Oct  1 11:40:50 nativespace-cdp sshd[16437]: Invalid user ubuntu from 103.231.46.66 port 60422
Oct  1 11:40:50 nativespace-cdp sshd[16437]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:40:50 nativespace-cdp sshd[16437]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:40:50 nativespace-cdp sshd[16437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:40:52 nativespace-cdp sshd[16437]: Failed password for invalid user ubuntu from 103.231.46.66 port 60422 ssh2
Oct  1 11:40:52 nativespace-cdp sshd[16437]: Received disconnect from 103.231.46.66 port 60422:11: Bye Bye [preauth]
Oct  1 11:40:52 nativespace-cdp sshd[16437]: Disconnected from 103.231.46.66 port 60422 [preauth]
Oct  1 11:41:08 nativespace-cdp sshd[16507]: Invalid user usuario from 46.181.61.58 port 47394
Oct  1 11:41:08 nativespace-cdp sshd[16507]: input_userauth_request: invalid user usuario [preauth]
Oct  1 11:41:08 nativespace-cdp sshd[16507]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:41:08 nativespace-cdp sshd[16507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:41:09 nativespace-cdp sshd[16507]: Failed password for invalid user usuario from 46.181.61.58 port 47394 ssh2
Oct  1 11:41:09 nativespace-cdp sshd[16507]: Received disconnect from 46.181.61.58 port 47394:11: Bye Bye [preauth]
Oct  1 11:41:09 nativespace-cdp sshd[16507]: Disconnected from 46.181.61.58 port 47394 [preauth]
Oct  1 11:41:14 nativespace-cdp sshd[16528]: Invalid user ubuntu from 210.59.205.48 port 33640
Oct  1 11:41:14 nativespace-cdp sshd[16528]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:41:14 nativespace-cdp sshd[16528]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:41:14 nativespace-cdp sshd[16528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:41:15 nativespace-cdp sshd[16528]: Failed password for invalid user ubuntu from 210.59.205.48 port 33640 ssh2
Oct  1 11:41:16 nativespace-cdp sshd[16528]: Received disconnect from 210.59.205.48 port 33640:11: Bye Bye [preauth]
Oct  1 11:41:16 nativespace-cdp sshd[16528]: Disconnected from 210.59.205.48 port 33640 [preauth]
Oct  1 11:41:33 nativespace-cdp sshd[16674]: Connection closed by 159.100.136.21 port 36208 [preauth]
Oct  1 11:41:33 nativespace-cdp sshd[16667]: Invalid user test from 223.17.0.181 port 49456
Oct  1 11:41:33 nativespace-cdp sshd[16667]: input_userauth_request: invalid user test [preauth]
Oct  1 11:41:33 nativespace-cdp sshd[16667]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:41:33 nativespace-cdp sshd[16667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:41:35 nativespace-cdp sshd[16667]: Failed password for invalid user test from 223.17.0.181 port 49456 ssh2
Oct  1 11:41:35 nativespace-cdp sshd[16667]: Received disconnect from 223.17.0.181 port 49456:11: Bye Bye [preauth]
Oct  1 11:41:35 nativespace-cdp sshd[16667]: Disconnected from 223.17.0.181 port 49456 [preauth]
Oct  1 11:41:49 nativespace-cdp sshd[16715]: Invalid user support from 103.231.46.66 port 46922
Oct  1 11:41:49 nativespace-cdp sshd[16715]: input_userauth_request: invalid user support [preauth]
Oct  1 11:41:49 nativespace-cdp sshd[16715]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:41:49 nativespace-cdp sshd[16715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:41:51 nativespace-cdp sshd[16715]: Failed password for invalid user support from 103.231.46.66 port 46922 ssh2
Oct  1 11:41:51 nativespace-cdp sshd[16715]: Received disconnect from 103.231.46.66 port 46922:11: Bye Bye [preauth]
Oct  1 11:41:51 nativespace-cdp sshd[16715]: Disconnected from 103.231.46.66 port 46922 [preauth]
Oct  1 11:42:08 nativespace-cdp sshd[16772]: Connection closed by 200.109.234.38 port 37956 [preauth]
Oct  1 11:42:34 nativespace-cdp sshd[16893]: Invalid user user from 223.17.0.181 port 44088
Oct  1 11:42:34 nativespace-cdp sshd[16893]: input_userauth_request: invalid user user [preauth]
Oct  1 11:42:34 nativespace-cdp sshd[16893]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:42:34 nativespace-cdp sshd[16893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:42:36 nativespace-cdp sshd[16893]: Failed password for invalid user user from 223.17.0.181 port 44088 ssh2
Oct  1 11:42:36 nativespace-cdp sshd[16893]: Received disconnect from 223.17.0.181 port 44088:11: Bye Bye [preauth]
Oct  1 11:42:36 nativespace-cdp sshd[16893]: Disconnected from 223.17.0.181 port 44088 [preauth]
Oct  1 11:42:48 nativespace-cdp sshd[17004]: Invalid user test01 from 103.231.46.66 port 33422
Oct  1 11:42:48 nativespace-cdp sshd[17004]: input_userauth_request: invalid user test01 [preauth]
Oct  1 11:42:48 nativespace-cdp sshd[17004]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:42:48 nativespace-cdp sshd[17004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:42:49 nativespace-cdp sshd[17004]: Failed password for invalid user test01 from 103.231.46.66 port 33422 ssh2
Oct  1 11:42:49 nativespace-cdp sshd[17004]: Received disconnect from 103.231.46.66 port 33422:11: Bye Bye [preauth]
Oct  1 11:42:49 nativespace-cdp sshd[17004]: Disconnected from 103.231.46.66 port 33422 [preauth]
Oct  1 11:42:50 nativespace-cdp sshd[17108]: Invalid user ubuntu from 46.181.61.58 port 34754
Oct  1 11:42:50 nativespace-cdp sshd[17108]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:42:50 nativespace-cdp sshd[17108]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:42:50 nativespace-cdp sshd[17108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:42:52 nativespace-cdp sshd[17108]: Failed password for invalid user ubuntu from 46.181.61.58 port 34754 ssh2
Oct  1 11:42:53 nativespace-cdp sshd[17108]: Received disconnect from 46.181.61.58 port 34754:11: Bye Bye [preauth]
Oct  1 11:42:53 nativespace-cdp sshd[17108]: Disconnected from 46.181.61.58 port 34754 [preauth]
Oct  1 11:43:04 nativespace-cdp sshd[17123]: Received disconnect from 210.59.205.48 port 49760:11: Bye Bye [preauth]
Oct  1 11:43:04 nativespace-cdp sshd[17123]: Disconnected from 210.59.205.48 port 49760 [preauth]
Oct  1 11:43:27 nativespace-cdp sshd[17254]: Invalid user ubuntu from 223.17.0.181 port 56566
Oct  1 11:43:27 nativespace-cdp sshd[17254]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:43:27 nativespace-cdp sshd[17254]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:43:27 nativespace-cdp sshd[17254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:43:29 nativespace-cdp sshd[17254]: Failed password for invalid user ubuntu from 223.17.0.181 port 56566 ssh2
Oct  1 11:43:30 nativespace-cdp sshd[17254]: Received disconnect from 223.17.0.181 port 56566:11: Bye Bye [preauth]
Oct  1 11:43:30 nativespace-cdp sshd[17254]: Disconnected from 223.17.0.181 port 56566 [preauth]
Oct  1 11:43:44 nativespace-cdp sshd[17300]: Invalid user user from 103.231.46.66 port 48162
Oct  1 11:43:44 nativespace-cdp sshd[17300]: input_userauth_request: invalid user user [preauth]
Oct  1 11:43:44 nativespace-cdp sshd[17300]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:43:44 nativespace-cdp sshd[17300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:43:46 nativespace-cdp sshd[17300]: Failed password for invalid user user from 103.231.46.66 port 48162 ssh2
Oct  1 11:43:46 nativespace-cdp sshd[17300]: Received disconnect from 103.231.46.66 port 48162:11: Bye Bye [preauth]
Oct  1 11:43:46 nativespace-cdp sshd[17300]: Disconnected from 103.231.46.66 port 48162 [preauth]
Oct  1 11:43:51 nativespace-cdp sshd[17323]: Invalid user tom from 200.109.234.38 port 54454
Oct  1 11:43:51 nativespace-cdp sshd[17323]: input_userauth_request: invalid user tom [preauth]
Oct  1 11:43:51 nativespace-cdp sshd[17323]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:43:51 nativespace-cdp sshd[17323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:43:53 nativespace-cdp sshd[17323]: Failed password for invalid user tom from 200.109.234.38 port 54454 ssh2
Oct  1 11:43:55 nativespace-cdp sshd[17323]: Received disconnect from 200.109.234.38 port 54454:11: Bye Bye [preauth]
Oct  1 11:43:55 nativespace-cdp sshd[17323]: Disconnected from 200.109.234.38 port 54454 [preauth]
Oct  1 11:44:22 nativespace-cdp sshd[17399]: Invalid user user from 223.17.0.181 port 42562
Oct  1 11:44:22 nativespace-cdp sshd[17399]: input_userauth_request: invalid user user [preauth]
Oct  1 11:44:22 nativespace-cdp sshd[17399]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:44:22 nativespace-cdp sshd[17399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:44:25 nativespace-cdp sshd[17399]: Failed password for invalid user user from 223.17.0.181 port 42562 ssh2
Oct  1 11:44:25 nativespace-cdp sshd[17399]: Received disconnect from 223.17.0.181 port 42562:11: Bye Bye [preauth]
Oct  1 11:44:25 nativespace-cdp sshd[17399]: Disconnected from 223.17.0.181 port 42562 [preauth]
Oct  1 11:44:34 nativespace-cdp sshd[17428]: Invalid user acer from 46.181.61.58 port 50348
Oct  1 11:44:34 nativespace-cdp sshd[17428]: input_userauth_request: invalid user acer [preauth]
Oct  1 11:44:34 nativespace-cdp sshd[17428]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:44:34 nativespace-cdp sshd[17428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:44:36 nativespace-cdp sshd[17428]: Failed password for invalid user acer from 46.181.61.58 port 50348 ssh2
Oct  1 11:44:36 nativespace-cdp sshd[17428]: Received disconnect from 46.181.61.58 port 50348:11: Bye Bye [preauth]
Oct  1 11:44:36 nativespace-cdp sshd[17428]: Disconnected from 46.181.61.58 port 50348 [preauth]
Oct  1 11:44:41 nativespace-cdp sshd[17462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48  user=root
Oct  1 11:44:41 nativespace-cdp sshd[17462]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:44:42 nativespace-cdp sshd[17470]: Invalid user sopuser from 103.231.46.66 port 34676
Oct  1 11:44:42 nativespace-cdp sshd[17470]: input_userauth_request: invalid user sopuser [preauth]
Oct  1 11:44:42 nativespace-cdp sshd[17470]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:44:42 nativespace-cdp sshd[17470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66
Oct  1 11:44:44 nativespace-cdp sshd[17462]: Failed password for root from 210.59.205.48 port 37646 ssh2
Oct  1 11:44:44 nativespace-cdp sshd[17470]: Failed password for invalid user sopuser from 103.231.46.66 port 34676 ssh2
Oct  1 11:44:46 nativespace-cdp sshd[17470]: Received disconnect from 103.231.46.66 port 34676:11: Bye Bye [preauth]
Oct  1 11:44:46 nativespace-cdp sshd[17470]: Disconnected from 103.231.46.66 port 34676 [preauth]
Oct  1 11:44:47 nativespace-cdp sshd[17462]: Received disconnect from 210.59.205.48 port 37646:11: Bye Bye [preauth]
Oct  1 11:44:47 nativespace-cdp sshd[17462]: Disconnected from 210.59.205.48 port 37646 [preauth]
Oct  1 11:45:41 nativespace-cdp sshd[17773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.231.46.66  user=root
Oct  1 11:45:41 nativespace-cdp sshd[17773]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:45:42 nativespace-cdp sshd[17779]: Invalid user svn from 200.109.234.38 port 39834
Oct  1 11:45:42 nativespace-cdp sshd[17779]: input_userauth_request: invalid user svn [preauth]
Oct  1 11:45:42 nativespace-cdp sshd[17779]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:45:42 nativespace-cdp sshd[17779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:45:43 nativespace-cdp sshd[17773]: Failed password for root from 103.231.46.66 port 49410 ssh2
Oct  1 11:45:43 nativespace-cdp sshd[17773]: Received disconnect from 103.231.46.66 port 49410:11: Bye Bye [preauth]
Oct  1 11:45:43 nativespace-cdp sshd[17773]: Disconnected from 103.231.46.66 port 49410 [preauth]
Oct  1 11:45:44 nativespace-cdp sshd[17779]: Failed password for invalid user svn from 200.109.234.38 port 39834 ssh2
Oct  1 11:45:44 nativespace-cdp sshd[17779]: Received disconnect from 200.109.234.38 port 39834:11: Bye Bye [preauth]
Oct  1 11:45:44 nativespace-cdp sshd[17779]: Disconnected from 200.109.234.38 port 39834 [preauth]
Oct  1 11:46:19 nativespace-cdp sshd[17984]: Invalid user ubuntu from 46.181.61.58 port 37708
Oct  1 11:46:19 nativespace-cdp sshd[17984]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:46:19 nativespace-cdp sshd[17984]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:46:19 nativespace-cdp sshd[17984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:46:21 nativespace-cdp sshd[17984]: Failed password for invalid user ubuntu from 46.181.61.58 port 37708 ssh2
Oct  1 11:46:21 nativespace-cdp sshd[17984]: Received disconnect from 46.181.61.58 port 37708:11: Bye Bye [preauth]
Oct  1 11:46:21 nativespace-cdp sshd[17984]: Disconnected from 46.181.61.58 port 37708 [preauth]
Oct  1 11:46:31 nativespace-cdp sshd[18015]: Invalid user tom from 210.59.205.48 port 53756
Oct  1 11:46:31 nativespace-cdp sshd[18015]: input_userauth_request: invalid user tom [preauth]
Oct  1 11:46:31 nativespace-cdp sshd[18015]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:46:31 nativespace-cdp sshd[18015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:46:32 nativespace-cdp sshd[18015]: Failed password for invalid user tom from 210.59.205.48 port 53756 ssh2
Oct  1 11:46:32 nativespace-cdp sshd[18015]: Received disconnect from 210.59.205.48 port 53756:11: Bye Bye [preauth]
Oct  1 11:46:32 nativespace-cdp sshd[18015]: Disconnected from 210.59.205.48 port 53756 [preauth]
Oct  1 11:46:33 nativespace-cdp sshd[18026]: Connection closed by 159.100.136.21 port 45752 [preauth]
Oct  1 11:47:28 nativespace-cdp sshd[18217]: Invalid user ubuntu from 223.17.0.181 port 35212
Oct  1 11:47:28 nativespace-cdp sshd[18217]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:47:28 nativespace-cdp sshd[18217]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:47:28 nativespace-cdp sshd[18217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181
Oct  1 11:47:29 nativespace-cdp sshd[18217]: Failed password for invalid user ubuntu from 223.17.0.181 port 35212 ssh2
Oct  1 11:47:30 nativespace-cdp sshd[18217]: Received disconnect from 223.17.0.181 port 35212:11: Bye Bye [preauth]
Oct  1 11:47:30 nativespace-cdp sshd[18217]: Disconnected from 223.17.0.181 port 35212 [preauth]
Oct  1 11:47:30 nativespace-cdp sshd[18224]: Invalid user user from 200.109.234.38 port 34764
Oct  1 11:47:30 nativespace-cdp sshd[18224]: input_userauth_request: invalid user user [preauth]
Oct  1 11:47:30 nativespace-cdp sshd[18224]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:47:30 nativespace-cdp sshd[18224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:47:32 nativespace-cdp sshd[18224]: Failed password for invalid user user from 200.109.234.38 port 34764 ssh2
Oct  1 11:47:32 nativespace-cdp sshd[18224]: Received disconnect from 200.109.234.38 port 34764:11: Bye Bye [preauth]
Oct  1 11:47:32 nativespace-cdp sshd[18224]: Disconnected from 200.109.234.38 port 34764 [preauth]
Oct  1 11:48:02 nativespace-cdp sshd[18426]: Invalid user odoo from 46.181.61.58 port 53302
Oct  1 11:48:02 nativespace-cdp sshd[18426]: input_userauth_request: invalid user odoo [preauth]
Oct  1 11:48:02 nativespace-cdp sshd[18426]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:48:02 nativespace-cdp sshd[18426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:48:04 nativespace-cdp sshd[18426]: Failed password for invalid user odoo from 46.181.61.58 port 53302 ssh2
Oct  1 11:48:04 nativespace-cdp sshd[18426]: Received disconnect from 46.181.61.58 port 53302:11: Bye Bye [preauth]
Oct  1 11:48:04 nativespace-cdp sshd[18426]: Disconnected from 46.181.61.58 port 53302 [preauth]
Oct  1 11:48:17 nativespace-cdp sshd[18461]: Invalid user sysadmin from 210.59.205.48 port 41634
Oct  1 11:48:17 nativespace-cdp sshd[18461]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 11:48:17 nativespace-cdp sshd[18461]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:48:17 nativespace-cdp sshd[18461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:48:19 nativespace-cdp sshd[18461]: Failed password for invalid user sysadmin from 210.59.205.48 port 41634 ssh2
Oct  1 11:48:19 nativespace-cdp sshd[18461]: Received disconnect from 210.59.205.48 port 41634:11: Bye Bye [preauth]
Oct  1 11:48:19 nativespace-cdp sshd[18461]: Disconnected from 210.59.205.48 port 41634 [preauth]
Oct  1 11:48:32 nativespace-cdp sshd[18483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.17.0.181  user=root
Oct  1 11:48:32 nativespace-cdp sshd[18483]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:48:34 nativespace-cdp sshd[18483]: Failed password for root from 223.17.0.181 port 39096 ssh2
Oct  1 11:48:34 nativespace-cdp sshd[18483]: Received disconnect from 223.17.0.181 port 39096:11: Bye Bye [preauth]
Oct  1 11:48:34 nativespace-cdp sshd[18483]: Disconnected from 223.17.0.181 port 39096 [preauth]
Oct  1 11:49:20 nativespace-cdp sshd[18654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38  user=root
Oct  1 11:49:20 nativespace-cdp sshd[18654]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:49:22 nativespace-cdp sshd[18654]: Failed password for root from 200.109.234.38 port 49596 ssh2
Oct  1 11:49:22 nativespace-cdp sshd[18654]: Received disconnect from 200.109.234.38 port 49596:11: Bye Bye [preauth]
Oct  1 11:49:22 nativespace-cdp sshd[18654]: Disconnected from 200.109.234.38 port 49596 [preauth]
Oct  1 11:49:43 nativespace-cdp sshd[18720]: Invalid user test from 46.181.61.58 port 40666
Oct  1 11:49:43 nativespace-cdp sshd[18720]: input_userauth_request: invalid user test [preauth]
Oct  1 11:49:43 nativespace-cdp sshd[18720]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:49:43 nativespace-cdp sshd[18720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:49:45 nativespace-cdp sshd[18720]: Failed password for invalid user test from 46.181.61.58 port 40666 ssh2
Oct  1 11:49:45 nativespace-cdp sshd[18720]: Received disconnect from 46.181.61.58 port 40666:11: Bye Bye [preauth]
Oct  1 11:49:45 nativespace-cdp sshd[18720]: Disconnected from 46.181.61.58 port 40666 [preauth]
Oct  1 11:50:06 nativespace-cdp sshd[19099]: Invalid user testuser from 210.59.205.48 port 57744
Oct  1 11:50:06 nativespace-cdp sshd[19099]: input_userauth_request: invalid user testuser [preauth]
Oct  1 11:50:06 nativespace-cdp sshd[19099]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:50:06 nativespace-cdp sshd[19099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:50:08 nativespace-cdp sshd[19099]: Failed password for invalid user testuser from 210.59.205.48 port 57744 ssh2
Oct  1 11:50:11 nativespace-cdp sshd[19099]: Received disconnect from 210.59.205.48 port 57744:11: Bye Bye [preauth]
Oct  1 11:50:11 nativespace-cdp sshd[19099]: Disconnected from 210.59.205.48 port 57744 [preauth]
Oct  1 11:51:10 nativespace-cdp sshd[19332]: Invalid user hz from 200.109.234.38 port 38858
Oct  1 11:51:10 nativespace-cdp sshd[19332]: input_userauth_request: invalid user hz [preauth]
Oct  1 11:51:10 nativespace-cdp sshd[19332]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:51:10 nativespace-cdp sshd[19332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:51:13 nativespace-cdp sshd[19332]: Failed password for invalid user hz from 200.109.234.38 port 38858 ssh2
Oct  1 11:51:13 nativespace-cdp sshd[19332]: Received disconnect from 200.109.234.38 port 38858:11: Bye Bye [preauth]
Oct  1 11:51:13 nativespace-cdp sshd[19332]: Disconnected from 200.109.234.38 port 38858 [preauth]
Oct  1 11:51:26 nativespace-cdp sshd[19390]: Invalid user hz from 46.181.61.58 port 56266
Oct  1 11:51:26 nativespace-cdp sshd[19390]: input_userauth_request: invalid user hz [preauth]
Oct  1 11:51:26 nativespace-cdp sshd[19390]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:51:26 nativespace-cdp sshd[19390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:51:28 nativespace-cdp sshd[19390]: Failed password for invalid user hz from 46.181.61.58 port 56266 ssh2
Oct  1 11:51:28 nativespace-cdp sshd[19390]: Received disconnect from 46.181.61.58 port 56266:11: Bye Bye [preauth]
Oct  1 11:51:28 nativespace-cdp sshd[19390]: Disconnected from 46.181.61.58 port 56266 [preauth]
Oct  1 11:51:34 nativespace-cdp sshd[19410]: Connection closed by 159.100.136.21 port 55270 [preauth]
Oct  1 11:51:59 nativespace-cdp sshd[19543]: Connection closed by 210.59.205.48 port 45640 [preauth]
Oct  1 11:53:00 nativespace-cdp sshd[19794]: Connection closed by 200.109.234.38 port 57996 [preauth]
Oct  1 11:53:09 nativespace-cdp sshd[19830]: Invalid user support from 46.181.61.58 port 43698
Oct  1 11:53:09 nativespace-cdp sshd[19830]: input_userauth_request: invalid user support [preauth]
Oct  1 11:53:09 nativespace-cdp sshd[19830]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:53:09 nativespace-cdp sshd[19830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:53:11 nativespace-cdp sshd[19830]: Failed password for invalid user support from 46.181.61.58 port 43698 ssh2
Oct  1 11:53:11 nativespace-cdp sshd[19830]: Received disconnect from 46.181.61.58 port 43698:11: Bye Bye [preauth]
Oct  1 11:53:11 nativespace-cdp sshd[19830]: Disconnected from 46.181.61.58 port 43698 [preauth]
Oct  1 11:53:46 nativespace-cdp sshd[19927]: Invalid user nexus from 210.59.205.48 port 33600
Oct  1 11:53:46 nativespace-cdp sshd[19927]: input_userauth_request: invalid user nexus [preauth]
Oct  1 11:53:46 nativespace-cdp sshd[19927]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:53:46 nativespace-cdp sshd[19927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 11:53:48 nativespace-cdp sshd[19927]: Failed password for invalid user nexus from 210.59.205.48 port 33600 ssh2
Oct  1 11:53:48 nativespace-cdp sshd[19927]: Received disconnect from 210.59.205.48 port 33600:11: Bye Bye [preauth]
Oct  1 11:53:48 nativespace-cdp sshd[19927]: Disconnected from 210.59.205.48 port 33600 [preauth]
Oct  1 11:54:45 nativespace-cdp sshd[20095]: Invalid user deploy from 200.109.234.38 port 37596
Oct  1 11:54:45 nativespace-cdp sshd[20095]: input_userauth_request: invalid user deploy [preauth]
Oct  1 11:54:45 nativespace-cdp sshd[20095]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:54:45 nativespace-cdp sshd[20095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:54:45 nativespace-cdp sshd[20103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58  user=root
Oct  1 11:54:45 nativespace-cdp sshd[20103]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 11:54:47 nativespace-cdp sshd[20095]: Failed password for invalid user deploy from 200.109.234.38 port 37596 ssh2
Oct  1 11:54:47 nativespace-cdp sshd[20103]: Failed password for root from 46.181.61.58 port 59372 ssh2
Oct  1 11:54:49 nativespace-cdp sshd[20103]: Received disconnect from 46.181.61.58 port 59372:11: Bye Bye [preauth]
Oct  1 11:54:49 nativespace-cdp sshd[20103]: Disconnected from 46.181.61.58 port 59372 [preauth]
Oct  1 11:54:51 nativespace-cdp sshd[20095]: Received disconnect from 200.109.234.38 port 37596:11: Bye Bye [preauth]
Oct  1 11:54:51 nativespace-cdp sshd[20095]: Disconnected from 200.109.234.38 port 37596 [preauth]
Oct  1 11:56:27 nativespace-cdp sshd[20603]: Invalid user user from 46.181.61.58 port 46820
Oct  1 11:56:27 nativespace-cdp sshd[20603]: input_userauth_request: invalid user user [preauth]
Oct  1 11:56:27 nativespace-cdp sshd[20603]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:56:27 nativespace-cdp sshd[20603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:56:29 nativespace-cdp sshd[20603]: Failed password for invalid user user from 46.181.61.58 port 46820 ssh2
Oct  1 11:56:29 nativespace-cdp sshd[20603]: Received disconnect from 46.181.61.58 port 46820:11: Bye Bye [preauth]
Oct  1 11:56:29 nativespace-cdp sshd[20603]: Disconnected from 46.181.61.58 port 46820 [preauth]
Oct  1 11:56:31 nativespace-cdp sshd[20609]: Invalid user ubuntu from 200.109.234.38 port 47466
Oct  1 11:56:31 nativespace-cdp sshd[20609]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 11:56:31 nativespace-cdp sshd[20609]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:56:31 nativespace-cdp sshd[20609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:56:32 nativespace-cdp sshd[20609]: Failed password for invalid user ubuntu from 200.109.234.38 port 47466 ssh2
Oct  1 11:56:32 nativespace-cdp sshd[20609]: Received disconnect from 200.109.234.38 port 47466:11: Bye Bye [preauth]
Oct  1 11:56:32 nativespace-cdp sshd[20609]: Disconnected from 200.109.234.38 port 47466 [preauth]
Oct  1 11:56:33 nativespace-cdp sshd[20619]: Connection closed by 159.100.136.21 port 36232 [preauth]
Oct  1 11:58:00 nativespace-cdp sshd[20755]: Connection closed by 210.59.205.48 port 37764 [preauth]
Oct  1 11:58:09 nativespace-cdp sshd[21005]: Invalid user test from 46.181.61.58 port 34268
Oct  1 11:58:09 nativespace-cdp sshd[21005]: input_userauth_request: invalid user test [preauth]
Oct  1 11:58:09 nativespace-cdp sshd[21005]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:58:09 nativespace-cdp sshd[21005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 11:58:11 nativespace-cdp sshd[21005]: Failed password for invalid user test from 46.181.61.58 port 34268 ssh2
Oct  1 11:58:11 nativespace-cdp sshd[21005]: Received disconnect from 46.181.61.58 port 34268:11: Bye Bye [preauth]
Oct  1 11:58:11 nativespace-cdp sshd[21005]: Disconnected from 46.181.61.58 port 34268 [preauth]
Oct  1 11:58:19 nativespace-cdp sshd[21043]: Invalid user steam from 200.109.234.38 port 50386
Oct  1 11:58:19 nativespace-cdp sshd[21043]: input_userauth_request: invalid user steam [preauth]
Oct  1 11:58:19 nativespace-cdp sshd[21043]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 11:58:19 nativespace-cdp sshd[21043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 11:58:22 nativespace-cdp sshd[21043]: Failed password for invalid user steam from 200.109.234.38 port 50386 ssh2
Oct  1 11:58:22 nativespace-cdp sshd[21043]: Received disconnect from 200.109.234.38 port 50386:11: Bye Bye [preauth]
Oct  1 11:58:22 nativespace-cdp sshd[21043]: Disconnected from 200.109.234.38 port 50386 [preauth]
Oct  1 12:00:06 nativespace-cdp sshd[21502]: Invalid user ubuntu from 200.109.234.38 port 60188
Oct  1 12:00:06 nativespace-cdp sshd[21502]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:00:06 nativespace-cdp sshd[21502]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:00:06 nativespace-cdp sshd[21502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:00:08 nativespace-cdp sshd[21502]: Failed password for invalid user ubuntu from 200.109.234.38 port 60188 ssh2
Oct  1 12:00:09 nativespace-cdp sshd[21502]: Received disconnect from 200.109.234.38 port 60188:11: Bye Bye [preauth]
Oct  1 12:00:09 nativespace-cdp sshd[21502]: Disconnected from 200.109.234.38 port 60188 [preauth]
Oct  1 12:00:49 nativespace-cdp sshd[21622]: Invalid user test from 210.59.205.48 port 41934
Oct  1 12:00:49 nativespace-cdp sshd[21622]: input_userauth_request: invalid user test [preauth]
Oct  1 12:00:49 nativespace-cdp sshd[21622]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:00:49 nativespace-cdp sshd[21622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:00:51 nativespace-cdp sshd[21622]: Failed password for invalid user test from 210.59.205.48 port 41934 ssh2
Oct  1 12:00:52 nativespace-cdp sshd[21622]: Received disconnect from 210.59.205.48 port 41934:11: Bye Bye [preauth]
Oct  1 12:00:52 nativespace-cdp sshd[21622]: Disconnected from 210.59.205.48 port 41934 [preauth]
Oct  1 12:01:33 nativespace-cdp sshd[21834]: Connection closed by 159.100.136.21 port 45858 [preauth]
Oct  1 12:01:34 nativespace-cdp sshd[21831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58  user=root
Oct  1 12:01:34 nativespace-cdp sshd[21831]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 12:01:35 nativespace-cdp sshd[21831]: Failed password for root from 46.181.61.58 port 37400 ssh2
Oct  1 12:01:35 nativespace-cdp sshd[21831]: Received disconnect from 46.181.61.58 port 37400:11: Bye Bye [preauth]
Oct  1 12:01:35 nativespace-cdp sshd[21831]: Disconnected from 46.181.61.58 port 37400 [preauth]
Oct  1 12:01:53 nativespace-cdp sshd[21876]: Invalid user ubuntu from 200.109.234.38 port 53202
Oct  1 12:01:53 nativespace-cdp sshd[21876]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:01:53 nativespace-cdp sshd[21876]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:01:53 nativespace-cdp sshd[21876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:01:55 nativespace-cdp sshd[21876]: Failed password for invalid user ubuntu from 200.109.234.38 port 53202 ssh2
Oct  1 12:01:56 nativespace-cdp sshd[21876]: Received disconnect from 200.109.234.38 port 53202:11: Bye Bye [preauth]
Oct  1 12:01:56 nativespace-cdp sshd[21876]: Disconnected from 200.109.234.38 port 53202 [preauth]
Oct  1 12:02:37 nativespace-cdp sshd[21998]: Invalid user username from 210.59.205.48 port 58132
Oct  1 12:02:37 nativespace-cdp sshd[21998]: input_userauth_request: invalid user username [preauth]
Oct  1 12:02:37 nativespace-cdp sshd[21998]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:02:37 nativespace-cdp sshd[21998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:02:39 nativespace-cdp sshd[21998]: Failed password for invalid user username from 210.59.205.48 port 58132 ssh2
Oct  1 12:02:42 nativespace-cdp sshd[21998]: Received disconnect from 210.59.205.48 port 58132:11: Bye Bye [preauth]
Oct  1 12:02:42 nativespace-cdp sshd[21998]: Disconnected from 210.59.205.48 port 58132 [preauth]
Oct  1 12:03:21 nativespace-cdp sshd[22200]: Invalid user abhishek from 46.181.61.58 port 53084
Oct  1 12:03:21 nativespace-cdp sshd[22200]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 12:03:21 nativespace-cdp sshd[22200]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:03:21 nativespace-cdp sshd[22200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:03:23 nativespace-cdp sshd[22200]: Failed password for invalid user abhishek from 46.181.61.58 port 53084 ssh2
Oct  1 12:03:23 nativespace-cdp sshd[22200]: Received disconnect from 46.181.61.58 port 53084:11: Bye Bye [preauth]
Oct  1 12:03:23 nativespace-cdp sshd[22200]: Disconnected from 46.181.61.58 port 53084 [preauth]
Oct  1 12:03:43 nativespace-cdp sshd[22245]: Invalid user ubuntu from 200.109.234.38 port 34262
Oct  1 12:03:43 nativespace-cdp sshd[22245]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:03:43 nativespace-cdp sshd[22245]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:03:43 nativespace-cdp sshd[22245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:03:45 nativespace-cdp sshd[22245]: Failed password for invalid user ubuntu from 200.109.234.38 port 34262 ssh2
Oct  1 12:03:45 nativespace-cdp sshd[22245]: Received disconnect from 200.109.234.38 port 34262:11: Bye Bye [preauth]
Oct  1 12:03:45 nativespace-cdp sshd[22245]: Disconnected from 200.109.234.38 port 34262 [preauth]
Oct  1 12:04:30 nativespace-cdp sshd[22360]: Invalid user tg from 210.59.205.48 port 46096
Oct  1 12:04:30 nativespace-cdp sshd[22360]: input_userauth_request: invalid user tg [preauth]
Oct  1 12:04:30 nativespace-cdp sshd[22360]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:04:30 nativespace-cdp sshd[22360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:04:32 nativespace-cdp sshd[22360]: Failed password for invalid user tg from 210.59.205.48 port 46096 ssh2
Oct  1 12:04:32 nativespace-cdp sshd[22360]: Received disconnect from 210.59.205.48 port 46096:11: Bye Bye [preauth]
Oct  1 12:04:32 nativespace-cdp sshd[22360]: Disconnected from 210.59.205.48 port 46096 [preauth]
Oct  1 12:05:07 nativespace-cdp sshd[22604]: Invalid user ubuntu from 46.181.61.58 port 40528
Oct  1 12:05:07 nativespace-cdp sshd[22604]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:05:07 nativespace-cdp sshd[22604]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:05:07 nativespace-cdp sshd[22604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:05:10 nativespace-cdp sshd[22604]: Failed password for invalid user ubuntu from 46.181.61.58 port 40528 ssh2
Oct  1 12:05:10 nativespace-cdp sshd[22604]: Received disconnect from 46.181.61.58 port 40528:11: Bye Bye [preauth]
Oct  1 12:05:10 nativespace-cdp sshd[22604]: Disconnected from 46.181.61.58 port 40528 [preauth]
Oct  1 12:05:38 nativespace-cdp sshd[22760]: Invalid user odoo from 200.109.234.38 port 53852
Oct  1 12:05:38 nativespace-cdp sshd[22760]: input_userauth_request: invalid user odoo [preauth]
Oct  1 12:05:38 nativespace-cdp sshd[22760]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:05:38 nativespace-cdp sshd[22760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:05:39 nativespace-cdp sshd[22760]: Failed password for invalid user odoo from 200.109.234.38 port 53852 ssh2
Oct  1 12:05:39 nativespace-cdp sshd[22760]: Received disconnect from 200.109.234.38 port 53852:11: Bye Bye [preauth]
Oct  1 12:05:39 nativespace-cdp sshd[22760]: Disconnected from 200.109.234.38 port 53852 [preauth]
Oct  1 12:06:16 nativespace-cdp sshd[22902]: Invalid user svn from 210.59.205.48 port 34054
Oct  1 12:06:16 nativespace-cdp sshd[22902]: input_userauth_request: invalid user svn [preauth]
Oct  1 12:06:16 nativespace-cdp sshd[22902]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:06:16 nativespace-cdp sshd[22902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:06:18 nativespace-cdp sshd[22902]: Failed password for invalid user svn from 210.59.205.48 port 34054 ssh2
Oct  1 12:06:18 nativespace-cdp sshd[22902]: Received disconnect from 210.59.205.48 port 34054:11: Bye Bye [preauth]
Oct  1 12:06:18 nativespace-cdp sshd[22902]: Disconnected from 210.59.205.48 port 34054 [preauth]
Oct  1 12:06:36 nativespace-cdp sshd[22962]: Connection closed by 159.100.136.21 port 55634 [preauth]
Oct  1 12:06:48 nativespace-cdp sshd[22996]: Invalid user ali from 46.181.61.58 port 56204
Oct  1 12:06:48 nativespace-cdp sshd[22996]: input_userauth_request: invalid user ali [preauth]
Oct  1 12:06:48 nativespace-cdp sshd[22996]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:06:48 nativespace-cdp sshd[22996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:06:50 nativespace-cdp sshd[22996]: Failed password for invalid user ali from 46.181.61.58 port 56204 ssh2
Oct  1 12:06:52 nativespace-cdp sshd[22996]: Received disconnect from 46.181.61.58 port 56204:11: Bye Bye [preauth]
Oct  1 12:06:52 nativespace-cdp sshd[22996]: Disconnected from 46.181.61.58 port 56204 [preauth]
Oct  1 12:07:25 nativespace-cdp sshd[23191]: Invalid user testuser from 200.109.234.38 port 55016
Oct  1 12:07:25 nativespace-cdp sshd[23191]: input_userauth_request: invalid user testuser [preauth]
Oct  1 12:07:25 nativespace-cdp sshd[23191]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:07:25 nativespace-cdp sshd[23191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:07:28 nativespace-cdp sshd[23191]: Failed password for invalid user testuser from 200.109.234.38 port 55016 ssh2
Oct  1 12:07:28 nativespace-cdp sshd[23191]: Received disconnect from 200.109.234.38 port 55016:11: Bye Bye [preauth]
Oct  1 12:07:28 nativespace-cdp sshd[23191]: Disconnected from 200.109.234.38 port 55016 [preauth]
Oct  1 12:08:01 nativespace-cdp sshd[23468]: Invalid user support from 210.59.205.48 port 50244
Oct  1 12:08:01 nativespace-cdp sshd[23468]: input_userauth_request: invalid user support [preauth]
Oct  1 12:08:01 nativespace-cdp sshd[23468]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:08:01 nativespace-cdp sshd[23468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:08:04 nativespace-cdp sshd[23468]: Failed password for invalid user support from 210.59.205.48 port 50244 ssh2
Oct  1 12:08:04 nativespace-cdp sshd[23468]: Received disconnect from 210.59.205.48 port 50244:11: Bye Bye [preauth]
Oct  1 12:08:04 nativespace-cdp sshd[23468]: Disconnected from 210.59.205.48 port 50244 [preauth]
Oct  1 12:08:33 nativespace-cdp sshd[23565]: Invalid user nexus from 46.181.61.58 port 43652
Oct  1 12:08:33 nativespace-cdp sshd[23565]: input_userauth_request: invalid user nexus [preauth]
Oct  1 12:08:33 nativespace-cdp sshd[23565]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:08:33 nativespace-cdp sshd[23565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:08:35 nativespace-cdp sshd[23565]: Failed password for invalid user nexus from 46.181.61.58 port 43652 ssh2
Oct  1 12:08:35 nativespace-cdp sshd[23565]: Received disconnect from 46.181.61.58 port 43652:11: Bye Bye [preauth]
Oct  1 12:08:35 nativespace-cdp sshd[23565]: Disconnected from 46.181.61.58 port 43652 [preauth]
Oct  1 12:09:14 nativespace-cdp sshd[23706]: Invalid user abhishek from 200.109.234.38 port 38860
Oct  1 12:09:14 nativespace-cdp sshd[23706]: input_userauth_request: invalid user abhishek [preauth]
Oct  1 12:09:14 nativespace-cdp sshd[23706]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:09:14 nativespace-cdp sshd[23706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:09:16 nativespace-cdp sshd[23706]: Failed password for invalid user abhishek from 200.109.234.38 port 38860 ssh2
Oct  1 12:09:17 nativespace-cdp sshd[23706]: Received disconnect from 200.109.234.38 port 38860:11: Bye Bye [preauth]
Oct  1 12:09:17 nativespace-cdp sshd[23706]: Disconnected from 200.109.234.38 port 38860 [preauth]
Oct  1 12:09:51 nativespace-cdp sshd[23816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48  user=root
Oct  1 12:09:51 nativespace-cdp sshd[23816]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 12:09:53 nativespace-cdp sshd[23816]: Failed password for root from 210.59.205.48 port 38212 ssh2
Oct  1 12:09:54 nativespace-cdp sshd[23816]: Received disconnect from 210.59.205.48 port 38212:11: Bye Bye [preauth]
Oct  1 12:09:54 nativespace-cdp sshd[23816]: Disconnected from 210.59.205.48 port 38212 [preauth]
Oct  1 12:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 12:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:09:59 nativespace-cdp sudo[23845]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:00 nativespace-cdp sudo[23849]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 12:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:01 nativespace-cdp sudo[23852]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 12:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:01 nativespace-cdp sudo[23858]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 12:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:06 nativespace-cdp sudo[23861]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 12:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:06 nativespace-cdp sudo[23998]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 12:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:06 nativespace-cdp sudo[24002]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 12:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:06 nativespace-cdp sudo[24005]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 12:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:07 nativespace-cdp sudo[24008]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 12:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:07 nativespace-cdp sudo[24011]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 12:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:07 nativespace-cdp sudo[24014]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 12:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:14 nativespace-cdp sudo[24035]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 12:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:16 nativespace-cdp sudo[24042]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nvihkvu user-2=cath user-3=sketchy user-4=havantho user-5=what user-6=oubpgvbx user-7=tstardom user-8=design user-9=kategilpin user-10=ladburyp user-11=dancinggardener user-12=stagingerris user-13=boldover user-14=nove user-15=sosevalu user-16=crrtipdl user-17=bakery user-18=onlycont user-19=attlebor user-20=lucy user-21=romaldki user-22=branko user-23=hodgsonmail user-24=ranxterc user-25=outdoorc user-26=jennimil user-27=tomandle user-28=careers user-29=nbhavers user-30=david user-31=mcdermos user-32=chrisdal user-33=howardon user-34=pugwash user-35=paulmca1 user-36=cwsocial user-37=ninejimm user-38=reliable user-39=cathski user-40=cambria1 user-41=courseme user-42=eugincou user-43=hirefootballgame user-44=philmcph user-45=ctedorgu user-46=firstre5 user-47=steakbridieme user-48=donnychicago
Oct  1 12:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=lkpier user-50=health2045 user-51=fortunaz user-52=leftie user-53=foods user-54=nscdp user-55=tigerlet user-56=barbersh user-57=hidden user-58=nomistakes user-59=smrszyqg user-60=isleofwi user-61=nsceres user-62=burydropin user-63=fawcettd user-64=dhyana user-65=eatspam user-66=darkstar user-67=beauty user-68=sibtoncc user-69=asandcoc user-70=steve user-71=zebrapho user-72=bwppodcast user-73=alexadmin user-74=skyfirec user-75=nativene user-76=askhform user-77=stuartge user-78=innovat1 user-79=battlere user-80=oneoarco user-81=firstre2 user-82=vivienn1 user-83=brighto1 user-84=nstriton user-85=bemadonn user-86=belle user-87=ggaaorgu user-88=newstoda user-89=bedfords user-90=carsinyo user-91=fetch user-92=hubmaster user-93=elecleis user-94=milloyco user-95=gilpin user-96=thqkgnbz user-97=connectedshoppin user-98=ianrayne user-99=accooper user-100=coursemc user-101=opaiscyx user-102=firstres
Oct  1 12:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=jonhartl user-104=seftvta user-105=ultbcrra user-106=southlon user-107=highlegh user-108=firstred user-109=costestimatorco user-110=firstrel user-111=clarkass user-112=ptkxhsbt user-113=dickemery123 user-114=martsblo user-115=magichat user-116=lbhyisi user-117=hhdugcor user-118=sarafoundation user-119=atestord user-120=strathar user-121=brmrjxl user-122=lakesan1 user-123=musorguk user-124=megacards user-125=wilsonsw user-126=theblack user-127=hodgesonweb user-128=spectrum user-129=jarvisin user-130=leereyn1 user-131=stephani user-132=still user-133=agproduc user-134=maflemin user-135=lbscrmod user-136=connect9 user-137=athenare user-138=vantagep user-139=foundation user-140=booff user-141=markward user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 12:10:16 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 12:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:17 nativespace-cdp sudo[24050]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 12:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:17 nativespace-cdp sudo[24060]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wq5bSKIZqLuUh9sj.~
Oct  1 12:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:17 nativespace-cdp sudo[24063]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wq5bSKIZqLuUh9sj.~'
Oct  1 12:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:17 nativespace-cdp sudo[24066]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-wq5bSKIZqLuUh9sj.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 12:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:18 nativespace-cdp sudo[24070]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 12:10:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:18 nativespace-cdp sudo[24073]: pam_unix(sudo:session): session closed for user root
Oct  1 12:10:21 nativespace-cdp sshd[24081]: Invalid user superman from 46.181.61.58 port 59332
Oct  1 12:10:21 nativespace-cdp sshd[24081]: input_userauth_request: invalid user superman [preauth]
Oct  1 12:10:21 nativespace-cdp sshd[24081]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:10:21 nativespace-cdp sshd[24081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:10:22 nativespace-cdp sshd[24081]: Failed password for invalid user superman from 46.181.61.58 port 59332 ssh2
Oct  1 12:10:22 nativespace-cdp sshd[24081]: Received disconnect from 46.181.61.58 port 59332:11: Bye Bye [preauth]
Oct  1 12:10:22 nativespace-cdp sshd[24081]: Disconnected from 46.181.61.58 port 59332 [preauth]
Oct  1 12:10:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 12:10:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 12:10:37 nativespace-cdp sudo[24188]: pam_unix(sudo:session): session closed for user root
Oct  1 12:11:07 nativespace-cdp sshd[24339]: Invalid user username from 200.109.234.38 port 34484
Oct  1 12:11:07 nativespace-cdp sshd[24339]: input_userauth_request: invalid user username [preauth]
Oct  1 12:11:07 nativespace-cdp sshd[24339]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:11:07 nativespace-cdp sshd[24339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:11:09 nativespace-cdp sshd[24339]: Failed password for invalid user username from 200.109.234.38 port 34484 ssh2
Oct  1 12:11:09 nativespace-cdp sshd[24339]: Received disconnect from 200.109.234.38 port 34484:11: Bye Bye [preauth]
Oct  1 12:11:09 nativespace-cdp sshd[24339]: Disconnected from 200.109.234.38 port 34484 [preauth]
Oct  1 12:11:33 nativespace-cdp sshd[24429]: Connection closed by 159.100.136.21 port 36614 [preauth]
Oct  1 12:11:39 nativespace-cdp sshd[24440]: Invalid user sysadmin from 210.59.205.48 port 54406
Oct  1 12:11:39 nativespace-cdp sshd[24440]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 12:11:39 nativespace-cdp sshd[24440]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:11:39 nativespace-cdp sshd[24440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:11:41 nativespace-cdp sshd[24440]: Failed password for invalid user sysadmin from 210.59.205.48 port 54406 ssh2
Oct  1 12:11:41 nativespace-cdp sshd[24440]: Received disconnect from 210.59.205.48 port 54406:11: Bye Bye [preauth]
Oct  1 12:11:41 nativespace-cdp sshd[24440]: Disconnected from 210.59.205.48 port 54406 [preauth]
Oct  1 12:12:05 nativespace-cdp sshd[24533]: Invalid user test from 46.181.61.58 port 46776
Oct  1 12:12:05 nativespace-cdp sshd[24533]: input_userauth_request: invalid user test [preauth]
Oct  1 12:12:05 nativespace-cdp sshd[24533]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:12:05 nativespace-cdp sshd[24533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:12:07 nativespace-cdp sshd[24533]: Failed password for invalid user test from 46.181.61.58 port 46776 ssh2
Oct  1 12:12:07 nativespace-cdp sshd[24533]: Received disconnect from 46.181.61.58 port 46776:11: Bye Bye [preauth]
Oct  1 12:12:07 nativespace-cdp sshd[24533]: Disconnected from 46.181.61.58 port 46776 [preauth]
Oct  1 12:13:25 nativespace-cdp sshd[24845]: Invalid user ubuntu from 210.59.205.48 port 42364
Oct  1 12:13:25 nativespace-cdp sshd[24845]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:13:25 nativespace-cdp sshd[24845]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:13:25 nativespace-cdp sshd[24845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:13:26 nativespace-cdp sshd[24845]: Failed password for invalid user ubuntu from 210.59.205.48 port 42364 ssh2
Oct  1 12:13:29 nativespace-cdp sshd[24845]: Received disconnect from 210.59.205.48 port 42364:11: Bye Bye [preauth]
Oct  1 12:13:29 nativespace-cdp sshd[24845]: Disconnected from 210.59.205.48 port 42364 [preauth]
Oct  1 12:13:46 nativespace-cdp sshd[24930]: Invalid user thomas from 46.181.61.58 port 34224
Oct  1 12:13:46 nativespace-cdp sshd[24930]: input_userauth_request: invalid user thomas [preauth]
Oct  1 12:13:46 nativespace-cdp sshd[24930]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:13:46 nativespace-cdp sshd[24930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:13:48 nativespace-cdp sshd[24930]: Failed password for invalid user thomas from 46.181.61.58 port 34224 ssh2
Oct  1 12:13:49 nativespace-cdp sshd[24930]: Received disconnect from 46.181.61.58 port 34224:11: Bye Bye [preauth]
Oct  1 12:13:49 nativespace-cdp sshd[24930]: Disconnected from 46.181.61.58 port 34224 [preauth]
Oct  1 12:14:48 nativespace-cdp sshd[25129]: Invalid user thomas from 200.109.234.38 port 43280
Oct  1 12:14:48 nativespace-cdp sshd[25129]: input_userauth_request: invalid user thomas [preauth]
Oct  1 12:14:48 nativespace-cdp sshd[25129]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:14:48 nativespace-cdp sshd[25129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:14:50 nativespace-cdp sshd[25129]: Failed password for invalid user thomas from 200.109.234.38 port 43280 ssh2
Oct  1 12:14:51 nativespace-cdp sshd[25129]: Received disconnect from 200.109.234.38 port 43280:11: Bye Bye [preauth]
Oct  1 12:14:51 nativespace-cdp sshd[25129]: Disconnected from 200.109.234.38 port 43280 [preauth]
Oct  1 12:15:13 nativespace-cdp sshd[25350]: Invalid user test from 210.59.205.48 port 58570
Oct  1 12:15:13 nativespace-cdp sshd[25350]: input_userauth_request: invalid user test [preauth]
Oct  1 12:15:13 nativespace-cdp sshd[25350]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:15:13 nativespace-cdp sshd[25350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:15:15 nativespace-cdp sshd[25350]: Failed password for invalid user test from 210.59.205.48 port 58570 ssh2
Oct  1 12:15:15 nativespace-cdp sshd[25350]: Received disconnect from 210.59.205.48 port 58570:11: Bye Bye [preauth]
Oct  1 12:15:15 nativespace-cdp sshd[25350]: Disconnected from 210.59.205.48 port 58570 [preauth]
Oct  1 12:15:34 nativespace-cdp sshd[25413]: Invalid user tuan from 46.181.61.58 port 49904
Oct  1 12:15:34 nativespace-cdp sshd[25413]: input_userauth_request: invalid user tuan [preauth]
Oct  1 12:15:34 nativespace-cdp sshd[25413]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:15:34 nativespace-cdp sshd[25413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:15:36 nativespace-cdp sshd[25413]: Failed password for invalid user tuan from 46.181.61.58 port 49904 ssh2
Oct  1 12:15:36 nativespace-cdp sshd[25413]: Received disconnect from 46.181.61.58 port 49904:11: Bye Bye [preauth]
Oct  1 12:15:36 nativespace-cdp sshd[25413]: Disconnected from 46.181.61.58 port 49904 [preauth]
Oct  1 12:16:33 nativespace-cdp sshd[25649]: Connection closed by 159.100.136.21 port 46006 [preauth]
Oct  1 12:16:41 nativespace-cdp sshd[25678]: Invalid user user from 200.109.234.38 port 49000
Oct  1 12:16:41 nativespace-cdp sshd[25678]: input_userauth_request: invalid user user [preauth]
Oct  1 12:16:42 nativespace-cdp sshd[25678]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:16:42 nativespace-cdp sshd[25678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:16:43 nativespace-cdp sshd[25678]: Failed password for invalid user user from 200.109.234.38 port 49000 ssh2
Oct  1 12:16:43 nativespace-cdp sshd[25678]: Received disconnect from 200.109.234.38 port 49000:11: Bye Bye [preauth]
Oct  1 12:16:43 nativespace-cdp sshd[25678]: Disconnected from 200.109.234.38 port 49000 [preauth]
Oct  1 12:16:58 nativespace-cdp sshd[25724]: Invalid user thomas from 210.59.205.48 port 46530
Oct  1 12:16:58 nativespace-cdp sshd[25724]: input_userauth_request: invalid user thomas [preauth]
Oct  1 12:16:58 nativespace-cdp sshd[25724]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:16:58 nativespace-cdp sshd[25724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:17:00 nativespace-cdp sshd[25724]: Failed password for invalid user thomas from 210.59.205.48 port 46530 ssh2
Oct  1 12:17:03 nativespace-cdp sshd[25724]: Received disconnect from 210.59.205.48 port 46530:11: Bye Bye [preauth]
Oct  1 12:17:03 nativespace-cdp sshd[25724]: Disconnected from 210.59.205.48 port 46530 [preauth]
Oct  1 12:17:15 nativespace-cdp sshd[25778]: Invalid user ubuntu from 46.181.61.58 port 37346
Oct  1 12:17:15 nativespace-cdp sshd[25778]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:17:15 nativespace-cdp sshd[25778]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:17:15 nativespace-cdp sshd[25778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:17:17 nativespace-cdp sshd[25778]: Failed password for invalid user ubuntu from 46.181.61.58 port 37346 ssh2
Oct  1 12:17:17 nativespace-cdp sshd[25778]: Received disconnect from 46.181.61.58 port 37346:11: Bye Bye [preauth]
Oct  1 12:17:17 nativespace-cdp sshd[25778]: Disconnected from 46.181.61.58 port 37346 [preauth]
Oct  1 12:18:36 nativespace-cdp sshd[26318]: Invalid user test01 from 200.109.234.38 port 44092
Oct  1 12:18:36 nativespace-cdp sshd[26318]: input_userauth_request: invalid user test01 [preauth]
Oct  1 12:18:36 nativespace-cdp sshd[26318]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:18:36 nativespace-cdp sshd[26318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:18:38 nativespace-cdp sshd[26318]: Failed password for invalid user test01 from 200.109.234.38 port 44092 ssh2
Oct  1 12:18:38 nativespace-cdp sshd[26318]: Received disconnect from 200.109.234.38 port 44092:11: Bye Bye [preauth]
Oct  1 12:18:38 nativespace-cdp sshd[26318]: Disconnected from 200.109.234.38 port 44092 [preauth]
Oct  1 12:18:46 nativespace-cdp sshd[26439]: Invalid user user from 210.59.205.48 port 34492
Oct  1 12:18:46 nativespace-cdp sshd[26439]: input_userauth_request: invalid user user [preauth]
Oct  1 12:18:46 nativespace-cdp sshd[26439]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:18:46 nativespace-cdp sshd[26439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:18:48 nativespace-cdp sshd[26439]: Failed password for invalid user user from 210.59.205.48 port 34492 ssh2
Oct  1 12:18:48 nativespace-cdp sshd[26439]: Received disconnect from 210.59.205.48 port 34492:11: Bye Bye [preauth]
Oct  1 12:18:48 nativespace-cdp sshd[26439]: Disconnected from 210.59.205.48 port 34492 [preauth]
Oct  1 12:18:58 nativespace-cdp sshd[26560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58  user=root
Oct  1 12:18:58 nativespace-cdp sshd[26560]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 12:19:00 nativespace-cdp sshd[26560]: Failed password for root from 46.181.61.58 port 53020 ssh2
Oct  1 12:19:00 nativespace-cdp sshd[26560]: Received disconnect from 46.181.61.58 port 53020:11: Bye Bye [preauth]
Oct  1 12:19:00 nativespace-cdp sshd[26560]: Disconnected from 46.181.61.58 port 53020 [preauth]
Oct  1 12:20:22 nativespace-cdp sshd[27388]: Invalid user ubuntu from 200.109.234.38 port 44658
Oct  1 12:20:22 nativespace-cdp sshd[27388]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:20:22 nativespace-cdp sshd[27388]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:20:22 nativespace-cdp sshd[27388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:20:24 nativespace-cdp sshd[27388]: Failed password for invalid user ubuntu from 200.109.234.38 port 44658 ssh2
Oct  1 12:20:25 nativespace-cdp sshd[27388]: Received disconnect from 200.109.234.38 port 44658:11: Bye Bye [preauth]
Oct  1 12:20:25 nativespace-cdp sshd[27388]: Disconnected from 200.109.234.38 port 44658 [preauth]
Oct  1 12:20:29 nativespace-cdp sshd[27402]: Invalid user tomcat from 210.59.205.48 port 50684
Oct  1 12:20:29 nativespace-cdp sshd[27402]: input_userauth_request: invalid user tomcat [preauth]
Oct  1 12:20:29 nativespace-cdp sshd[27402]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:20:29 nativespace-cdp sshd[27402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:20:31 nativespace-cdp sshd[27402]: Failed password for invalid user tomcat from 210.59.205.48 port 50684 ssh2
Oct  1 12:20:31 nativespace-cdp sshd[27402]: Received disconnect from 210.59.205.48 port 50684:11: Bye Bye [preauth]
Oct  1 12:20:31 nativespace-cdp sshd[27402]: Disconnected from 210.59.205.48 port 50684 [preauth]
Oct  1 12:20:40 nativespace-cdp sshd[27449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58  user=root
Oct  1 12:20:40 nativespace-cdp sshd[27449]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 12:20:42 nativespace-cdp sshd[27449]: Failed password for root from 46.181.61.58 port 40466 ssh2
Oct  1 12:20:42 nativespace-cdp sshd[27449]: Received disconnect from 46.181.61.58 port 40466:11: Bye Bye [preauth]
Oct  1 12:20:42 nativespace-cdp sshd[27449]: Disconnected from 46.181.61.58 port 40466 [preauth]
Oct  1 12:21:34 nativespace-cdp sshd[27613]: Connection closed by 159.100.136.21 port 55312 [preauth]
Oct  1 12:22:16 nativespace-cdp sshd[27802]: Invalid user acer from 200.109.234.38 port 60088
Oct  1 12:22:16 nativespace-cdp sshd[27802]: input_userauth_request: invalid user acer [preauth]
Oct  1 12:22:16 nativespace-cdp sshd[27802]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:22:16 nativespace-cdp sshd[27802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:22:17 nativespace-cdp sshd[27816]: Invalid user usuario from 210.59.205.48 port 38642
Oct  1 12:22:17 nativespace-cdp sshd[27816]: input_userauth_request: invalid user usuario [preauth]
Oct  1 12:22:17 nativespace-cdp sshd[27816]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:22:17 nativespace-cdp sshd[27816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:22:18 nativespace-cdp sshd[27802]: Failed password for invalid user acer from 200.109.234.38 port 60088 ssh2
Oct  1 12:22:18 nativespace-cdp sshd[27802]: Received disconnect from 200.109.234.38 port 60088:11: Bye Bye [preauth]
Oct  1 12:22:18 nativespace-cdp sshd[27802]: Disconnected from 200.109.234.38 port 60088 [preauth]
Oct  1 12:22:20 nativespace-cdp sshd[27816]: Failed password for invalid user usuario from 210.59.205.48 port 38642 ssh2
Oct  1 12:22:23 nativespace-cdp sshd[27816]: Received disconnect from 210.59.205.48 port 38642:11: Bye Bye [preauth]
Oct  1 12:22:23 nativespace-cdp sshd[27816]: Disconnected from 210.59.205.48 port 38642 [preauth]
Oct  1 12:22:25 nativespace-cdp sshd[27832]: Invalid user ubuntu from 46.181.61.58 port 56150
Oct  1 12:22:25 nativespace-cdp sshd[27832]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:22:25 nativespace-cdp sshd[27832]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:22:25 nativespace-cdp sshd[27832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:22:27 nativespace-cdp sshd[27832]: Failed password for invalid user ubuntu from 46.181.61.58 port 56150 ssh2
Oct  1 12:22:27 nativespace-cdp sshd[27832]: Received disconnect from 46.181.61.58 port 56150:11: Bye Bye [preauth]
Oct  1 12:22:27 nativespace-cdp sshd[27832]: Disconnected from 46.181.61.58 port 56150 [preauth]
Oct  1 12:24:06 nativespace-cdp sshd[28196]: Invalid user support from 200.109.234.38 port 34918
Oct  1 12:24:06 nativespace-cdp sshd[28196]: input_userauth_request: invalid user support [preauth]
Oct  1 12:24:06 nativespace-cdp sshd[28196]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:24:06 nativespace-cdp sshd[28196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:24:07 nativespace-cdp sshd[28199]: Invalid user deploy from 210.59.205.48 port 54840
Oct  1 12:24:07 nativespace-cdp sshd[28199]: input_userauth_request: invalid user deploy [preauth]
Oct  1 12:24:07 nativespace-cdp sshd[28199]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:24:07 nativespace-cdp sshd[28199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:24:07 nativespace-cdp sshd[28202]: Invalid user ubuntu from 46.181.61.58 port 43596
Oct  1 12:24:07 nativespace-cdp sshd[28202]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:24:07 nativespace-cdp sshd[28202]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:24:07 nativespace-cdp sshd[28202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:24:08 nativespace-cdp sshd[28199]: Failed password for invalid user deploy from 210.59.205.48 port 54840 ssh2
Oct  1 12:24:08 nativespace-cdp sshd[28196]: Failed password for invalid user support from 200.109.234.38 port 34918 ssh2
Oct  1 12:24:08 nativespace-cdp sshd[28199]: Received disconnect from 210.59.205.48 port 54840:11: Bye Bye [preauth]
Oct  1 12:24:08 nativespace-cdp sshd[28199]: Disconnected from 210.59.205.48 port 54840 [preauth]
Oct  1 12:24:08 nativespace-cdp sshd[28202]: Failed password for invalid user ubuntu from 46.181.61.58 port 43596 ssh2
Oct  1 12:24:08 nativespace-cdp sshd[28196]: Received disconnect from 200.109.234.38 port 34918:11: Bye Bye [preauth]
Oct  1 12:24:08 nativespace-cdp sshd[28196]: Disconnected from 200.109.234.38 port 34918 [preauth]
Oct  1 12:24:09 nativespace-cdp sshd[28202]: Received disconnect from 46.181.61.58 port 43596:11: Bye Bye [preauth]
Oct  1 12:24:09 nativespace-cdp sshd[28202]: Disconnected from 46.181.61.58 port 43596 [preauth]
Oct  1 12:25:48 nativespace-cdp sshd[28648]: Invalid user sysadmin from 46.181.61.58 port 59270
Oct  1 12:25:48 nativespace-cdp sshd[28648]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 12:25:48 nativespace-cdp sshd[28648]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:25:48 nativespace-cdp sshd[28648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:25:50 nativespace-cdp sshd[28648]: Failed password for invalid user sysadmin from 46.181.61.58 port 59270 ssh2
Oct  1 12:25:50 nativespace-cdp sshd[28648]: Received disconnect from 46.181.61.58 port 59270:11: Bye Bye [preauth]
Oct  1 12:25:50 nativespace-cdp sshd[28648]: Disconnected from 46.181.61.58 port 59270 [preauth]
Oct  1 12:25:52 nativespace-cdp sshd[28664]: Invalid user user from 200.109.234.38 port 52626
Oct  1 12:25:52 nativespace-cdp sshd[28664]: input_userauth_request: invalid user user [preauth]
Oct  1 12:25:52 nativespace-cdp sshd[28664]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:25:52 nativespace-cdp sshd[28664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:25:53 nativespace-cdp sshd[28673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48  user=root
Oct  1 12:25:53 nativespace-cdp sshd[28673]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 12:25:54 nativespace-cdp sshd[28664]: Failed password for invalid user user from 200.109.234.38 port 52626 ssh2
Oct  1 12:25:54 nativespace-cdp sshd[28664]: Received disconnect from 200.109.234.38 port 52626:11: Bye Bye [preauth]
Oct  1 12:25:54 nativespace-cdp sshd[28664]: Disconnected from 200.109.234.38 port 52626 [preauth]
Oct  1 12:25:55 nativespace-cdp sshd[28673]: Failed password for root from 210.59.205.48 port 42806 ssh2
Oct  1 12:26:05 nativespace-cdp sshd[28673]: Received disconnect from 210.59.205.48 port 42806:11: Bye Bye [preauth]
Oct  1 12:26:05 nativespace-cdp sshd[28673]: Disconnected from 210.59.205.48 port 42806 [preauth]
Oct  1 12:26:34 nativespace-cdp sshd[28815]: Connection closed by 159.100.136.21 port 36694 [preauth]
Oct  1 12:27:32 nativespace-cdp sshd[28994]: Invalid user sysadmin from 46.181.61.58 port 46712
Oct  1 12:27:32 nativespace-cdp sshd[28994]: input_userauth_request: invalid user sysadmin [preauth]
Oct  1 12:27:32 nativespace-cdp sshd[28994]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:27:32 nativespace-cdp sshd[28994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.181.61.58
Oct  1 12:27:34 nativespace-cdp sshd[28994]: Failed password for invalid user sysadmin from 46.181.61.58 port 46712 ssh2
Oct  1 12:27:34 nativespace-cdp sshd[28994]: Received disconnect from 46.181.61.58 port 46712:11: Bye Bye [preauth]
Oct  1 12:27:34 nativespace-cdp sshd[28994]: Disconnected from 46.181.61.58 port 46712 [preauth]
Oct  1 12:27:50 nativespace-cdp sshd[29025]: Received disconnect from 210.59.205.48 port 59000:11: Bye Bye [preauth]
Oct  1 12:27:50 nativespace-cdp sshd[29025]: Disconnected from 210.59.205.48 port 59000 [preauth]
Oct  1 12:29:37 nativespace-cdp sshd[29464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38  user=root
Oct  1 12:29:37 nativespace-cdp sshd[29464]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 12:29:38 nativespace-cdp sshd[29464]: Failed password for root from 200.109.234.38 port 35656 ssh2
Oct  1 12:29:38 nativespace-cdp sshd[29464]: Received disconnect from 200.109.234.38 port 35656:11: Bye Bye [preauth]
Oct  1 12:29:38 nativespace-cdp sshd[29464]: Disconnected from 200.109.234.38 port 35656 [preauth]
Oct  1 12:31:15 nativespace-cdp sshd[29981]: Invalid user ubuntu from 210.59.205.48 port 34930
Oct  1 12:31:15 nativespace-cdp sshd[29981]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:31:15 nativespace-cdp sshd[29981]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:31:15 nativespace-cdp sshd[29981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:31:17 nativespace-cdp sshd[29981]: Failed password for invalid user ubuntu from 210.59.205.48 port 34930 ssh2
Oct  1 12:31:17 nativespace-cdp sshd[29981]: Received disconnect from 210.59.205.48 port 34930:11: Bye Bye [preauth]
Oct  1 12:31:17 nativespace-cdp sshd[29981]: Disconnected from 210.59.205.48 port 34930 [preauth]
Oct  1 12:31:34 nativespace-cdp sshd[30028]: Connection closed by 159.100.136.21 port 45870 [preauth]
Oct  1 12:31:35 nativespace-cdp sshd[30034]: Connection closed by 200.109.234.38 port 34342 [preauth]
Oct  1 12:33:02 nativespace-cdp sshd[30286]: Invalid user ubuntu from 210.59.205.48 port 51124
Oct  1 12:33:02 nativespace-cdp sshd[30286]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 12:33:02 nativespace-cdp sshd[30286]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:33:02 nativespace-cdp sshd[30286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.205.48
Oct  1 12:33:04 nativespace-cdp sshd[30286]: Failed password for invalid user ubuntu from 210.59.205.48 port 51124 ssh2
Oct  1 12:33:04 nativespace-cdp sshd[30286]: Received disconnect from 210.59.205.48 port 51124:11: Bye Bye [preauth]
Oct  1 12:33:04 nativespace-cdp sshd[30286]: Disconnected from 210.59.205.48 port 51124 [preauth]
Oct  1 12:33:19 nativespace-cdp sshd[30436]: Invalid user tuan from 200.109.234.38 port 46680
Oct  1 12:33:19 nativespace-cdp sshd[30436]: input_userauth_request: invalid user tuan [preauth]
Oct  1 12:33:19 nativespace-cdp sshd[30436]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 12:33:19 nativespace-cdp sshd[30436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.109.234.38
Oct  1 12:33:20 nativespace-cdp sshd[30436]: Failed password for invalid user tuan from 200.109.234.38 port 46680 ssh2
Oct  1 12:33:21 nativespace-cdp sshd[30436]: Received disconnect from 200.109.234.38 port 46680:11: Bye Bye [preauth]
Oct  1 12:33:21 nativespace-cdp sshd[30436]: Disconnected from 200.109.234.38 port 46680 [preauth]
Oct  1 12:36:33 nativespace-cdp sshd[31497]: Connection closed by 159.100.136.21 port 55546 [preauth]
Oct  1 12:41:33 nativespace-cdp sshd[32663]: Connection closed by 159.100.136.21 port 36124 [preauth]
Oct  1 12:46:34 nativespace-cdp sshd[1534]: Connection closed by 159.100.136.21 port 45102 [preauth]
Oct  1 12:51:33 nativespace-cdp sshd[2956]: Connection closed by 159.100.136.21 port 54358 [preauth]
Oct  1 12:56:36 nativespace-cdp sshd[4051]: Connection closed by 159.100.136.21 port 35670 [preauth]
Oct  1 13:01:34 nativespace-cdp sshd[5424]: Connection closed by 159.100.136.21 port 45312 [preauth]
Oct  1 13:01:39 nativespace-cdp sshd[5440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.18.211.199  user=root
Oct  1 13:01:39 nativespace-cdp sshd[5440]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:01:42 nativespace-cdp sshd[5440]: Failed password for root from 184.18.211.199 port 43718 ssh2
Oct  1 13:01:42 nativespace-cdp sshd[5440]: Received disconnect from 184.18.211.199 port 43718:11: Bye Bye [preauth]
Oct  1 13:01:42 nativespace-cdp sshd[5440]: Disconnected from 184.18.211.199 port 43718 [preauth]
Oct  1 13:02:50 nativespace-cdp sshd[5715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.14.168  user=root
Oct  1 13:02:50 nativespace-cdp sshd[5715]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:02:52 nativespace-cdp sshd[5715]: Failed password for root from 89.35.14.168 port 38600 ssh2
Oct  1 13:02:52 nativespace-cdp sshd[5715]: Received disconnect from 89.35.14.168 port 38600:11: Bye Bye [preauth]
Oct  1 13:02:52 nativespace-cdp sshd[5715]: Disconnected from 89.35.14.168 port 38600 [preauth]
Oct  1 13:05:00 nativespace-cdp sshd[6356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218  user=root
Oct  1 13:05:00 nativespace-cdp sshd[6356]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:05:02 nativespace-cdp sshd[6356]: Failed password for root from 154.92.23.218 port 35444 ssh2
Oct  1 13:05:02 nativespace-cdp sshd[6356]: Received disconnect from 154.92.23.218 port 35444:11: Bye Bye [preauth]
Oct  1 13:05:02 nativespace-cdp sshd[6356]: Disconnected from 154.92.23.218 port 35444 [preauth]
Oct  1 13:05:11 nativespace-cdp sshd[6475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.20  user=root
Oct  1 13:05:11 nativespace-cdp sshd[6475]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:05:13 nativespace-cdp sshd[6475]: Failed password for root from 185.74.4.20 port 49378 ssh2
Oct  1 13:05:14 nativespace-cdp sshd[6475]: Received disconnect from 185.74.4.20 port 49378:11: Bye Bye [preauth]
Oct  1 13:05:14 nativespace-cdp sshd[6475]: Disconnected from 185.74.4.20 port 49378 [preauth]
Oct  1 13:06:26 nativespace-cdp sshd[6788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.64.127  user=root
Oct  1 13:06:26 nativespace-cdp sshd[6788]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:06:28 nativespace-cdp sshd[6788]: Failed password for root from 45.131.64.127 port 41238 ssh2
Oct  1 13:06:32 nativespace-cdp sshd[6788]: Received disconnect from 45.131.64.127 port 41238:11: Bye Bye [preauth]
Oct  1 13:06:32 nativespace-cdp sshd[6788]: Disconnected from 45.131.64.127 port 41238 [preauth]
Oct  1 13:06:36 nativespace-cdp sshd[6806]: Connection closed by 159.100.136.21 port 55078 [preauth]
Oct  1 13:07:48 nativespace-cdp sshd[7084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.18.211.199  user=root
Oct  1 13:07:48 nativespace-cdp sshd[7084]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:07:51 nativespace-cdp sshd[7084]: Failed password for root from 184.18.211.199 port 48344 ssh2
Oct  1 13:07:51 nativespace-cdp sshd[7084]: Received disconnect from 184.18.211.199 port 48344:11: Bye Bye [preauth]
Oct  1 13:07:51 nativespace-cdp sshd[7084]: Disconnected from 184.18.211.199 port 48344 [preauth]
Oct  1 13:07:52 nativespace-cdp sshd[7095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218  user=root
Oct  1 13:07:52 nativespace-cdp sshd[7095]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:07:52 nativespace-cdp sshd[7104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.14.168  user=root
Oct  1 13:07:52 nativespace-cdp sshd[7104]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:07:53 nativespace-cdp sshd[7095]: Failed password for root from 154.92.23.218 port 48602 ssh2
Oct  1 13:07:53 nativespace-cdp sshd[7095]: Received disconnect from 154.92.23.218 port 48602:11: Bye Bye [preauth]
Oct  1 13:07:53 nativespace-cdp sshd[7095]: Disconnected from 154.92.23.218 port 48602 [preauth]
Oct  1 13:07:54 nativespace-cdp sshd[7104]: Failed password for root from 89.35.14.168 port 34378 ssh2
Oct  1 13:07:54 nativespace-cdp sshd[7104]: Received disconnect from 89.35.14.168 port 34378:11: Bye Bye [preauth]
Oct  1 13:07:54 nativespace-cdp sshd[7104]: Disconnected from 89.35.14.168 port 34378 [preauth]
Oct  1 13:08:26 nativespace-cdp sshd[7277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.18.211.199  user=root
Oct  1 13:08:26 nativespace-cdp sshd[7277]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:08:28 nativespace-cdp sshd[7277]: Failed password for root from 184.18.211.199 port 34542 ssh2
Oct  1 13:08:28 nativespace-cdp sshd[7277]: Received disconnect from 184.18.211.199 port 34542:11: Bye Bye [preauth]
Oct  1 13:08:28 nativespace-cdp sshd[7277]: Disconnected from 184.18.211.199 port 34542 [preauth]
Oct  1 13:08:29 nativespace-cdp sshd[7285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.20  user=root
Oct  1 13:08:29 nativespace-cdp sshd[7285]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:08:31 nativespace-cdp sshd[7285]: Failed password for root from 185.74.4.20 port 54600 ssh2
Oct  1 13:08:31 nativespace-cdp sshd[7285]: Received disconnect from 185.74.4.20 port 54600:11: Bye Bye [preauth]
Oct  1 13:08:31 nativespace-cdp sshd[7285]: Disconnected from 185.74.4.20 port 54600 [preauth]
Oct  1 13:08:32 nativespace-cdp sshd[7314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218  user=root
Oct  1 13:08:32 nativespace-cdp sshd[7314]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:08:34 nativespace-cdp sshd[7314]: Failed password for root from 154.92.23.218 port 50044 ssh2
Oct  1 13:08:36 nativespace-cdp sshd[7314]: Received disconnect from 154.92.23.218 port 50044:11: Bye Bye [preauth]
Oct  1 13:08:36 nativespace-cdp sshd[7314]: Disconnected from 154.92.23.218 port 50044 [preauth]
Oct  1 13:08:36 nativespace-cdp sshd[7342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.14.168  user=root
Oct  1 13:08:36 nativespace-cdp sshd[7342]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:08:38 nativespace-cdp sshd[7342]: Failed password for root from 89.35.14.168 port 47004 ssh2
Oct  1 13:08:38 nativespace-cdp sshd[7342]: Received disconnect from 89.35.14.168 port 47004:11: Bye Bye [preauth]
Oct  1 13:08:38 nativespace-cdp sshd[7342]: Disconnected from 89.35.14.168 port 47004 [preauth]
Oct  1 13:08:43 nativespace-cdp sshd[7385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.64.127  user=root
Oct  1 13:08:43 nativespace-cdp sshd[7385]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:08:45 nativespace-cdp sshd[7385]: Failed password for root from 45.131.64.127 port 52140 ssh2
Oct  1 13:08:45 nativespace-cdp sshd[7385]: Received disconnect from 45.131.64.127 port 52140:11: Bye Bye [preauth]
Oct  1 13:08:45 nativespace-cdp sshd[7385]: Disconnected from 45.131.64.127 port 52140 [preauth]
Oct  1 13:09:05 nativespace-cdp sshd[7462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.18.211.199  user=root
Oct  1 13:09:05 nativespace-cdp sshd[7462]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:09:08 nativespace-cdp sshd[7462]: Failed password for root from 184.18.211.199 port 49158 ssh2
Oct  1 13:09:08 nativespace-cdp sshd[7462]: Received disconnect from 184.18.211.199 port 49158:11: Bye Bye [preauth]
Oct  1 13:09:08 nativespace-cdp sshd[7462]: Disconnected from 184.18.211.199 port 49158 [preauth]
Oct  1 13:09:15 nativespace-cdp sshd[7484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.14.168  user=root
Oct  1 13:09:15 nativespace-cdp sshd[7484]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:09:16 nativespace-cdp sshd[7476]: Invalid user ubuntu from 154.92.23.218 port 47478
Oct  1 13:09:16 nativespace-cdp sshd[7476]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 13:09:16 nativespace-cdp sshd[7476]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 13:09:16 nativespace-cdp sshd[7476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218
Oct  1 13:09:18 nativespace-cdp sshd[7484]: Failed password for root from 89.35.14.168 port 59698 ssh2
Oct  1 13:09:18 nativespace-cdp sshd[7484]: Received disconnect from 89.35.14.168 port 59698:11: Bye Bye [preauth]
Oct  1 13:09:18 nativespace-cdp sshd[7484]: Disconnected from 89.35.14.168 port 59698 [preauth]
Oct  1 13:09:18 nativespace-cdp sshd[7476]: Failed password for invalid user ubuntu from 154.92.23.218 port 47478 ssh2
Oct  1 13:09:18 nativespace-cdp sshd[7476]: Received disconnect from 154.92.23.218 port 47478:11: Bye Bye [preauth]
Oct  1 13:09:18 nativespace-cdp sshd[7476]: Disconnected from 154.92.23.218 port 47478 [preauth]
Oct  1 13:09:46 nativespace-cdp sshd[7550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.18.211.199  user=root
Oct  1 13:09:46 nativespace-cdp sshd[7550]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:09:48 nativespace-cdp sshd[7550]: Failed password for root from 184.18.211.199 port 35238 ssh2
Oct  1 13:09:48 nativespace-cdp sshd[7550]: Received disconnect from 184.18.211.199 port 35238:11: Bye Bye [preauth]
Oct  1 13:09:48 nativespace-cdp sshd[7550]: Disconnected from 184.18.211.199 port 35238 [preauth]
Oct  1 13:09:51 nativespace-cdp sshd[7565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218  user=root
Oct  1 13:09:51 nativespace-cdp sshd[7565]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:09:52 nativespace-cdp sshd[7565]: Failed password for root from 154.92.23.218 port 36728 ssh2
Oct  1 13:09:52 nativespace-cdp sshd[7565]: Received disconnect from 154.92.23.218 port 36728:11: Bye Bye [preauth]
Oct  1 13:09:52 nativespace-cdp sshd[7565]: Disconnected from 154.92.23.218 port 36728 [preauth]
Oct  1 13:09:55 nativespace-cdp sshd[7580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.20  user=root
Oct  1 13:09:55 nativespace-cdp sshd[7580]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:09:56 nativespace-cdp sshd[7584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.14.168  user=root
Oct  1 13:09:56 nativespace-cdp sshd[7584]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:09:57 nativespace-cdp sshd[7580]: Failed password for root from 185.74.4.20 port 51208 ssh2
Oct  1 13:09:57 nativespace-cdp sshd[7580]: Received disconnect from 185.74.4.20 port 51208:11: Bye Bye [preauth]
Oct  1 13:09:57 nativespace-cdp sshd[7580]: Disconnected from 185.74.4.20 port 51208 [preauth]
Oct  1 13:09:57 nativespace-cdp sshd[7584]: Failed password for root from 89.35.14.168 port 44084 ssh2
Oct  1 13:09:57 nativespace-cdp sshd[7584]: Received disconnect from 89.35.14.168 port 44084:11: Bye Bye [preauth]
Oct  1 13:09:57 nativespace-cdp sshd[7584]: Disconnected from 89.35.14.168 port 44084 [preauth]
Oct  1 13:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 13:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:00 nativespace-cdp sudo[7607]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 13:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:00 nativespace-cdp sudo[7611]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 13:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:00 nativespace-cdp sudo[7611]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 13:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:02 nativespace-cdp sudo[7614]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 13:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:02 nativespace-cdp sudo[7744]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 13:10:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:03 nativespace-cdp sshd[7755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.64.127  user=root
Oct  1 13:10:03 nativespace-cdp sshd[7755]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:10:04 nativespace-cdp sshd[7755]: Failed password for root from 45.131.64.127 port 53520 ssh2
Oct  1 13:10:04 nativespace-cdp sshd[7755]: Received disconnect from 45.131.64.127 port 53520:11: Bye Bye [preauth]
Oct  1 13:10:04 nativespace-cdp sshd[7755]: Disconnected from 45.131.64.127 port 53520 [preauth]
Oct  1 13:10:07 nativespace-cdp sudo[7752]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 13:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:08 nativespace-cdp sudo[7812]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 13:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:08 nativespace-cdp sudo[7816]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 13:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:08 nativespace-cdp sudo[7819]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 13:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:08 nativespace-cdp sudo[7822]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 13:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:08 nativespace-cdp sudo[7826]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 13:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:08 nativespace-cdp sudo[7829]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 13:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:10 nativespace-cdp sudo[7839]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 13:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:14 nativespace-cdp sudo[7843]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=zebrapho user-2=bwppodcast user-3=steve user-4=sibtoncc user-5=asandcoc user-6=eatspam user-7=darkstar user-8=beauty user-9=dhyana user-10=burydropin user-11=fawcettd user-12=nsceres user-13=smrszyqg user-14=isleofwi user-15=barbersh user-16=tigerlet user-17=hidden user-18=nomistakes user-19=health2045 user-20=fortunaz user-21=leftie user-22=foods user-23=nscdp user-24=philmcph user-25=ctedorgu user-26=firstre5 user-27=donnychicago user-28=steakbridieme user-29=lkpier user-30=hirefootballgame user-31=courseme user-32=eugincou user-33=reliable user-34=ninejimm user-35=cathski user-36=cambria1 user-37=howardon user-38=pugwash user-39=paulmca1 user-40=cwsocial user-41=mcdermos user-42=chrisdal user-43=nbhavers user-44=careers user-45=david user-46=tomandle user-47=jennimil user-48=branko
Oct  1 13:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=ranxterc user-50=outdoorc user-51=hodgsonmail user-52=romaldki user-53=attlebor user-54=lucy user-55=onlycont user-56=sosevalu user-57=crrtipdl user-58=bakery user-59=nove user-60=boldover user-61=kategilpin user-62=ladburyp user-63=dancinggardener user-64=stagingerris user-65=design user-66=what user-67=tstardom user-68=oubpgvbx user-69=nvihkvu user-70=sketchy user-71=cath user-72=havantho user-73=ulsukarm user-74=foundation user-75=booff user-76=markward user-77=maflemin user-78=lbscrmod user-79=connect9 user-80=athenare user-81=vantagep user-82=still user-83=agproduc user-84=leereyn1 user-85=stephani user-86=jarvisin user-87=hodgesonweb user-88=theblack user-89=spectrum user-90=wilsonsw user-91=musorguk user-92=megacards user-93=brmrjxl user-94=lakesan1 user-95=sarafoundation user-96=atestord user-97=strathar user-98=lbhyisi user-99=hhdugcor user-100=magichat user-101=martsblo user-102=ptkxhsbt
Oct  1 13:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=dickemery123 user-104=costestimatorco user-105=clarkass user-106=firstrel user-107=southlon user-108=highlegh user-109=firstred user-110=firstres user-111=seftvta user-112=jonhartl user-113=ultbcrra user-114=coursemc user-115=opaiscyx user-116=ianrayne user-117=accooper user-118=thqkgnbz user-119=connectedshoppin user-120=elecleis user-121=milloyco user-122=gilpin user-123=carsinyo user-124=fetch user-125=hubmaster user-126=bedfords user-127=bemadonn user-128=belle user-129=ggaaorgu user-130=newstoda user-131=brighto1 user-132=nstriton user-133=battlere user-134=oneoarco user-135=firstre2 user-136=vivienn1 user-137=askhform user-138=stuartge user-139=innovat1 user-140=nativene user-141=alexadmin user-142=skyfirec feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 13:10:14 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 13:10:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:15 nativespace-cdp sudo[7856]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 13:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:16 nativespace-cdp sudo[7907]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qm59w0SnAMryBF5k.~
Oct  1 13:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:16 nativespace-cdp sudo[7911]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qm59w0SnAMryBF5k.~'
Oct  1 13:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:16 nativespace-cdp sudo[7914]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Qm59w0SnAMryBF5k.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 13:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:16 nativespace-cdp sudo[7918]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 13:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:16 nativespace-cdp sudo[7921]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:25 nativespace-cdp sshd[7950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.18.211.199  user=root
Oct  1 13:10:25 nativespace-cdp sshd[7950]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:10:27 nativespace-cdp sshd[7950]: Failed password for root from 184.18.211.199 port 49596 ssh2
Oct  1 13:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 13:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 13:10:30 nativespace-cdp sshd[7950]: Received disconnect from 184.18.211.199 port 49596:11: Bye Bye [preauth]
Oct  1 13:10:30 nativespace-cdp sshd[7950]: Disconnected from 184.18.211.199 port 49596 [preauth]
Oct  1 13:10:30 nativespace-cdp sudo[7972]: pam_unix(sudo:session): session closed for user root
Oct  1 13:10:35 nativespace-cdp sshd[7990]: Invalid user ubuntu from 89.35.14.168 port 56698
Oct  1 13:10:35 nativespace-cdp sshd[7990]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 13:10:35 nativespace-cdp sshd[7990]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 13:10:35 nativespace-cdp sshd[7990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.14.168
Oct  1 13:10:36 nativespace-cdp sshd[7980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218  user=root
Oct  1 13:10:36 nativespace-cdp sshd[7980]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:10:38 nativespace-cdp sshd[7990]: Failed password for invalid user ubuntu from 89.35.14.168 port 56698 ssh2
Oct  1 13:10:38 nativespace-cdp sshd[7980]: Failed password for root from 154.92.23.218 port 33602 ssh2
Oct  1 13:10:38 nativespace-cdp sshd[7980]: Received disconnect from 154.92.23.218 port 33602:11: Bye Bye [preauth]
Oct  1 13:10:38 nativespace-cdp sshd[7980]: Disconnected from 154.92.23.218 port 33602 [preauth]
Oct  1 13:10:39 nativespace-cdp sshd[7990]: Received disconnect from 89.35.14.168 port 56698:11: Bye Bye [preauth]
Oct  1 13:10:39 nativespace-cdp sshd[7990]: Disconnected from 89.35.14.168 port 56698 [preauth]
Oct  1 13:10:40 nativespace-cdp sshd[7998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.20  user=root
Oct  1 13:10:40 nativespace-cdp sshd[7998]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:10:42 nativespace-cdp sshd[7998]: Failed password for root from 185.74.4.20 port 35394 ssh2
Oct  1 13:10:42 nativespace-cdp sshd[7998]: Received disconnect from 185.74.4.20 port 35394:11: Bye Bye [preauth]
Oct  1 13:10:42 nativespace-cdp sshd[7998]: Disconnected from 185.74.4.20 port 35394 [preauth]
Oct  1 13:10:44 nativespace-cdp sshd[8067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.64.127  user=root
Oct  1 13:10:44 nativespace-cdp sshd[8067]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:10:45 nativespace-cdp sshd[8067]: Failed password for root from 45.131.64.127 port 36612 ssh2
Oct  1 13:10:45 nativespace-cdp sshd[8067]: Received disconnect from 45.131.64.127 port 36612:11: Bye Bye [preauth]
Oct  1 13:10:45 nativespace-cdp sshd[8067]: Disconnected from 45.131.64.127 port 36612 [preauth]
Oct  1 13:11:05 nativespace-cdp sshd[8124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.18.211.199  user=root
Oct  1 13:11:05 nativespace-cdp sshd[8124]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:11:06 nativespace-cdp sshd[8127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218  user=root
Oct  1 13:11:06 nativespace-cdp sshd[8127]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:11:07 nativespace-cdp sshd[8124]: Failed password for root from 184.18.211.199 port 35902 ssh2
Oct  1 13:11:07 nativespace-cdp sshd[8124]: Received disconnect from 184.18.211.199 port 35902:11: Bye Bye [preauth]
Oct  1 13:11:07 nativespace-cdp sshd[8124]: Disconnected from 184.18.211.199 port 35902 [preauth]
Oct  1 13:11:08 nativespace-cdp sshd[8127]: Failed password for root from 154.92.23.218 port 40810 ssh2
Oct  1 13:11:08 nativespace-cdp sshd[8127]: Received disconnect from 154.92.23.218 port 40810:11: Bye Bye [preauth]
Oct  1 13:11:08 nativespace-cdp sshd[8127]: Disconnected from 154.92.23.218 port 40810 [preauth]
Oct  1 13:11:15 nativespace-cdp sshd[8170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.14.168  user=root
Oct  1 13:11:15 nativespace-cdp sshd[8170]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:11:17 nativespace-cdp sshd[8170]: Failed password for root from 89.35.14.168 port 41092 ssh2
Oct  1 13:11:17 nativespace-cdp sshd[8170]: Received disconnect from 89.35.14.168 port 41092:11: Bye Bye [preauth]
Oct  1 13:11:17 nativespace-cdp sshd[8170]: Disconnected from 89.35.14.168 port 41092 [preauth]
Oct  1 13:11:19 nativespace-cdp sshd[8180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.20  user=root
Oct  1 13:11:19 nativespace-cdp sshd[8180]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:11:21 nativespace-cdp sshd[8180]: Failed password for root from 185.74.4.20 port 47812 ssh2
Oct  1 13:11:21 nativespace-cdp sshd[8180]: Received disconnect from 185.74.4.20 port 47812:11: Bye Bye [preauth]
Oct  1 13:11:21 nativespace-cdp sshd[8180]: Disconnected from 185.74.4.20 port 47812 [preauth]
Oct  1 13:11:22 nativespace-cdp sshd[8187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.64.127  user=root
Oct  1 13:11:22 nativespace-cdp sshd[8187]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:11:25 nativespace-cdp sshd[8187]: Failed password for root from 45.131.64.127 port 44644 ssh2
Oct  1 13:11:25 nativespace-cdp sshd[8187]: Received disconnect from 45.131.64.127 port 44644:11: Bye Bye [preauth]
Oct  1 13:11:25 nativespace-cdp sshd[8187]: Disconnected from 45.131.64.127 port 44644 [preauth]
Oct  1 13:11:34 nativespace-cdp sshd[8209]: Connection closed by 159.100.136.21 port 36534 [preauth]
Oct  1 13:11:39 nativespace-cdp sshd[8226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.18.211.199  user=root
Oct  1 13:11:39 nativespace-cdp sshd[8226]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:11:41 nativespace-cdp sshd[8226]: Failed password for root from 184.18.211.199 port 50176 ssh2
Oct  1 13:11:41 nativespace-cdp sshd[8226]: Received disconnect from 184.18.211.199 port 50176:11: Bye Bye [preauth]
Oct  1 13:11:41 nativespace-cdp sshd[8226]: Disconnected from 184.18.211.199 port 50176 [preauth]
Oct  1 13:11:43 nativespace-cdp sshd[8246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218  user=root
Oct  1 13:11:43 nativespace-cdp sshd[8246]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:11:45 nativespace-cdp sshd[8246]: Failed password for root from 154.92.23.218 port 53862 ssh2
Oct  1 13:11:50 nativespace-cdp sshd[8246]: Received disconnect from 154.92.23.218 port 53862:11: Bye Bye [preauth]
Oct  1 13:11:50 nativespace-cdp sshd[8246]: Disconnected from 154.92.23.218 port 53862 [preauth]
Oct  1 13:11:51 nativespace-cdp sshd[8262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.14.168  user=root
Oct  1 13:11:51 nativespace-cdp sshd[8262]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:11:52 nativespace-cdp sshd[8262]: Failed password for root from 89.35.14.168 port 53718 ssh2
Oct  1 13:11:53 nativespace-cdp sshd[8262]: Received disconnect from 89.35.14.168 port 53718:11: Bye Bye [preauth]
Oct  1 13:11:53 nativespace-cdp sshd[8262]: Disconnected from 89.35.14.168 port 53718 [preauth]
Oct  1 13:12:02 nativespace-cdp sshd[8301]: Invalid user ubuntu from 45.131.64.127 port 55374
Oct  1 13:12:02 nativespace-cdp sshd[8301]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 13:12:02 nativespace-cdp sshd[8301]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 13:12:02 nativespace-cdp sshd[8301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.64.127
Oct  1 13:12:03 nativespace-cdp sshd[8316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.20  user=root
Oct  1 13:12:03 nativespace-cdp sshd[8316]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:12:03 nativespace-cdp sshd[8301]: Failed password for invalid user ubuntu from 45.131.64.127 port 55374 ssh2
Oct  1 13:12:03 nativespace-cdp sshd[8301]: Received disconnect from 45.131.64.127 port 55374:11: Bye Bye [preauth]
Oct  1 13:12:03 nativespace-cdp sshd[8301]: Disconnected from 45.131.64.127 port 55374 [preauth]
Oct  1 13:12:05 nativespace-cdp sshd[8316]: Failed password for root from 185.74.4.20 port 60230 ssh2
Oct  1 13:12:05 nativespace-cdp sshd[8316]: Received disconnect from 185.74.4.20 port 60230:11: Bye Bye [preauth]
Oct  1 13:12:05 nativespace-cdp sshd[8316]: Disconnected from 185.74.4.20 port 60230 [preauth]
Oct  1 13:12:17 nativespace-cdp sshd[8356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.18.211.199  user=root
Oct  1 13:12:17 nativespace-cdp sshd[8356]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:12:19 nativespace-cdp sshd[8356]: Failed password for root from 184.18.211.199 port 36360 ssh2
Oct  1 13:12:19 nativespace-cdp sshd[8356]: Received disconnect from 184.18.211.199 port 36360:11: Bye Bye [preauth]
Oct  1 13:12:19 nativespace-cdp sshd[8356]: Disconnected from 184.18.211.199 port 36360 [preauth]
Oct  1 13:12:27 nativespace-cdp sshd[8385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218  user=root
Oct  1 13:12:27 nativespace-cdp sshd[8385]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:12:29 nativespace-cdp sshd[8385]: Failed password for root from 154.92.23.218 port 59570 ssh2
Oct  1 13:12:29 nativespace-cdp sshd[8385]: Received disconnect from 154.92.23.218 port 59570:11: Bye Bye [preauth]
Oct  1 13:12:29 nativespace-cdp sshd[8385]: Disconnected from 154.92.23.218 port 59570 [preauth]
Oct  1 13:12:30 nativespace-cdp sshd[8411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.14.168  user=root
Oct  1 13:12:30 nativespace-cdp sshd[8411]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:12:32 nativespace-cdp sshd[8411]: Failed password for root from 89.35.14.168 port 38104 ssh2
Oct  1 13:12:32 nativespace-cdp sshd[8411]: Received disconnect from 89.35.14.168 port 38104:11: Bye Bye [preauth]
Oct  1 13:12:32 nativespace-cdp sshd[8411]: Disconnected from 89.35.14.168 port 38104 [preauth]
Oct  1 13:12:40 nativespace-cdp sshd[8527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.64.127  user=root
Oct  1 13:12:40 nativespace-cdp sshd[8527]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:12:42 nativespace-cdp sshd[8527]: Failed password for root from 45.131.64.127 port 43102 ssh2
Oct  1 13:12:42 nativespace-cdp sshd[8527]: Received disconnect from 45.131.64.127 port 43102:11: Bye Bye [preauth]
Oct  1 13:12:42 nativespace-cdp sshd[8527]: Disconnected from 45.131.64.127 port 43102 [preauth]
Oct  1 13:12:43 nativespace-cdp sshd[8540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.20  user=root
Oct  1 13:12:43 nativespace-cdp sshd[8540]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:12:45 nativespace-cdp sshd[8540]: Failed password for root from 185.74.4.20 port 44418 ssh2
Oct  1 13:12:48 nativespace-cdp sshd[8540]: Received disconnect from 185.74.4.20 port 44418:11: Bye Bye [preauth]
Oct  1 13:12:48 nativespace-cdp sshd[8540]: Disconnected from 185.74.4.20 port 44418 [preauth]
Oct  1 13:12:55 nativespace-cdp sshd[8632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.18.211.199  user=root
Oct  1 13:12:55 nativespace-cdp sshd[8632]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:12:57 nativespace-cdp sshd[8632]: Failed password for root from 184.18.211.199 port 50762 ssh2
Oct  1 13:12:57 nativespace-cdp sshd[8632]: Received disconnect from 184.18.211.199 port 50762:11: Bye Bye [preauth]
Oct  1 13:12:57 nativespace-cdp sshd[8632]: Disconnected from 184.18.211.199 port 50762 [preauth]
Oct  1 13:13:01 nativespace-cdp sshd[8668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.23.218  user=root
Oct  1 13:13:01 nativespace-cdp sshd[8668]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:13:03 nativespace-cdp sshd[8668]: Failed password for root from 154.92.23.218 port 36140 ssh2
Oct  1 13:13:05 nativespace-cdp sshd[8668]: Received disconnect from 154.92.23.218 port 36140:11: Bye Bye [preauth]
Oct  1 13:13:05 nativespace-cdp sshd[8668]: Disconnected from 154.92.23.218 port 36140 [preauth]
Oct  1 13:13:12 nativespace-cdp sshd[8728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.14.168  user=root
Oct  1 13:13:12 nativespace-cdp sshd[8728]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:13:14 nativespace-cdp sshd[8728]: Failed password for root from 89.35.14.168 port 50730 ssh2
Oct  1 13:13:19 nativespace-cdp sshd[8829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.64.127  user=root
Oct  1 13:13:19 nativespace-cdp sshd[8829]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:13:19 nativespace-cdp sshd[8728]: Received disconnect from 89.35.14.168 port 50730:11: Bye Bye [preauth]
Oct  1 13:13:19 nativespace-cdp sshd[8728]: Disconnected from 89.35.14.168 port 50730 [preauth]
Oct  1 13:13:21 nativespace-cdp sshd[8829]: Failed password for root from 45.131.64.127 port 46410 ssh2
Oct  1 13:13:21 nativespace-cdp sshd[8829]: Received disconnect from 45.131.64.127 port 46410:11: Bye Bye [preauth]
Oct  1 13:13:21 nativespace-cdp sshd[8829]: Disconnected from 45.131.64.127 port 46410 [preauth]
Oct  1 13:13:28 nativespace-cdp sshd[8850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.20  user=root
Oct  1 13:13:28 nativespace-cdp sshd[8850]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:13:30 nativespace-cdp sshd[8850]: Failed password for root from 185.74.4.20 port 56834 ssh2
Oct  1 13:13:30 nativespace-cdp sshd[8850]: Received disconnect from 185.74.4.20 port 56834:11: Bye Bye [preauth]
Oct  1 13:13:30 nativespace-cdp sshd[8850]: Disconnected from 185.74.4.20 port 56834 [preauth]
Oct  1 13:14:02 nativespace-cdp sshd[8939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.64.127  user=root
Oct  1 13:14:02 nativespace-cdp sshd[8939]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 13:14:04 nativespace-cdp sshd[8939]: Failed password for root from 45.131.64.127 port 48730 ssh2
Oct  1 13:14:04 nativespace-cdp sshd[8939]: Received disconnect from 45.131.64.127 port 48730:11: Bye Bye [preauth]
Oct  1 13:14:04 nativespace-cdp sshd[8939]: Disconnected from 45.131.64.127 port 48730 [preauth]
Oct  1 13:17:12 nativespace-cdp crond[9504]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 13:17:12 nativespace-cdp crond[9505]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 13:17:52 nativespace-cdp sshd[9550]: Did not receive identification string from 159.100.136.21 port 46158
Oct  1 13:21:33 nativespace-cdp sshd[11153]: Connection closed by 159.100.136.21 port 54760 [preauth]
Oct  1 13:26:34 nativespace-cdp sshd[13066]: Connection closed by 159.100.136.21 port 35364 [preauth]
Oct  1 13:31:36 nativespace-cdp sshd[14994]: Connection closed by 159.100.136.21 port 44958 [preauth]
Oct  1 13:36:34 nativespace-cdp sshd[17427]: Connection closed by 159.100.136.21 port 55016 [preauth]
Oct  1 13:41:33 nativespace-cdp sshd[20027]: Connection closed by 159.100.136.21 port 36288 [preauth]
Oct  1 13:46:33 nativespace-cdp sshd[22283]: Connection closed by 159.100.136.21 port 45108 [preauth]
Oct  1 13:51:34 nativespace-cdp sshd[24720]: Connection closed by 159.100.136.21 port 54582 [preauth]
Oct  1 13:56:34 nativespace-cdp sshd[25921]: Connection closed by 159.100.136.21 port 36152 [preauth]
Oct  1 14:01:33 nativespace-cdp sshd[27185]: Connection closed by 159.100.136.21 port 46030 [preauth]
Oct  1 14:02:20 nativespace-cdp sshd[27307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.224.79.223  user=root
Oct  1 14:02:20 nativespace-cdp sshd[27307]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:02:21 nativespace-cdp sshd[27307]: Failed password for root from 121.224.79.223 port 56506 ssh2
Oct  1 14:02:21 nativespace-cdp sshd[27307]: Received disconnect from 121.224.79.223 port 56506:11: Bye Bye [preauth]
Oct  1 14:02:21 nativespace-cdp sshd[27307]: Disconnected from 121.224.79.223 port 56506 [preauth]
Oct  1 14:03:03 nativespace-cdp sshd[27490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.129.29.138  user=root
Oct  1 14:03:03 nativespace-cdp sshd[27490]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:03:04 nativespace-cdp sshd[27490]: Failed password for root from 202.129.29.138 port 39324 ssh2
Oct  1 14:03:05 nativespace-cdp sshd[27490]: Received disconnect from 202.129.29.138 port 39324:11: Bye Bye [preauth]
Oct  1 14:03:05 nativespace-cdp sshd[27490]: Disconnected from 202.129.29.138 port 39324 [preauth]
Oct  1 14:03:20 nativespace-cdp sshd[27548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.151.129.57  user=root
Oct  1 14:03:20 nativespace-cdp sshd[27548]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:03:22 nativespace-cdp sshd[27548]: Failed password for root from 193.151.129.57 port 36916 ssh2
Oct  1 14:03:23 nativespace-cdp sshd[27548]: Received disconnect from 193.151.129.57 port 36916:11: Bye Bye [preauth]
Oct  1 14:03:23 nativespace-cdp sshd[27548]: Disconnected from 193.151.129.57 port 36916 [preauth]
Oct  1 14:03:51 nativespace-cdp sshd[27746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.188.57  user=root
Oct  1 14:03:51 nativespace-cdp sshd[27746]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:03:52 nativespace-cdp sshd[27746]: Failed password for root from 138.204.188.57 port 57850 ssh2
Oct  1 14:03:54 nativespace-cdp sshd[27746]: Received disconnect from 138.204.188.57 port 57850:11: Bye Bye [preauth]
Oct  1 14:03:54 nativespace-cdp sshd[27746]: Disconnected from 138.204.188.57 port 57850 [preauth]
Oct  1 14:03:55 nativespace-cdp sshd[27754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198  user=root
Oct  1 14:03:55 nativespace-cdp sshd[27754]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:03:57 nativespace-cdp sshd[27754]: Failed password for root from 103.101.160.198 port 49592 ssh2
Oct  1 14:03:58 nativespace-cdp sshd[27754]: Received disconnect from 103.101.160.198 port 49592:11: Bye Bye [preauth]
Oct  1 14:03:58 nativespace-cdp sshd[27754]: Disconnected from 103.101.160.198 port 49592 [preauth]
Oct  1 14:04:11 nativespace-cdp sshd[27819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.150.74  user=root
Oct  1 14:04:11 nativespace-cdp sshd[27819]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:04:13 nativespace-cdp sshd[27819]: Failed password for root from 113.142.150.74 port 42764 ssh2
Oct  1 14:04:14 nativespace-cdp sshd[27819]: Received disconnect from 113.142.150.74 port 42764:11: Bye Bye [preauth]
Oct  1 14:04:14 nativespace-cdp sshd[27819]: Disconnected from 113.142.150.74 port 42764 [preauth]
Oct  1 14:04:48 nativespace-cdp sshd[27910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.130.51  user=root
Oct  1 14:04:48 nativespace-cdp sshd[27910]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:04:51 nativespace-cdp sshd[27910]: Failed password for root from 43.128.130.51 port 55086 ssh2
Oct  1 14:04:51 nativespace-cdp sshd[27910]: Received disconnect from 43.128.130.51 port 55086:11: Bye Bye [preauth]
Oct  1 14:04:51 nativespace-cdp sshd[27910]: Disconnected from 43.128.130.51 port 55086 [preauth]
Oct  1 14:05:37 nativespace-cdp sshd[28318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.123.17  user=root
Oct  1 14:05:37 nativespace-cdp sshd[28318]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:05:40 nativespace-cdp sshd[28318]: Failed password for root from 52.161.123.17 port 36506 ssh2
Oct  1 14:05:40 nativespace-cdp sshd[28318]: Received disconnect from 52.161.123.17 port 36506:11: Bye Bye [preauth]
Oct  1 14:05:40 nativespace-cdp sshd[28318]: Disconnected from 52.161.123.17 port 36506 [preauth]
Oct  1 14:06:33 nativespace-cdp sshd[28579]: Connection closed by 159.100.136.21 port 56056 [preauth]
Oct  1 14:07:26 nativespace-cdp sshd[28803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.34  user=root
Oct  1 14:07:26 nativespace-cdp sshd[28803]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:07:28 nativespace-cdp sshd[28803]: Failed password for root from 154.83.17.34 port 42760 ssh2
Oct  1 14:07:28 nativespace-cdp sshd[28803]: Received disconnect from 154.83.17.34 port 42760:11: Bye Bye [preauth]
Oct  1 14:07:28 nativespace-cdp sshd[28803]: Disconnected from 154.83.17.34 port 42760 [preauth]
Oct  1 14:08:28 nativespace-cdp sshd[28980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.129.29.138  user=root
Oct  1 14:08:28 nativespace-cdp sshd[28980]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:08:30 nativespace-cdp sshd[28980]: Failed password for root from 202.129.29.138 port 55606 ssh2
Oct  1 14:08:30 nativespace-cdp sshd[28980]: Received disconnect from 202.129.29.138 port 55606:11: Bye Bye [preauth]
Oct  1 14:08:30 nativespace-cdp sshd[28980]: Disconnected from 202.129.29.138 port 55606 [preauth]
Oct  1 14:08:34 nativespace-cdp sshd[29076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.188.57  user=root
Oct  1 14:08:34 nativespace-cdp sshd[29076]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:08:36 nativespace-cdp sshd[29076]: Failed password for root from 138.204.188.57 port 47860 ssh2
Oct  1 14:08:36 nativespace-cdp sshd[29076]: Received disconnect from 138.204.188.57 port 47860:11: Bye Bye [preauth]
Oct  1 14:08:36 nativespace-cdp sshd[29076]: Disconnected from 138.204.188.57 port 47860 [preauth]
Oct  1 14:08:39 nativespace-cdp sshd[29096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198  user=root
Oct  1 14:08:39 nativespace-cdp sshd[29096]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:08:41 nativespace-cdp sshd[29096]: Failed password for root from 103.101.160.198 port 38690 ssh2
Oct  1 14:08:44 nativespace-cdp sshd[29096]: Received disconnect from 103.101.160.198 port 38690:11: Bye Bye [preauth]
Oct  1 14:08:44 nativespace-cdp sshd[29096]: Disconnected from 103.101.160.198 port 38690 [preauth]
Oct  1 14:08:46 nativespace-cdp sshd[29116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.123.17  user=root
Oct  1 14:08:46 nativespace-cdp sshd[29116]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:08:48 nativespace-cdp sshd[29116]: Failed password for root from 52.161.123.17 port 34346 ssh2
Oct  1 14:08:48 nativespace-cdp sshd[29116]: Received disconnect from 52.161.123.17 port 34346:11: Bye Bye [preauth]
Oct  1 14:08:48 nativespace-cdp sshd[29116]: Disconnected from 52.161.123.17 port 34346 [preauth]
Oct  1 14:08:51 nativespace-cdp sshd[29149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.150.74  user=root
Oct  1 14:08:51 nativespace-cdp sshd[29149]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:08:53 nativespace-cdp sshd[29149]: Failed password for root from 113.142.150.74 port 57034 ssh2
Oct  1 14:08:53 nativespace-cdp sshd[29149]: Received disconnect from 113.142.150.74 port 57034:11: Bye Bye [preauth]
Oct  1 14:08:53 nativespace-cdp sshd[29149]: Disconnected from 113.142.150.74 port 57034 [preauth]
Oct  1 14:08:55 nativespace-cdp sshd[29165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.130.51  user=root
Oct  1 14:08:55 nativespace-cdp sshd[29165]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:08:58 nativespace-cdp sshd[29165]: Failed password for root from 43.128.130.51 port 43204 ssh2
Oct  1 14:08:58 nativespace-cdp sshd[29165]: Received disconnect from 43.128.130.51 port 43204:11: Bye Bye [preauth]
Oct  1 14:08:58 nativespace-cdp sshd[29165]: Disconnected from 43.128.130.51 port 43204 [preauth]
Oct  1 14:09:05 nativespace-cdp sshd[29201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.34  user=root
Oct  1 14:09:05 nativespace-cdp sshd[29201]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:09:07 nativespace-cdp sshd[29201]: Failed password for root from 154.83.17.34 port 33648 ssh2
Oct  1 14:09:08 nativespace-cdp sshd[29201]: Received disconnect from 154.83.17.34 port 33648:11: Bye Bye [preauth]
Oct  1 14:09:08 nativespace-cdp sshd[29201]: Disconnected from 154.83.17.34 port 33648 [preauth]
Oct  1 14:09:09 nativespace-cdp sshd[29223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.224.79.223  user=root
Oct  1 14:09:09 nativespace-cdp sshd[29223]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:09:11 nativespace-cdp sshd[29223]: Failed password for root from 121.224.79.223 port 59210 ssh2
Oct  1 14:09:14 nativespace-cdp sshd[29223]: Received disconnect from 121.224.79.223 port 59210:11: Bye Bye [preauth]
Oct  1 14:09:14 nativespace-cdp sshd[29223]: Disconnected from 121.224.79.223 port 59210 [preauth]
Oct  1 14:09:21 nativespace-cdp sshd[29257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.129.29.138  user=root
Oct  1 14:09:21 nativespace-cdp sshd[29257]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:09:23 nativespace-cdp sshd[29257]: Failed password for root from 202.129.29.138 port 43596 ssh2
Oct  1 14:09:23 nativespace-cdp sshd[29257]: Received disconnect from 202.129.29.138 port 43596:11: Bye Bye [preauth]
Oct  1 14:09:23 nativespace-cdp sshd[29257]: Disconnected from 202.129.29.138 port 43596 [preauth]
Oct  1 14:09:24 nativespace-cdp sshd[29271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.123.17  user=root
Oct  1 14:09:24 nativespace-cdp sshd[29271]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:09:24 nativespace-cdp sshd[29268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.188.57  user=root
Oct  1 14:09:24 nativespace-cdp sshd[29268]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:09:26 nativespace-cdp sshd[29271]: Failed password for root from 52.161.123.17 port 55332 ssh2
Oct  1 14:09:26 nativespace-cdp sshd[29268]: Failed password for root from 138.204.188.57 port 60528 ssh2
Oct  1 14:09:28 nativespace-cdp sshd[29271]: Received disconnect from 52.161.123.17 port 55332:11: Bye Bye [preauth]
Oct  1 14:09:28 nativespace-cdp sshd[29271]: Disconnected from 52.161.123.17 port 55332 [preauth]
Oct  1 14:09:29 nativespace-cdp sshd[29268]: Received disconnect from 138.204.188.57 port 60528:11: Bye Bye [preauth]
Oct  1 14:09:29 nativespace-cdp sshd[29268]: Disconnected from 138.204.188.57 port 60528 [preauth]
Oct  1 14:09:31 nativespace-cdp sshd[29355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198  user=root
Oct  1 14:09:31 nativespace-cdp sshd[29355]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:09:33 nativespace-cdp sshd[29355]: Failed password for root from 103.101.160.198 port 51388 ssh2
Oct  1 14:09:33 nativespace-cdp sshd[29355]: Received disconnect from 103.101.160.198 port 51388:11: Bye Bye [preauth]
Oct  1 14:09:33 nativespace-cdp sshd[29355]: Disconnected from 103.101.160.198 port 51388 [preauth]
Oct  1 14:09:36 nativespace-cdp sshd[29373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.150.74  user=root
Oct  1 14:09:36 nativespace-cdp sshd[29373]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:09:39 nativespace-cdp sshd[29373]: Failed password for root from 113.142.150.74 port 39010 ssh2
Oct  1 14:09:39 nativespace-cdp sshd[29373]: Received disconnect from 113.142.150.74 port 39010:11: Bye Bye [preauth]
Oct  1 14:09:39 nativespace-cdp sshd[29373]: Disconnected from 113.142.150.74 port 39010 [preauth]
Oct  1 14:09:50 nativespace-cdp sshd[29504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.130.51  user=root
Oct  1 14:09:50 nativespace-cdp sshd[29504]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:09:52 nativespace-cdp sshd[29504]: Failed password for root from 43.128.130.51 port 35780 ssh2
Oct  1 14:09:53 nativespace-cdp sshd[29504]: Received disconnect from 43.128.130.51 port 35780:11: Bye Bye [preauth]
Oct  1 14:09:53 nativespace-cdp sshd[29504]: Disconnected from 43.128.130.51 port 35780 [preauth]
Oct  1 14:09:53 nativespace-cdp sshd[29516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.34  user=root
Oct  1 14:09:53 nativespace-cdp sshd[29516]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:09:55 nativespace-cdp sshd[29516]: Failed password for root from 154.83.17.34 port 46236 ssh2
Oct  1 14:09:55 nativespace-cdp sshd[29516]: Received disconnect from 154.83.17.34 port 46236:11: Bye Bye [preauth]
Oct  1 14:09:55 nativespace-cdp sshd[29516]: Disconnected from 154.83.17.34 port 46236 [preauth]
Oct  1 14:09:58 nativespace-cdp sshd[29573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.151.129.57  user=root
Oct  1 14:09:58 nativespace-cdp sshd[29573]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:09:58 nativespace-cdp sudo[29593]: pam_unix(sudo:session): session closed for user root
Oct  1 14:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 14:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:09:58 nativespace-cdp sudo[29596]: pam_unix(sudo:session): session closed for user root
Oct  1 14:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 14:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:00 nativespace-cdp sshd[29573]: Failed password for root from 193.151.129.57 port 44008 ssh2
Oct  1 14:10:00 nativespace-cdp sudo[29600]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:00 nativespace-cdp sudo[29608]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 14:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:00 nativespace-cdp sshd[29573]: Received disconnect from 193.151.129.57 port 44008:11: Bye Bye [preauth]
Oct  1 14:10:00 nativespace-cdp sshd[29573]: Disconnected from 193.151.129.57 port 44008 [preauth]
Oct  1 14:10:01 nativespace-cdp sshd[29603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.224.79.223  user=root
Oct  1 14:10:01 nativespace-cdp sshd[29603]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:10:03 nativespace-cdp sshd[29603]: Failed password for root from 121.224.79.223 port 42600 ssh2
Oct  1 14:10:03 nativespace-cdp sshd[29603]: Received disconnect from 121.224.79.223 port 42600:11: Bye Bye [preauth]
Oct  1 14:10:03 nativespace-cdp sshd[29603]: Disconnected from 121.224.79.223 port 42600 [preauth]
Oct  1 14:10:05 nativespace-cdp sudo[29611]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 14:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:06 nativespace-cdp sudo[29778]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 14:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:06 nativespace-cdp sudo[29781]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 14:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:06 nativespace-cdp sudo[29784]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 14:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:06 nativespace-cdp sudo[29788]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 14:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:06 nativespace-cdp sudo[29791]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 14:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:06 nativespace-cdp sudo[29797]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:07 nativespace-cdp sshd[29806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.123.17  user=root
Oct  1 14:10:07 nativespace-cdp sshd[29806]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 14:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:09 nativespace-cdp sudo[29817]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 14:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:10 nativespace-cdp sshd[29806]: Failed password for root from 52.161.123.17 port 48708 ssh2
Oct  1 14:10:10 nativespace-cdp sshd[29806]: Received disconnect from 52.161.123.17 port 48708:11: Bye Bye [preauth]
Oct  1 14:10:10 nativespace-cdp sshd[29806]: Disconnected from 52.161.123.17 port 48708 [preauth]
Oct  1 14:10:10 nativespace-cdp sudo[29821]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=connect9 user-3=athenare user-4=vantagep user-5=maflemin user-6=lbscrmod user-7=markward user-8=booff user-9=foundation user-10=stephani user-11=leereyn1 user-12=still user-13=agproduc user-14=spectrum user-15=theblack user-16=hodgesonweb user-17=jarvisin user-18=musorguk user-19=megacards user-20=wilsonsw user-21=strathar user-22=sarafoundation user-23=atestord user-24=brmrjxl user-25=lakesan1 user-26=magichat user-27=lbhyisi user-28=hhdugcor user-29=dickemery123 user-30=ptkxhsbt user-31=martsblo user-32=firstred user-33=southlon user-34=highlegh user-35=firstrel user-36=clarkass user-37=costestimatorco user-38=coursemc user-39=opaiscyx user-40=seftvta user-41=jonhartl user-42=ultbcrra user-43=firstres user-44=connectedshoppin user-45=thqkgnbz user-46=accooper user-47=ianrayne
Oct  1 14:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=hubmaster user-49=carsinyo user-50=fetch user-51=milloyco user-52=gilpin user-53=elecleis user-54=ggaaorgu user-55=belle user-56=newstoda user-57=bemadonn user-58=bedfords user-59=firstre2 user-60=vivienn1 user-61=battlere user-62=oneoarco user-63=brighto1 user-64=nstriton user-65=nativene user-66=innovat1 user-67=stuartge user-68=askhform user-69=alexadmin user-70=skyfirec user-71=steve user-72=bwppodcast user-73=zebrapho user-74=asandcoc user-75=sibtoncc user-76=dhyana user-77=beauty user-78=eatspam user-79=darkstar user-80=nsceres user-81=burydropin user-82=fawcettd user-83=hidden user-84=nomistakes user-85=barbersh user-86=tigerlet user-87=isleofwi user-88=smrszyqg user-89=lkpier user-90=philmcph user-91=ctedorgu user-92=donnychicago user-93=steakbridieme user-94=firstre5 user-95=nscdp user-96=health2045 user-97=fortunaz user-98=leftie user-99=foods user-100=eugincou user-101=courseme
Oct  1 14:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=hirefootballgame user-103=howardon user-104=pugwash user-105=paulmca1 user-106=cwsocial user-107=cathski user-108=cambria1 user-109=reliable user-110=ninejimm user-111=nbhavers user-112=careers user-113=david user-114=chrisdal user-115=mcdermos user-116=jennimil user-117=tomandle user-118=romaldki user-119=ranxterc user-120=outdoorc user-121=hodgsonmail user-122=branko user-123=onlycont user-124=attlebor user-125=lucy user-126=bakery user-127=sosevalu user-128=crrtipdl user-129=boldover user-130=nove user-131=design user-132=ladburyp user-133=stagingerris user-134=dancinggardener user-135=kategilpin user-136=sketchy user-137=cath user-138=havantho user-139=nvihkvu user-140=tstardom user-141=oubpgvbx user-142=what feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 14:10:10 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 14:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:12 nativespace-cdp sudo[29829]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 14:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:13 nativespace-cdp sudo[29840]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KuEgplR6wLH9RUJY.~
Oct  1 14:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:13 nativespace-cdp sudo[29844]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KuEgplR6wLH9RUJY.~'
Oct  1 14:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:13 nativespace-cdp sudo[29847]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-KuEgplR6wLH9RUJY.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 14:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:13 nativespace-cdp sudo[29853]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 14:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:13 nativespace-cdp sudo[29856]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:14 nativespace-cdp sshd[29848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.129.29.138  user=root
Oct  1 14:10:14 nativespace-cdp sshd[29848]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:10:15 nativespace-cdp sshd[29861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.188.57  user=root
Oct  1 14:10:15 nativespace-cdp sshd[29861]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 14:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 14:10:15 nativespace-cdp sudo[29884]: pam_unix(sudo:session): session closed for user root
Oct  1 14:10:15 nativespace-cdp sshd[29873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198  user=root
Oct  1 14:10:15 nativespace-cdp sshd[29873]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:10:16 nativespace-cdp sshd[29848]: Failed password for root from 202.129.29.138 port 57042 ssh2
Oct  1 14:10:17 nativespace-cdp sshd[29848]: Received disconnect from 202.129.29.138 port 57042:11: Bye Bye [preauth]
Oct  1 14:10:17 nativespace-cdp sshd[29848]: Disconnected from 202.129.29.138 port 57042 [preauth]
Oct  1 14:10:17 nativespace-cdp sshd[29861]: Failed password for root from 138.204.188.57 port 44962 ssh2
Oct  1 14:10:17 nativespace-cdp sshd[29861]: Received disconnect from 138.204.188.57 port 44962:11: Bye Bye [preauth]
Oct  1 14:10:17 nativespace-cdp sshd[29861]: Disconnected from 138.204.188.57 port 44962 [preauth]
Oct  1 14:10:17 nativespace-cdp sshd[29873]: Failed password for root from 103.101.160.198 port 35852 ssh2
Oct  1 14:10:18 nativespace-cdp sshd[29873]: Received disconnect from 103.101.160.198 port 35852:11: Bye Bye [preauth]
Oct  1 14:10:18 nativespace-cdp sshd[29873]: Disconnected from 103.101.160.198 port 35852 [preauth]
Oct  1 14:10:21 nativespace-cdp sshd[29902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.150.74  user=root
Oct  1 14:10:21 nativespace-cdp sshd[29902]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:10:23 nativespace-cdp sshd[29902]: Failed password for root from 113.142.150.74 port 49222 ssh2
Oct  1 14:10:23 nativespace-cdp sshd[29902]: Received disconnect from 113.142.150.74 port 49222:11: Bye Bye [preauth]
Oct  1 14:10:23 nativespace-cdp sshd[29902]: Disconnected from 113.142.150.74 port 49222 [preauth]
Oct  1 14:10:41 nativespace-cdp sshd[30014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.130.51  user=root
Oct  1 14:10:41 nativespace-cdp sshd[30014]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:10:43 nativespace-cdp sshd[30077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.34  user=root
Oct  1 14:10:43 nativespace-cdp sshd[30077]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:10:44 nativespace-cdp sshd[30014]: Failed password for root from 43.128.130.51 port 49418 ssh2
Oct  1 14:10:44 nativespace-cdp sshd[30014]: Received disconnect from 43.128.130.51 port 49418:11: Bye Bye [preauth]
Oct  1 14:10:44 nativespace-cdp sshd[30014]: Disconnected from 43.128.130.51 port 49418 [preauth]
Oct  1 14:10:45 nativespace-cdp sshd[30077]: Failed password for root from 154.83.17.34 port 58822 ssh2
Oct  1 14:10:45 nativespace-cdp sshd[30077]: Received disconnect from 154.83.17.34 port 58822:11: Bye Bye [preauth]
Oct  1 14:10:45 nativespace-cdp sshd[30077]: Disconnected from 154.83.17.34 port 58822 [preauth]
Oct  1 14:10:50 nativespace-cdp sshd[30128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.123.17  user=root
Oct  1 14:10:50 nativespace-cdp sshd[30128]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:10:53 nativespace-cdp sshd[30128]: Failed password for root from 52.161.123.17 port 51898 ssh2
Oct  1 14:10:53 nativespace-cdp sshd[30128]: Received disconnect from 52.161.123.17 port 51898:11: Bye Bye [preauth]
Oct  1 14:10:53 nativespace-cdp sshd[30128]: Disconnected from 52.161.123.17 port 51898 [preauth]
Oct  1 14:11:06 nativespace-cdp sshd[30195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198  user=root
Oct  1 14:11:06 nativespace-cdp sshd[30195]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:11:07 nativespace-cdp sshd[30200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.188.57  user=root
Oct  1 14:11:07 nativespace-cdp sshd[30200]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:11:08 nativespace-cdp sshd[30204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.129.29.138  user=root
Oct  1 14:11:08 nativespace-cdp sshd[30204]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:11:08 nativespace-cdp sshd[30195]: Failed password for root from 103.101.160.198 port 48552 ssh2
Oct  1 14:11:08 nativespace-cdp sshd[30195]: Received disconnect from 103.101.160.198 port 48552:11: Bye Bye [preauth]
Oct  1 14:11:08 nativespace-cdp sshd[30195]: Disconnected from 103.101.160.198 port 48552 [preauth]
Oct  1 14:11:10 nativespace-cdp sshd[30200]: Failed password for root from 138.204.188.57 port 57634 ssh2
Oct  1 14:11:10 nativespace-cdp sshd[30208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.151.129.57  user=root
Oct  1 14:11:10 nativespace-cdp sshd[30208]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:11:10 nativespace-cdp sshd[30200]: Received disconnect from 138.204.188.57 port 57634:11: Bye Bye [preauth]
Oct  1 14:11:10 nativespace-cdp sshd[30200]: Disconnected from 138.204.188.57 port 57634 [preauth]
Oct  1 14:11:10 nativespace-cdp sshd[30204]: Failed password for root from 202.129.29.138 port 49928 ssh2
Oct  1 14:11:12 nativespace-cdp sshd[30208]: Failed password for root from 193.151.129.57 port 49888 ssh2
Oct  1 14:11:12 nativespace-cdp sshd[30208]: Received disconnect from 193.151.129.57 port 49888:11: Bye Bye [preauth]
Oct  1 14:11:12 nativespace-cdp sshd[30208]: Disconnected from 193.151.129.57 port 49888 [preauth]
Oct  1 14:11:13 nativespace-cdp sshd[30204]: Received disconnect from 202.129.29.138 port 49928:11: Bye Bye [preauth]
Oct  1 14:11:13 nativespace-cdp sshd[30204]: Disconnected from 202.129.29.138 port 49928 [preauth]
Oct  1 14:11:15 nativespace-cdp sshd[30254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.150.74  user=root
Oct  1 14:11:15 nativespace-cdp sshd[30254]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:11:17 nativespace-cdp sshd[30254]: Failed password for root from 113.142.150.74 port 59440 ssh2
Oct  1 14:11:17 nativespace-cdp sshd[30254]: Received disconnect from 113.142.150.74 port 59440:11: Bye Bye [preauth]
Oct  1 14:11:17 nativespace-cdp sshd[30254]: Disconnected from 113.142.150.74 port 59440 [preauth]
Oct  1 14:11:30 nativespace-cdp sshd[30287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.130.51  user=root
Oct  1 14:11:30 nativespace-cdp sshd[30287]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:11:33 nativespace-cdp sshd[30300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.123.17  user=root
Oct  1 14:11:33 nativespace-cdp sshd[30300]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:11:33 nativespace-cdp sshd[30287]: Failed password for root from 43.128.130.51 port 52100 ssh2
Oct  1 14:11:33 nativespace-cdp sshd[30306]: Connection closed by 159.100.136.21 port 37362 [preauth]
Oct  1 14:11:33 nativespace-cdp sshd[30287]: Received disconnect from 43.128.130.51 port 52100:11: Bye Bye [preauth]
Oct  1 14:11:33 nativespace-cdp sshd[30287]: Disconnected from 43.128.130.51 port 52100 [preauth]
Oct  1 14:11:33 nativespace-cdp sshd[30302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.224.79.223  user=root
Oct  1 14:11:33 nativespace-cdp sshd[30302]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:11:34 nativespace-cdp sshd[30304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.34  user=root
Oct  1 14:11:34 nativespace-cdp sshd[30304]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:11:35 nativespace-cdp sshd[30300]: Failed password for root from 52.161.123.17 port 39558 ssh2
Oct  1 14:11:35 nativespace-cdp sshd[30300]: Received disconnect from 52.161.123.17 port 39558:11: Bye Bye [preauth]
Oct  1 14:11:35 nativespace-cdp sshd[30300]: Disconnected from 52.161.123.17 port 39558 [preauth]
Oct  1 14:11:35 nativespace-cdp sshd[30302]: Failed password for root from 121.224.79.223 port 54252 ssh2
Oct  1 14:11:36 nativespace-cdp sshd[30302]: Received disconnect from 121.224.79.223 port 54252:11: Bye Bye [preauth]
Oct  1 14:11:36 nativespace-cdp sshd[30302]: Disconnected from 121.224.79.223 port 54252 [preauth]
Oct  1 14:11:36 nativespace-cdp sshd[30304]: Failed password for root from 154.83.17.34 port 43174 ssh2
Oct  1 14:11:36 nativespace-cdp sshd[30304]: Received disconnect from 154.83.17.34 port 43174:11: Bye Bye [preauth]
Oct  1 14:11:36 nativespace-cdp sshd[30304]: Disconnected from 154.83.17.34 port 43174 [preauth]
Oct  1 14:12:00 nativespace-cdp sshd[30384]: Connection closed by 138.204.188.57 port 42068 [preauth]
Oct  1 14:12:01 nativespace-cdp sshd[30395]: Connection closed by 202.129.29.138 port 37464 [preauth]
Oct  1 14:12:01 nativespace-cdp sshd[30387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.150.74  user=root
Oct  1 14:12:01 nativespace-cdp sshd[30387]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:03 nativespace-cdp sshd[30387]: Failed password for root from 113.142.150.74 port 41422 ssh2
Oct  1 14:12:03 nativespace-cdp sshd[30371]: Received disconnect from 103.101.160.198 port 33014:11: Bye Bye [preauth]
Oct  1 14:12:03 nativespace-cdp sshd[30371]: Disconnected from 103.101.160.198 port 33014 [preauth]
Oct  1 14:12:03 nativespace-cdp sshd[30387]: Received disconnect from 113.142.150.74 port 41422:11: Bye Bye [preauth]
Oct  1 14:12:03 nativespace-cdp sshd[30387]: Disconnected from 113.142.150.74 port 41422 [preauth]
Oct  1 14:12:15 nativespace-cdp sshd[30471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.123.17  user=root
Oct  1 14:12:15 nativespace-cdp sshd[30471]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:17 nativespace-cdp sshd[30475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.130.51  user=root
Oct  1 14:12:17 nativespace-cdp sshd[30475]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:18 nativespace-cdp sshd[30471]: Failed password for root from 52.161.123.17 port 45850 ssh2
Oct  1 14:12:18 nativespace-cdp sshd[30471]: Received disconnect from 52.161.123.17 port 45850:11: Bye Bye [preauth]
Oct  1 14:12:18 nativespace-cdp sshd[30471]: Disconnected from 52.161.123.17 port 45850 [preauth]
Oct  1 14:12:20 nativespace-cdp sshd[30475]: Failed password for root from 43.128.130.51 port 50540 ssh2
Oct  1 14:12:20 nativespace-cdp sshd[30475]: Received disconnect from 43.128.130.51 port 50540:11: Bye Bye [preauth]
Oct  1 14:12:20 nativespace-cdp sshd[30475]: Disconnected from 43.128.130.51 port 50540 [preauth]
Oct  1 14:12:25 nativespace-cdp sshd[30484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.151.129.57  user=root
Oct  1 14:12:25 nativespace-cdp sshd[30484]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:26 nativespace-cdp sshd[30512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.34  user=root
Oct  1 14:12:26 nativespace-cdp sshd[30512]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:27 nativespace-cdp sshd[30484]: Failed password for root from 193.151.129.57 port 51050 ssh2
Oct  1 14:12:27 nativespace-cdp sshd[30484]: Received disconnect from 193.151.129.57 port 51050:11: Bye Bye [preauth]
Oct  1 14:12:27 nativespace-cdp sshd[30484]: Disconnected from 193.151.129.57 port 51050 [preauth]
Oct  1 14:12:29 nativespace-cdp sshd[30512]: Failed password for root from 154.83.17.34 port 55750 ssh2
Oct  1 14:12:29 nativespace-cdp sshd[30512]: Received disconnect from 154.83.17.34 port 55750:11: Bye Bye [preauth]
Oct  1 14:12:29 nativespace-cdp sshd[30512]: Disconnected from 154.83.17.34 port 55750 [preauth]
Oct  1 14:12:40 nativespace-cdp sshd[30537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.224.79.223  user=root
Oct  1 14:12:40 nativespace-cdp sshd[30537]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:40 nativespace-cdp sshd[30542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.129.29.138  user=root
Oct  1 14:12:40 nativespace-cdp sshd[30542]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:41 nativespace-cdp sshd[30545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.150.74  user=root
Oct  1 14:12:41 nativespace-cdp sshd[30545]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:41 nativespace-cdp sshd[30547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198  user=root
Oct  1 14:12:41 nativespace-cdp sshd[30547]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:42 nativespace-cdp sshd[30537]: Failed password for root from 121.224.79.223 port 37660 ssh2
Oct  1 14:12:42 nativespace-cdp sshd[30537]: Received disconnect from 121.224.79.223 port 37660:11: Bye Bye [preauth]
Oct  1 14:12:42 nativespace-cdp sshd[30537]: Disconnected from 121.224.79.223 port 37660 [preauth]
Oct  1 14:12:42 nativespace-cdp sshd[30554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.188.57  user=root
Oct  1 14:12:42 nativespace-cdp sshd[30554]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:42 nativespace-cdp sshd[30542]: Failed password for root from 202.129.29.138 port 44318 ssh2
Oct  1 14:12:43 nativespace-cdp sshd[30542]: Received disconnect from 202.129.29.138 port 44318:11: Bye Bye [preauth]
Oct  1 14:12:43 nativespace-cdp sshd[30542]: Disconnected from 202.129.29.138 port 44318 [preauth]
Oct  1 14:12:43 nativespace-cdp sshd[30545]: Failed password for root from 113.142.150.74 port 51622 ssh2
Oct  1 14:12:43 nativespace-cdp sshd[30547]: Failed password for root from 103.101.160.198 port 45710 ssh2
Oct  1 14:12:43 nativespace-cdp sshd[30547]: Received disconnect from 103.101.160.198 port 45710:11: Bye Bye [preauth]
Oct  1 14:12:43 nativespace-cdp sshd[30547]: Disconnected from 103.101.160.198 port 45710 [preauth]
Oct  1 14:12:44 nativespace-cdp sshd[30545]: Received disconnect from 113.142.150.74 port 51622:11: Bye Bye [preauth]
Oct  1 14:12:44 nativespace-cdp sshd[30545]: Disconnected from 113.142.150.74 port 51622 [preauth]
Oct  1 14:12:44 nativespace-cdp sshd[30554]: Failed password for root from 138.204.188.57 port 54734 ssh2
Oct  1 14:12:44 nativespace-cdp sshd[30554]: Received disconnect from 138.204.188.57 port 54734:11: Bye Bye [preauth]
Oct  1 14:12:44 nativespace-cdp sshd[30554]: Disconnected from 138.204.188.57 port 54734 [preauth]
Oct  1 14:12:57 nativespace-cdp sshd[30588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.123.17  user=root
Oct  1 14:12:57 nativespace-cdp sshd[30588]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:12:59 nativespace-cdp sshd[30588]: Failed password for root from 52.161.123.17 port 52060 ssh2
Oct  1 14:12:59 nativespace-cdp sshd[30588]: Received disconnect from 52.161.123.17 port 52060:11: Bye Bye [preauth]
Oct  1 14:12:59 nativespace-cdp sshd[30588]: Disconnected from 52.161.123.17 port 52060 [preauth]
Oct  1 14:13:02 nativespace-cdp sshd[30600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.130.51  user=root
Oct  1 14:13:02 nativespace-cdp sshd[30600]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:13:04 nativespace-cdp sshd[30600]: Failed password for root from 43.128.130.51 port 57552 ssh2
Oct  1 14:13:04 nativespace-cdp sshd[30600]: Received disconnect from 43.128.130.51 port 57552:11: Bye Bye [preauth]
Oct  1 14:13:04 nativespace-cdp sshd[30600]: Disconnected from 43.128.130.51 port 57552 [preauth]
Oct  1 14:13:11 nativespace-cdp sshd[30685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.34  user=root
Oct  1 14:13:11 nativespace-cdp sshd[30685]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:13:12 nativespace-cdp sshd[30685]: Failed password for root from 154.83.17.34 port 40098 ssh2
Oct  1 14:13:16 nativespace-cdp sshd[30685]: Received disconnect from 154.83.17.34 port 40098:11: Bye Bye [preauth]
Oct  1 14:13:16 nativespace-cdp sshd[30685]: Disconnected from 154.83.17.34 port 40098 [preauth]
Oct  1 14:13:26 nativespace-cdp sshd[30723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198  user=root
Oct  1 14:13:26 nativespace-cdp sshd[30723]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:13:26 nativespace-cdp sshd[30721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.129.29.138  user=root
Oct  1 14:13:26 nativespace-cdp sshd[30721]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:13:27 nativespace-cdp sshd[30729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.151.129.57  user=root
Oct  1 14:13:27 nativespace-cdp sshd[30729]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:13:27 nativespace-cdp sshd[30735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.224.79.223  user=root
Oct  1 14:13:27 nativespace-cdp sshd[30735]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:13:27 nativespace-cdp sshd[30733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.150.74  user=root
Oct  1 14:13:27 nativespace-cdp sshd[30733]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:13:28 nativespace-cdp sshd[30723]: Failed password for root from 103.101.160.198 port 58402 ssh2
Oct  1 14:13:28 nativespace-cdp sshd[30721]: Failed password for root from 202.129.29.138 port 50028 ssh2
Oct  1 14:13:28 nativespace-cdp sshd[30723]: Received disconnect from 103.101.160.198 port 58402:11: Bye Bye [preauth]
Oct  1 14:13:28 nativespace-cdp sshd[30723]: Disconnected from 103.101.160.198 port 58402 [preauth]
Oct  1 14:13:28 nativespace-cdp sshd[30721]: Received disconnect from 202.129.29.138 port 50028:11: Bye Bye [preauth]
Oct  1 14:13:28 nativespace-cdp sshd[30721]: Disconnected from 202.129.29.138 port 50028 [preauth]
Oct  1 14:13:29 nativespace-cdp sshd[30729]: Failed password for root from 193.151.129.57 port 39380 ssh2
Oct  1 14:13:29 nativespace-cdp sshd[30735]: Failed password for root from 121.224.79.223 port 49282 ssh2
Oct  1 14:13:29 nativespace-cdp sshd[30733]: Failed password for root from 113.142.150.74 port 33612 ssh2
Oct  1 14:13:29 nativespace-cdp sshd[30729]: Received disconnect from 193.151.129.57 port 39380:11: Bye Bye [preauth]
Oct  1 14:13:29 nativespace-cdp sshd[30729]: Disconnected from 193.151.129.57 port 39380 [preauth]
Oct  1 14:13:30 nativespace-cdp sshd[30739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.188.57  user=root
Oct  1 14:13:30 nativespace-cdp sshd[30739]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:13:30 nativespace-cdp sshd[30735]: Received disconnect from 121.224.79.223 port 49282:11: Bye Bye [preauth]
Oct  1 14:13:30 nativespace-cdp sshd[30735]: Disconnected from 121.224.79.223 port 49282 [preauth]
Oct  1 14:13:30 nativespace-cdp sshd[30733]: Received disconnect from 113.142.150.74 port 33612:11: Bye Bye [preauth]
Oct  1 14:13:30 nativespace-cdp sshd[30733]: Disconnected from 113.142.150.74 port 33612 [preauth]
Oct  1 14:13:31 nativespace-cdp sshd[30739]: Failed password for root from 138.204.188.57 port 39166 ssh2
Oct  1 14:13:31 nativespace-cdp sshd[30739]: Received disconnect from 138.204.188.57 port 39166:11: Bye Bye [preauth]
Oct  1 14:13:31 nativespace-cdp sshd[30739]: Disconnected from 138.204.188.57 port 39166 [preauth]
Oct  1 14:13:38 nativespace-cdp sshd[30875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.123.17  user=root
Oct  1 14:13:38 nativespace-cdp sshd[30875]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:13:40 nativespace-cdp sshd[30875]: Failed password for root from 52.161.123.17 port 50084 ssh2
Oct  1 14:13:40 nativespace-cdp sshd[30875]: Received disconnect from 52.161.123.17 port 50084:11: Bye Bye [preauth]
Oct  1 14:13:40 nativespace-cdp sshd[30875]: Disconnected from 52.161.123.17 port 50084 [preauth]
Oct  1 14:13:46 nativespace-cdp sshd[30902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.130.51  user=root
Oct  1 14:13:46 nativespace-cdp sshd[30902]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:13:48 nativespace-cdp sshd[30902]: Failed password for root from 43.128.130.51 port 59616 ssh2
Oct  1 14:13:48 nativespace-cdp sshd[30902]: Received disconnect from 43.128.130.51 port 59616:11: Bye Bye [preauth]
Oct  1 14:13:48 nativespace-cdp sshd[30902]: Disconnected from 43.128.130.51 port 59616 [preauth]
Oct  1 14:13:58 nativespace-cdp sshd[30932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.34  user=root
Oct  1 14:13:58 nativespace-cdp sshd[30932]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:00 nativespace-cdp sshd[30932]: Failed password for root from 154.83.17.34 port 52682 ssh2
Oct  1 14:14:01 nativespace-cdp sshd[30932]: Received disconnect from 154.83.17.34 port 52682:11: Bye Bye [preauth]
Oct  1 14:14:01 nativespace-cdp sshd[30932]: Disconnected from 154.83.17.34 port 52682 [preauth]
Oct  1 14:14:07 nativespace-cdp sshd[30980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.150.74  user=root
Oct  1 14:14:07 nativespace-cdp sshd[30980]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:08 nativespace-cdp sshd[30984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198  user=root
Oct  1 14:14:08 nativespace-cdp sshd[30984]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:09 nativespace-cdp sshd[30992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.129.29.138  user=root
Oct  1 14:14:09 nativespace-cdp sshd[30992]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:09 nativespace-cdp sshd[30980]: Failed password for root from 113.142.150.74 port 43814 ssh2
Oct  1 14:14:09 nativespace-cdp sshd[30980]: Received disconnect from 113.142.150.74 port 43814:11: Bye Bye [preauth]
Oct  1 14:14:09 nativespace-cdp sshd[30980]: Disconnected from 113.142.150.74 port 43814 [preauth]
Oct  1 14:14:10 nativespace-cdp sshd[30984]: Failed password for root from 103.101.160.198 port 42864 ssh2
Oct  1 14:14:11 nativespace-cdp sshd[30984]: Received disconnect from 103.101.160.198 port 42864:11: Bye Bye [preauth]
Oct  1 14:14:11 nativespace-cdp sshd[30984]: Disconnected from 103.101.160.198 port 42864 [preauth]
Oct  1 14:14:11 nativespace-cdp sshd[30992]: Failed password for root from 202.129.29.138 port 47162 ssh2
Oct  1 14:14:11 nativespace-cdp sshd[30992]: Received disconnect from 202.129.29.138 port 47162:11: Bye Bye [preauth]
Oct  1 14:14:11 nativespace-cdp sshd[30992]: Disconnected from 202.129.29.138 port 47162 [preauth]
Oct  1 14:14:14 nativespace-cdp sshd[31011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.188.57  user=root
Oct  1 14:14:14 nativespace-cdp sshd[31011]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:16 nativespace-cdp sshd[31011]: Failed password for root from 138.204.188.57 port 51830 ssh2
Oct  1 14:14:20 nativespace-cdp sshd[31031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.123.17  user=root
Oct  1 14:14:20 nativespace-cdp sshd[31031]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:20 nativespace-cdp sshd[31011]: Received disconnect from 138.204.188.57 port 51830:11: Bye Bye [preauth]
Oct  1 14:14:20 nativespace-cdp sshd[31011]: Disconnected from 138.204.188.57 port 51830 [preauth]
Oct  1 14:14:23 nativespace-cdp sshd[31031]: Failed password for root from 52.161.123.17 port 42980 ssh2
Oct  1 14:14:26 nativespace-cdp sshd[31031]: Received disconnect from 52.161.123.17 port 42980:11: Bye Bye [preauth]
Oct  1 14:14:26 nativespace-cdp sshd[31031]: Disconnected from 52.161.123.17 port 42980 [preauth]
Oct  1 14:14:31 nativespace-cdp sshd[31060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.130.51  user=root
Oct  1 14:14:31 nativespace-cdp sshd[31060]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:33 nativespace-cdp sshd[31060]: Failed password for root from 43.128.130.51 port 56358 ssh2
Oct  1 14:14:34 nativespace-cdp sshd[31060]: Received disconnect from 43.128.130.51 port 56358:11: Bye Bye [preauth]
Oct  1 14:14:34 nativespace-cdp sshd[31060]: Disconnected from 43.128.130.51 port 56358 [preauth]
Oct  1 14:14:34 nativespace-cdp sshd[31084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.151.129.57  user=root
Oct  1 14:14:34 nativespace-cdp sshd[31084]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:35 nativespace-cdp sshd[31084]: Failed password for root from 193.151.129.57 port 56706 ssh2
Oct  1 14:14:36 nativespace-cdp sshd[31084]: Received disconnect from 193.151.129.57 port 56706:11: Bye Bye [preauth]
Oct  1 14:14:36 nativespace-cdp sshd[31084]: Disconnected from 193.151.129.57 port 56706 [preauth]
Oct  1 14:14:46 nativespace-cdp sshd[31152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.34  user=root
Oct  1 14:14:46 nativespace-cdp sshd[31152]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:49 nativespace-cdp sshd[31152]: Failed password for root from 154.83.17.34 port 37032 ssh2
Oct  1 14:14:49 nativespace-cdp sshd[31152]: Received disconnect from 154.83.17.34 port 37032:11: Bye Bye [preauth]
Oct  1 14:14:49 nativespace-cdp sshd[31152]: Disconnected from 154.83.17.34 port 37032 [preauth]
Oct  1 14:14:57 nativespace-cdp sshd[31174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.150.74  user=root
Oct  1 14:14:57 nativespace-cdp sshd[31174]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:57 nativespace-cdp sshd[31179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.101.160.198  user=root
Oct  1 14:14:57 nativespace-cdp sshd[31179]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:14:58 nativespace-cdp sshd[31174]: Failed password for root from 113.142.150.74 port 54028 ssh2
Oct  1 14:14:59 nativespace-cdp sshd[31179]: Failed password for root from 103.101.160.198 port 55560 ssh2
Oct  1 14:15:02 nativespace-cdp sshd[31179]: Received disconnect from 103.101.160.198 port 55560:11: Bye Bye [preauth]
Oct  1 14:15:02 nativespace-cdp sshd[31179]: Disconnected from 103.101.160.198 port 55560 [preauth]
Oct  1 14:15:05 nativespace-cdp sshd[31184]: Connection closed by 202.129.29.138 port 34850 [preauth]
Oct  1 14:15:06 nativespace-cdp sshd[31319]: Connection closed by 138.204.188.57 port 36266 [preauth]
Oct  1 14:15:08 nativespace-cdp sshd[31174]: Received disconnect from 113.142.150.74 port 54028:11: Bye Bye [preauth]
Oct  1 14:15:08 nativespace-cdp sshd[31174]: Disconnected from 113.142.150.74 port 54028 [preauth]
Oct  1 14:15:17 nativespace-cdp sshd[31413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.130.51  user=root
Oct  1 14:15:17 nativespace-cdp sshd[31413]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:15:18 nativespace-cdp sshd[31418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.224.79.223  user=root
Oct  1 14:15:18 nativespace-cdp sshd[31418]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:15:18 nativespace-cdp sshd[31413]: Failed password for root from 43.128.130.51 port 56858 ssh2
Oct  1 14:15:19 nativespace-cdp sshd[31413]: Received disconnect from 43.128.130.51 port 56858:11: Bye Bye [preauth]
Oct  1 14:15:19 nativespace-cdp sshd[31413]: Disconnected from 43.128.130.51 port 56858 [preauth]
Oct  1 14:15:20 nativespace-cdp sshd[31418]: Failed password for root from 121.224.79.223 port 44280 ssh2
Oct  1 14:15:20 nativespace-cdp sshd[31418]: Received disconnect from 121.224.79.223 port 44280:11: Bye Bye [preauth]
Oct  1 14:15:20 nativespace-cdp sshd[31418]: Disconnected from 121.224.79.223 port 44280 [preauth]
Oct  1 14:15:31 nativespace-cdp sshd[31471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.34  user=root
Oct  1 14:15:31 nativespace-cdp sshd[31471]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:15:34 nativespace-cdp sshd[31471]: Failed password for root from 154.83.17.34 port 49614 ssh2
Oct  1 14:15:34 nativespace-cdp sshd[31471]: Received disconnect from 154.83.17.34 port 49614:11: Bye Bye [preauth]
Oct  1 14:15:34 nativespace-cdp sshd[31471]: Disconnected from 154.83.17.34 port 49614 [preauth]
Oct  1 14:15:37 nativespace-cdp sshd[31502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.151.129.57  user=root
Oct  1 14:15:37 nativespace-cdp sshd[31502]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:15:39 nativespace-cdp sshd[31502]: Failed password for root from 193.151.129.57 port 56766 ssh2
Oct  1 14:15:39 nativespace-cdp sshd[31502]: Received disconnect from 193.151.129.57 port 56766:11: Bye Bye [preauth]
Oct  1 14:15:39 nativespace-cdp sshd[31502]: Disconnected from 193.151.129.57 port 56766 [preauth]
Oct  1 14:16:05 nativespace-cdp sshd[31609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.224.79.223  user=root
Oct  1 14:16:05 nativespace-cdp sshd[31609]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:16:07 nativespace-cdp sshd[31609]: Failed password for root from 121.224.79.223 port 55896 ssh2
Oct  1 14:16:07 nativespace-cdp sshd[31609]: Received disconnect from 121.224.79.223 port 55896:11: Bye Bye [preauth]
Oct  1 14:16:07 nativespace-cdp sshd[31609]: Disconnected from 121.224.79.223 port 55896 [preauth]
Oct  1 14:16:33 nativespace-cdp sshd[31739]: Connection closed by 159.100.136.21 port 47096 [preauth]
Oct  1 14:16:49 nativespace-cdp sshd[31754]: Connection closed by 193.151.129.57 port 50768 [preauth]
Oct  1 14:16:55 nativespace-cdp sshd[31789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.224.79.223  user=root
Oct  1 14:16:55 nativespace-cdp sshd[31789]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:16:58 nativespace-cdp sshd[31789]: Failed password for root from 121.224.79.223 port 39286 ssh2
Oct  1 14:16:58 nativespace-cdp sshd[31789]: Received disconnect from 121.224.79.223 port 39286:11: Bye Bye [preauth]
Oct  1 14:16:58 nativespace-cdp sshd[31789]: Disconnected from 121.224.79.223 port 39286 [preauth]
Oct  1 14:17:47 nativespace-cdp sshd[31940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.151.129.57  user=root
Oct  1 14:17:47 nativespace-cdp sshd[31940]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:17:49 nativespace-cdp sshd[31940]: Failed password for root from 193.151.129.57 port 33330 ssh2
Oct  1 14:17:49 nativespace-cdp sshd[31940]: Received disconnect from 193.151.129.57 port 33330:11: Bye Bye [preauth]
Oct  1 14:17:49 nativespace-cdp sshd[31940]: Disconnected from 193.151.129.57 port 33330 [preauth]
Oct  1 14:18:51 nativespace-cdp sshd[32271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.151.129.57  user=root
Oct  1 14:18:51 nativespace-cdp sshd[32271]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 14:18:52 nativespace-cdp sshd[32271]: Failed password for root from 193.151.129.57 port 60382 ssh2
Oct  1 14:18:53 nativespace-cdp sshd[32271]: Received disconnect from 193.151.129.57 port 60382:11: Bye Bye [preauth]
Oct  1 14:18:53 nativespace-cdp sshd[32271]: Disconnected from 193.151.129.57 port 60382 [preauth]
Oct  1 14:21:33 nativespace-cdp sshd[661]: Connection closed by 159.100.136.21 port 56896 [preauth]
Oct  1 14:26:36 nativespace-cdp sshd[1974]: Connection closed by 159.100.136.21 port 38786 [preauth]
Oct  1 14:31:33 nativespace-cdp sshd[3279]: Connection closed by 159.100.136.21 port 48402 [preauth]
Oct  1 14:36:33 nativespace-cdp sshd[4740]: Connection closed by 159.100.136.21 port 58312 [preauth]
Oct  1 14:41:34 nativespace-cdp sshd[5855]: Connection closed by 159.100.136.21 port 39458 [preauth]
Oct  1 14:46:33 nativespace-cdp sshd[7035]: Connection closed by 159.100.136.21 port 49410 [preauth]
Oct  1 14:48:29 nativespace-cdp sshd[7378]: Did not receive identification string from 87.236.176.150 port 43103
Oct  1 14:48:29 nativespace-cdp sshd[7381]: Connection closed by 87.236.176.150 port 54233 [preauth]
Oct  1 14:51:33 nativespace-cdp sshd[8325]: Connection closed by 159.100.136.21 port 58806 [preauth]
Oct  1 14:56:35 nativespace-cdp sshd[9532]: Connection closed by 159.100.136.21 port 40460 [preauth]
Oct  1 15:01:33 nativespace-cdp sshd[11004]: Connection closed by 159.100.136.21 port 49836 [preauth]
Oct  1 15:06:33 nativespace-cdp sshd[12752]: Connection closed by 159.100.136.21 port 59700 [preauth]
Oct  1 15:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 15:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:09:59 nativespace-cdp sudo[13626]: pam_unix(sudo:session): session closed for user root
Oct  1 15:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 15:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:09:59 nativespace-cdp sudo[13629]: pam_unix(sudo:session): session closed for user root
Oct  1 15:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 15:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:01 nativespace-cdp sudo[13632]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 15:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:01 nativespace-cdp sudo[13708]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 15:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:07 nativespace-cdp sudo[13721]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 15:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:07 nativespace-cdp sudo[13792]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 15:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:07 nativespace-cdp sudo[13795]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 15:10:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:07 nativespace-cdp sudo[13798]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 15:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:08 nativespace-cdp sudo[13801]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 15:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:08 nativespace-cdp sudo[13804]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 15:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:08 nativespace-cdp sudo[13807]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 15:10:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:15 nativespace-cdp sudo[13848]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 15:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:17 nativespace-cdp sudo[13852]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=bakery user-2=sosevalu user-3=crrtipdl user-4=boldover user-5=nove user-6=design user-7=ladburyp user-8=dancinggardener user-9=stagingerris user-10=kategilpin user-11=cath user-12=sketchy user-13=havantho user-14=nvihkvu user-15=oubpgvbx user-16=tstardom user-17=what user-18=nbhavers user-19=careers user-20=david user-21=chrisdal user-22=mcdermos user-23=jennimil user-24=tomandle user-25=romaldki user-26=ranxterc user-27=hodgsonmail user-28=outdoorc user-29=branko user-30=onlycont user-31=attlebor user-32=lucy user-33=hidden user-34=nomistakes user-35=tigerlet user-36=barbersh user-37=smrszyqg user-38=isleofwi user-39=lkpier user-40=ctedorgu user-41=philmcph user-42=donnychicago user-43=steakbridieme user-44=firstre5 user-45=nscdp user-46=health2045 user-47=fortunaz user-48=leftie user-49=foods
Oct  1 15:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=eugincou user-51=courseme user-52=hirefootballgame user-53=paulmca1 user-54=pugwash user-55=howardon user-56=cwsocial user-57=cathski user-58=cambria1 user-59=ninejimm user-60=reliable user-61=steve user-62=bwppodcast user-63=zebrapho user-64=asandcoc user-65=sibtoncc user-66=dhyana user-67=beauty user-68=eatspam user-69=darkstar user-70=nsceres user-71=burydropin user-72=fawcettd user-73=belle user-74=ggaaorgu user-75=newstoda user-76=bemadonn user-77=bedfords user-78=firstre2 user-79=vivienn1 user-80=battlere user-81=oneoarco user-82=brighto1 user-83=nstriton user-84=nativene user-85=innovat1 user-86=stuartge user-87=askhform user-88=alexadmin user-89=skyfirec user-90=firstred user-91=southlon user-92=highlegh user-93=firstrel user-94=clarkass user-95=costestimatorco user-96=coursemc user-97=opaiscyx user-98=jonhartl user-99=seftvta user-100=ultbcrra user-101=firstres user-102=connectedshoppin
Oct  1 15:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=thqkgnbz user-104=accooper user-105=ianrayne user-106=hubmaster user-107=carsinyo user-108=fetch user-109=milloyco user-110=gilpin user-111=elecleis user-112=musorguk user-113=megacards user-114=wilsonsw user-115=strathar user-116=sarafoundation user-117=atestord user-118=lakesan1 user-119=brmrjxl user-120=magichat user-121=lbhyisi user-122=hhdugcor user-123=dickemery123 user-124=ptkxhsbt user-125=martsblo user-126=ulsukarm user-127=athenare user-128=connect9 user-129=vantagep user-130=maflemin user-131=lbscrmod user-132=booff user-133=foundation user-134=markward user-135=stephani user-136=leereyn1 user-137=still user-138=agproduc user-139=spectrum user-140=theblack user-141=hodgesonweb user-142=jarvisin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 15:10:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 15:10:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:18 nativespace-cdp sudo[13861]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 15:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:19 nativespace-cdp sudo[13866]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ytK8a3OBYQ5oOW9N.~
Oct  1 15:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:19 nativespace-cdp sudo[13869]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ytK8a3OBYQ5oOW9N.~'
Oct  1 15:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:19 nativespace-cdp sudo[13872]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-ytK8a3OBYQ5oOW9N.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 15:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:19 nativespace-cdp sudo[13876]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 15:10:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:19 nativespace-cdp sudo[13882]: pam_unix(sudo:session): session closed for user root
Oct  1 15:10:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 15:10:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 15:10:40 nativespace-cdp sudo[14023]: pam_unix(sudo:session): session closed for user root
Oct  1 15:11:33 nativespace-cdp sshd[14207]: Connection closed by 159.100.136.21 port 41220 [preauth]
Oct  1 15:16:33 nativespace-cdp sshd[15630]: Connection closed by 159.100.136.21 port 51042 [preauth]
Oct  1 15:21:33 nativespace-cdp sshd[17060]: Connection closed by 159.100.136.21 port 60326 [preauth]
Oct  1 15:26:35 nativespace-cdp sshd[18360]: Connection closed by 159.100.136.21 port 41974 [preauth]
Oct  1 15:31:33 nativespace-cdp sshd[19740]: Connection closed by 159.100.136.21 port 51566 [preauth]
Oct  1 15:36:33 nativespace-cdp sshd[21186]: Connection closed by 159.100.136.21 port 33432 [preauth]
Oct  1 15:41:34 nativespace-cdp sshd[22290]: Connection closed by 159.100.136.21 port 42870 [preauth]
Oct  1 15:46:33 nativespace-cdp sshd[23380]: Connection closed by 159.100.136.21 port 52644 [preauth]
Oct  1 15:51:34 nativespace-cdp sshd[24623]: Connection closed by 159.100.136.21 port 33976 [preauth]
Oct  1 15:56:34 nativespace-cdp sshd[25719]: Connection closed by 159.100.136.21 port 43884 [preauth]
Oct  1 16:01:35 nativespace-cdp sshd[26898]: Connection closed by 159.100.136.21 port 53638 [preauth]
Oct  1 16:06:33 nativespace-cdp sshd[28201]: Connection closed by 159.100.136.21 port 35224 [preauth]
Oct  1 16:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 16:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:09:59 nativespace-cdp sudo[29027]: pam_unix(sudo:session): session closed for user root
Oct  1 16:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 16:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:09:59 nativespace-cdp sudo[29030]: pam_unix(sudo:session): session closed for user root
Oct  1 16:09:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 16:09:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:00 nativespace-cdp sudo[29034]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 16:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:00 nativespace-cdp sudo[29041]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 16:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:08 nativespace-cdp sudo[29044]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 16:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:08 nativespace-cdp sudo[29182]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 16:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:08 nativespace-cdp sudo[29185]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 16:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:08 nativespace-cdp sudo[29188]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 16:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:08 nativespace-cdp sudo[29191]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 16:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:08 nativespace-cdp sudo[29195]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 16:10:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:08 nativespace-cdp sudo[29198]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 16:10:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:11 nativespace-cdp sudo[29213]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 16:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:12 nativespace-cdp sudo[29218]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=stagingerris user-2=dancinggardener user-3=ladburyp user-4=kategilpin user-5=design user-6=oubpgvbx user-7=tstardom user-8=what user-9=havantho user-10=cath user-11=sketchy user-12=nvihkvu user-13=bakery user-14=crrtipdl user-15=sosevalu user-16=nove user-17=boldover user-18=outdoorc user-19=hodgsonmail user-20=ranxterc user-21=branko user-22=romaldki user-23=lucy user-24=attlebor user-25=onlycont user-26=chrisdal user-27=mcdermos user-28=david user-29=nbhavers user-30=careers user-31=tomandle user-32=jennimil user-33=hirefootballgame user-34=eugincou user-35=courseme user-36=cambria1 user-37=cathski user-38=reliable user-39=ninejimm user-40=cwsocial user-41=pugwash user-42=paulmca1 user-43=howardon user-44=isleofwi user-45=smrszyqg user-46=nomistakes user-47=hidden user-48=tigerlet
Oct  1 16:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=barbersh user-50=nscdp user-51=leftie user-52=foods user-53=fortunaz user-54=health2045 user-55=lkpier user-56=steakbridieme user-57=firstre5 user-58=donnychicago user-59=philmcph user-60=ctedorgu user-61=beauty user-62=darkstar user-63=eatspam user-64=dhyana user-65=fawcettd user-66=burydropin user-67=nsceres user-68=bwppodcast user-69=zebrapho user-70=steve user-71=asandcoc user-72=sibtoncc user-73=innovat1 user-74=stuartge user-75=askhform user-76=nativene user-77=alexadmin user-78=skyfirec user-79=bedfords user-80=newstoda user-81=ggaaorgu user-82=belle user-83=bemadonn user-84=nstriton user-85=brighto1 user-86=vivienn1 user-87=firstre2 user-88=oneoarco user-89=battlere user-90=accooper user-91=ianrayne user-92=connectedshoppin user-93=thqkgnbz user-94=milloyco user-95=gilpin user-96=elecleis user-97=hubmaster user-98=fetch user-99=carsinyo user-100=clarkass user-101=firstrel user-102=costestimatorco
Oct  1 16:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstred user-104=highlegh user-105=southlon user-106=ultbcrra user-107=seftvta user-108=jonhartl user-109=firstres user-110=opaiscyx user-111=coursemc user-112=hhdugcor user-113=lbhyisi user-114=magichat user-115=martsblo user-116=dickemery123 user-117=ptkxhsbt user-118=wilsonsw user-119=megacards user-120=musorguk user-121=lakesan1 user-122=brmrjxl user-123=strathar user-124=atestord user-125=sarafoundation user-126=agproduc user-127=still user-128=stephani user-129=leereyn1 user-130=jarvisin user-131=spectrum user-132=theblack user-133=hodgesonweb user-134=ulsukarm user-135=booff user-136=foundation user-137=markward user-138=vantagep user-139=athenare user-140=connect9 user-141=lbscrmod user-142=maflemin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 16:10:13 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 16:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:15 nativespace-cdp sudo[29226]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 16:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:16 nativespace-cdp sudo[29238]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-w0wtZL44NLpaWfdX.~
Oct  1 16:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:16 nativespace-cdp sudo[29242]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-w0wtZL44NLpaWfdX.~'
Oct  1 16:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:16 nativespace-cdp sudo[29245]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-w0wtZL44NLpaWfdX.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 16:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:16 nativespace-cdp sudo[29250]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 16:10:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:16 nativespace-cdp sudo[29253]: pam_unix(sudo:session): session closed for user root
Oct  1 16:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 16:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 16:10:29 nativespace-cdp sudo[29295]: pam_unix(sudo:session): session closed for user root
Oct  1 16:11:37 nativespace-cdp sshd[29593]: Connection closed by 159.100.136.21 port 44962 [preauth]
Oct  1 16:16:33 nativespace-cdp sshd[30688]: Connection closed by 159.100.136.21 port 54808 [preauth]
Oct  1 16:21:33 nativespace-cdp sshd[31960]: Connection closed by 159.100.136.21 port 36132 [preauth]
Oct  1 16:26:36 nativespace-cdp sshd[595]: Connection closed by 159.100.136.21 port 46084 [preauth]
Oct  1 16:31:33 nativespace-cdp sshd[1850]: Connection closed by 159.100.136.21 port 55688 [preauth]
Oct  1 16:33:21 nativespace-cdp sshd[2116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.14.191.252  user=root
Oct  1 16:33:21 nativespace-cdp sshd[2116]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:33:23 nativespace-cdp sshd[2116]: Failed password for root from 72.14.191.252 port 33302 ssh2
Oct  1 16:33:23 nativespace-cdp sshd[2116]: Received disconnect from 72.14.191.252 port 33302:11: Bye Bye [preauth]
Oct  1 16:33:23 nativespace-cdp sshd[2116]: Disconnected from 72.14.191.252 port 33302 [preauth]
Oct  1 16:33:58 nativespace-cdp sshd[2202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44  user=root
Oct  1 16:33:58 nativespace-cdp sshd[2202]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:34:00 nativespace-cdp sshd[2202]: Failed password for root from 77.52.19.44 port 57960 ssh2
Oct  1 16:34:00 nativespace-cdp sshd[2202]: Received disconnect from 77.52.19.44 port 57960:11: Bye Bye [preauth]
Oct  1 16:34:00 nativespace-cdp sshd[2202]: Disconnected from 77.52.19.44 port 57960 [preauth]
Oct  1 16:36:33 nativespace-cdp sshd[3097]: Connection closed by 159.100.136.21 port 37216 [preauth]
Oct  1 16:37:02 nativespace-cdp sshd[3193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.194.211  user=root
Oct  1 16:37:02 nativespace-cdp sshd[3193]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:37:04 nativespace-cdp sshd[3193]: Failed password for root from 38.242.194.211 port 41380 ssh2
Oct  1 16:37:04 nativespace-cdp sshd[3193]: Received disconnect from 38.242.194.211 port 41380:11: Bye Bye [preauth]
Oct  1 16:37:04 nativespace-cdp sshd[3193]: Disconnected from 38.242.194.211 port 41380 [preauth]
Oct  1 16:37:10 nativespace-cdp sshd[3219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.85.5  user=root
Oct  1 16:37:10 nativespace-cdp sshd[3219]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:37:12 nativespace-cdp sshd[3219]: Failed password for root from 5.42.85.5 port 60078 ssh2
Oct  1 16:37:12 nativespace-cdp sshd[3219]: Received disconnect from 5.42.85.5 port 60078:11: Bye Bye [preauth]
Oct  1 16:37:12 nativespace-cdp sshd[3219]: Disconnected from 5.42.85.5 port 60078 [preauth]
Oct  1 16:37:59 nativespace-cdp sshd[3385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.103.245  user=root
Oct  1 16:37:59 nativespace-cdp sshd[3385]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:38:01 nativespace-cdp sshd[3377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.14.191.252  user=root
Oct  1 16:38:01 nativespace-cdp sshd[3377]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:38:02 nativespace-cdp sshd[3385]: Failed password for root from 51.195.103.245 port 55100 ssh2
Oct  1 16:38:02 nativespace-cdp sshd[3385]: Received disconnect from 51.195.103.245 port 55100:11: Bye Bye [preauth]
Oct  1 16:38:02 nativespace-cdp sshd[3385]: Disconnected from 51.195.103.245 port 55100 [preauth]
Oct  1 16:38:03 nativespace-cdp sshd[3377]: Failed password for root from 72.14.191.252 port 56382 ssh2
Oct  1 16:38:03 nativespace-cdp sshd[3377]: Received disconnect from 72.14.191.252 port 56382:11: Bye Bye [preauth]
Oct  1 16:38:03 nativespace-cdp sshd[3377]: Disconnected from 72.14.191.252 port 56382 [preauth]
Oct  1 16:38:39 nativespace-cdp sshd[3541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.14.191.252  user=root
Oct  1 16:38:39 nativespace-cdp sshd[3541]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:38:40 nativespace-cdp sshd[3541]: Failed password for root from 72.14.191.252 port 52446 ssh2
Oct  1 16:38:43 nativespace-cdp sshd[3541]: Received disconnect from 72.14.191.252 port 52446:11: Bye Bye [preauth]
Oct  1 16:38:43 nativespace-cdp sshd[3541]: Disconnected from 72.14.191.252 port 52446 [preauth]
Oct  1 16:38:43 nativespace-cdp sshd[3575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.103.245  user=root
Oct  1 16:38:43 nativespace-cdp sshd[3575]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:38:46 nativespace-cdp sshd[3575]: Failed password for root from 51.195.103.245 port 38488 ssh2
Oct  1 16:38:46 nativespace-cdp sshd[3575]: Received disconnect from 51.195.103.245 port 38488:11: Bye Bye [preauth]
Oct  1 16:38:46 nativespace-cdp sshd[3575]: Disconnected from 51.195.103.245 port 38488 [preauth]
Oct  1 16:38:59 nativespace-cdp sshd[3628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44  user=root
Oct  1 16:38:59 nativespace-cdp sshd[3628]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:39:01 nativespace-cdp sshd[3628]: Failed password for root from 77.52.19.44 port 49394 ssh2
Oct  1 16:39:03 nativespace-cdp sshd[3628]: Received disconnect from 77.52.19.44 port 49394:11: Bye Bye [preauth]
Oct  1 16:39:03 nativespace-cdp sshd[3628]: Disconnected from 77.52.19.44 port 49394 [preauth]
Oct  1 16:39:20 nativespace-cdp sshd[3702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.14.191.252  user=root
Oct  1 16:39:20 nativespace-cdp sshd[3702]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:39:20 nativespace-cdp sshd[3705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.103.245  user=root
Oct  1 16:39:20 nativespace-cdp sshd[3705]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:39:22 nativespace-cdp sshd[3702]: Failed password for root from 72.14.191.252 port 55222 ssh2
Oct  1 16:39:22 nativespace-cdp sshd[3702]: Received disconnect from 72.14.191.252 port 55222:11: Bye Bye [preauth]
Oct  1 16:39:22 nativespace-cdp sshd[3702]: Disconnected from 72.14.191.252 port 55222 [preauth]
Oct  1 16:39:22 nativespace-cdp sshd[3705]: Failed password for root from 51.195.103.245 port 48998 ssh2
Oct  1 16:39:22 nativespace-cdp sshd[3705]: Received disconnect from 51.195.103.245 port 48998:11: Bye Bye [preauth]
Oct  1 16:39:22 nativespace-cdp sshd[3705]: Disconnected from 51.195.103.245 port 48998 [preauth]
Oct  1 16:39:38 nativespace-cdp sshd[3867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44  user=root
Oct  1 16:39:38 nativespace-cdp sshd[3867]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:39:40 nativespace-cdp sshd[3867]: Failed password for root from 77.52.19.44 port 32782 ssh2
Oct  1 16:39:40 nativespace-cdp sshd[3867]: Received disconnect from 77.52.19.44 port 32782:11: Bye Bye [preauth]
Oct  1 16:39:40 nativespace-cdp sshd[3867]: Disconnected from 77.52.19.44 port 32782 [preauth]
Oct  1 16:39:57 nativespace-cdp sshd[3911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.103.245  user=root
Oct  1 16:39:57 nativespace-cdp sshd[3911]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:39:59 nativespace-cdp sshd[3911]: Failed password for root from 51.195.103.245 port 53774 ssh2
Oct  1 16:39:59 nativespace-cdp sshd[3911]: Received disconnect from 51.195.103.245 port 53774:11: Bye Bye [preauth]
Oct  1 16:39:59 nativespace-cdp sshd[3911]: Disconnected from 51.195.103.245 port 53774 [preauth]
Oct  1 16:40:08 nativespace-cdp sshd[4036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.14.191.252  user=root
Oct  1 16:40:08 nativespace-cdp sshd[4036]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:40:10 nativespace-cdp sshd[4036]: Failed password for root from 72.14.191.252 port 51902 ssh2
Oct  1 16:40:10 nativespace-cdp sshd[4036]: Received disconnect from 72.14.191.252 port 51902:11: Bye Bye [preauth]
Oct  1 16:40:10 nativespace-cdp sshd[4036]: Disconnected from 72.14.191.252 port 51902 [preauth]
Oct  1 16:40:16 nativespace-cdp sshd[4080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44  user=root
Oct  1 16:40:16 nativespace-cdp sshd[4080]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:40:18 nativespace-cdp sshd[4080]: Failed password for root from 77.52.19.44 port 44408 ssh2
Oct  1 16:40:18 nativespace-cdp sshd[4080]: Received disconnect from 77.52.19.44 port 44408:11: Bye Bye [preauth]
Oct  1 16:40:18 nativespace-cdp sshd[4080]: Disconnected from 77.52.19.44 port 44408 [preauth]
Oct  1 16:40:34 nativespace-cdp sshd[4118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.103.245  user=root
Oct  1 16:40:34 nativespace-cdp sshd[4118]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:40:36 nativespace-cdp sshd[4118]: Failed password for root from 51.195.103.245 port 35448 ssh2
Oct  1 16:40:36 nativespace-cdp sshd[4118]: Received disconnect from 51.195.103.245 port 35448:11: Bye Bye [preauth]
Oct  1 16:40:36 nativespace-cdp sshd[4118]: Disconnected from 51.195.103.245 port 35448 [preauth]
Oct  1 16:40:44 nativespace-cdp sshd[4155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.85.5  user=root
Oct  1 16:40:44 nativespace-cdp sshd[4155]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:40:46 nativespace-cdp sshd[4155]: Failed password for root from 5.42.85.5 port 52852 ssh2
Oct  1 16:40:46 nativespace-cdp sshd[4155]: Received disconnect from 5.42.85.5 port 52852:11: Bye Bye [preauth]
Oct  1 16:40:46 nativespace-cdp sshd[4155]: Disconnected from 5.42.85.5 port 52852 [preauth]
Oct  1 16:40:46 nativespace-cdp sshd[4166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.14.191.252  user=root
Oct  1 16:40:46 nativespace-cdp sshd[4166]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:40:48 nativespace-cdp sshd[4166]: Failed password for root from 72.14.191.252 port 59898 ssh2
Oct  1 16:40:48 nativespace-cdp sshd[4166]: Received disconnect from 72.14.191.252 port 59898:11: Bye Bye [preauth]
Oct  1 16:40:48 nativespace-cdp sshd[4166]: Disconnected from 72.14.191.252 port 59898 [preauth]
Oct  1 16:40:58 nativespace-cdp sshd[4249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44  user=root
Oct  1 16:40:58 nativespace-cdp sshd[4249]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:41:00 nativespace-cdp sshd[4249]: Failed password for root from 77.52.19.44 port 56040 ssh2
Oct  1 16:41:00 nativespace-cdp sshd[4249]: Received disconnect from 77.52.19.44 port 56040:11: Bye Bye [preauth]
Oct  1 16:41:00 nativespace-cdp sshd[4249]: Disconnected from 77.52.19.44 port 56040 [preauth]
Oct  1 16:41:11 nativespace-cdp sshd[4327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.103.245  user=root
Oct  1 16:41:11 nativespace-cdp sshd[4327]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:41:12 nativespace-cdp sshd[4327]: Failed password for root from 51.195.103.245 port 35574 ssh2
Oct  1 16:41:12 nativespace-cdp sshd[4327]: Received disconnect from 51.195.103.245 port 35574:11: Bye Bye [preauth]
Oct  1 16:41:12 nativespace-cdp sshd[4327]: Disconnected from 51.195.103.245 port 35574 [preauth]
Oct  1 16:41:13 nativespace-cdp sshd[4329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.194.211  user=root
Oct  1 16:41:13 nativespace-cdp sshd[4329]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:41:15 nativespace-cdp sshd[4329]: Failed password for root from 38.242.194.211 port 57894 ssh2
Oct  1 16:41:15 nativespace-cdp sshd[4329]: Received disconnect from 38.242.194.211 port 57894:11: Bye Bye [preauth]
Oct  1 16:41:15 nativespace-cdp sshd[4329]: Disconnected from 38.242.194.211 port 57894 [preauth]
Oct  1 16:41:25 nativespace-cdp sshd[4350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.85.5  user=root
Oct  1 16:41:25 nativespace-cdp sshd[4350]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:41:27 nativespace-cdp sshd[4350]: Failed password for root from 5.42.85.5 port 49988 ssh2
Oct  1 16:41:27 nativespace-cdp sshd[4350]: Received disconnect from 5.42.85.5 port 49988:11: Bye Bye [preauth]
Oct  1 16:41:27 nativespace-cdp sshd[4350]: Disconnected from 5.42.85.5 port 49988 [preauth]
Oct  1 16:41:31 nativespace-cdp sshd[4407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.14.191.252  user=root
Oct  1 16:41:31 nativespace-cdp sshd[4407]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:41:31 nativespace-cdp sshd[4413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44  user=root
Oct  1 16:41:31 nativespace-cdp sshd[4413]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:41:33 nativespace-cdp sshd[4407]: Failed password for root from 72.14.191.252 port 40080 ssh2
Oct  1 16:41:33 nativespace-cdp sshd[4413]: Failed password for root from 77.52.19.44 port 39422 ssh2
Oct  1 16:41:35 nativespace-cdp sshd[4420]: Connection closed by 159.100.136.21 port 46792 [preauth]
Oct  1 16:41:35 nativespace-cdp sshd[4407]: Received disconnect from 72.14.191.252 port 40080:11: Bye Bye [preauth]
Oct  1 16:41:35 nativespace-cdp sshd[4407]: Disconnected from 72.14.191.252 port 40080 [preauth]
Oct  1 16:41:35 nativespace-cdp sshd[4413]: Received disconnect from 77.52.19.44 port 39422:11: Bye Bye [preauth]
Oct  1 16:41:35 nativespace-cdp sshd[4413]: Disconnected from 77.52.19.44 port 39422 [preauth]
Oct  1 16:41:47 nativespace-cdp sshd[4461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.103.245  user=root
Oct  1 16:41:47 nativespace-cdp sshd[4461]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:41:49 nativespace-cdp sshd[4461]: Failed password for root from 51.195.103.245 port 54478 ssh2
Oct  1 16:41:49 nativespace-cdp sshd[4461]: Received disconnect from 51.195.103.245 port 54478:11: Bye Bye [preauth]
Oct  1 16:41:49 nativespace-cdp sshd[4461]: Disconnected from 51.195.103.245 port 54478 [preauth]
Oct  1 16:42:00 nativespace-cdp sshd[4505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.85.5  user=root
Oct  1 16:42:00 nativespace-cdp sshd[4505]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:42:02 nativespace-cdp sshd[4508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.194.211  user=root
Oct  1 16:42:02 nativespace-cdp sshd[4508]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:42:02 nativespace-cdp sshd[4505]: Failed password for root from 5.42.85.5 port 42622 ssh2
Oct  1 16:42:02 nativespace-cdp sshd[4505]: Received disconnect from 5.42.85.5 port 42622:11: Bye Bye [preauth]
Oct  1 16:42:02 nativespace-cdp sshd[4505]: Disconnected from 5.42.85.5 port 42622 [preauth]
Oct  1 16:42:03 nativespace-cdp sshd[4508]: Failed password for root from 38.242.194.211 port 41820 ssh2
Oct  1 16:42:04 nativespace-cdp sshd[4508]: Received disconnect from 38.242.194.211 port 41820:11: Bye Bye [preauth]
Oct  1 16:42:04 nativespace-cdp sshd[4508]: Disconnected from 38.242.194.211 port 41820 [preauth]
Oct  1 16:42:08 nativespace-cdp sshd[4563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44  user=root
Oct  1 16:42:08 nativespace-cdp sshd[4563]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:42:10 nativespace-cdp sshd[4563]: Failed password for root from 77.52.19.44 port 51050 ssh2
Oct  1 16:42:10 nativespace-cdp sshd[4563]: Received disconnect from 77.52.19.44 port 51050:11: Bye Bye [preauth]
Oct  1 16:42:10 nativespace-cdp sshd[4563]: Disconnected from 77.52.19.44 port 51050 [preauth]
Oct  1 16:42:18 nativespace-cdp sshd[4594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.14.191.252  user=root
Oct  1 16:42:18 nativespace-cdp sshd[4594]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:42:20 nativespace-cdp sshd[4594]: Failed password for root from 72.14.191.252 port 50788 ssh2
Oct  1 16:42:20 nativespace-cdp sshd[4594]: Received disconnect from 72.14.191.252 port 50788:11: Bye Bye [preauth]
Oct  1 16:42:20 nativespace-cdp sshd[4594]: Disconnected from 72.14.191.252 port 50788 [preauth]
Oct  1 16:42:24 nativespace-cdp sshd[4660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.103.245  user=root
Oct  1 16:42:24 nativespace-cdp sshd[4660]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:42:27 nativespace-cdp sshd[4660]: Failed password for root from 51.195.103.245 port 57808 ssh2
Oct  1 16:42:28 nativespace-cdp sshd[4660]: Received disconnect from 51.195.103.245 port 57808:11: Bye Bye [preauth]
Oct  1 16:42:28 nativespace-cdp sshd[4660]: Disconnected from 51.195.103.245 port 57808 [preauth]
Oct  1 16:42:40 nativespace-cdp sshd[4704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.85.5  user=root
Oct  1 16:42:40 nativespace-cdp sshd[4704]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:42:42 nativespace-cdp sshd[4704]: Failed password for root from 5.42.85.5 port 37304 ssh2
Oct  1 16:42:42 nativespace-cdp sshd[4704]: Received disconnect from 5.42.85.5 port 37304:11: Bye Bye [preauth]
Oct  1 16:42:42 nativespace-cdp sshd[4704]: Disconnected from 5.42.85.5 port 37304 [preauth]
Oct  1 16:42:46 nativespace-cdp sshd[4720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44  user=root
Oct  1 16:42:46 nativespace-cdp sshd[4720]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:42:48 nativespace-cdp sshd[4720]: Failed password for root from 77.52.19.44 port 34442 ssh2
Oct  1 16:42:48 nativespace-cdp sshd[4720]: Received disconnect from 77.52.19.44 port 34442:11: Bye Bye [preauth]
Oct  1 16:42:48 nativespace-cdp sshd[4720]: Disconnected from 77.52.19.44 port 34442 [preauth]
Oct  1 16:42:53 nativespace-cdp sshd[4733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.194.211  user=root
Oct  1 16:42:53 nativespace-cdp sshd[4733]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:42:56 nativespace-cdp sshd[4733]: Failed password for root from 38.242.194.211 port 45676 ssh2
Oct  1 16:42:56 nativespace-cdp sshd[4733]: Received disconnect from 38.242.194.211 port 45676:11: Bye Bye [preauth]
Oct  1 16:42:56 nativespace-cdp sshd[4733]: Disconnected from 38.242.194.211 port 45676 [preauth]
Oct  1 16:43:06 nativespace-cdp sshd[4783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.103.245  user=root
Oct  1 16:43:06 nativespace-cdp sshd[4783]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:43:08 nativespace-cdp sshd[4783]: Failed password for root from 51.195.103.245 port 43634 ssh2
Oct  1 16:43:08 nativespace-cdp sshd[4783]: Received disconnect from 51.195.103.245 port 43634:11: Bye Bye [preauth]
Oct  1 16:43:08 nativespace-cdp sshd[4783]: Disconnected from 51.195.103.245 port 43634 [preauth]
Oct  1 16:43:08 nativespace-cdp sshd[4786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.14.191.252  user=root
Oct  1 16:43:08 nativespace-cdp sshd[4786]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:43:10 nativespace-cdp sshd[4786]: Failed password for root from 72.14.191.252 port 52080 ssh2
Oct  1 16:43:10 nativespace-cdp sshd[4786]: Received disconnect from 72.14.191.252 port 52080:11: Bye Bye [preauth]
Oct  1 16:43:10 nativespace-cdp sshd[4786]: Disconnected from 72.14.191.252 port 52080 [preauth]
Oct  1 16:43:20 nativespace-cdp sshd[4811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.85.5  user=root
Oct  1 16:43:20 nativespace-cdp sshd[4811]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:43:22 nativespace-cdp sshd[4811]: Failed password for root from 5.42.85.5 port 35028 ssh2
Oct  1 16:43:22 nativespace-cdp sshd[4811]: Received disconnect from 5.42.85.5 port 35028:11: Bye Bye [preauth]
Oct  1 16:43:22 nativespace-cdp sshd[4811]: Disconnected from 5.42.85.5 port 35028 [preauth]
Oct  1 16:43:23 nativespace-cdp sshd[4819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44  user=root
Oct  1 16:43:23 nativespace-cdp sshd[4819]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:43:25 nativespace-cdp sshd[4819]: Failed password for root from 77.52.19.44 port 46068 ssh2
Oct  1 16:43:27 nativespace-cdp sshd[4819]: Received disconnect from 77.52.19.44 port 46068:11: Bye Bye [preauth]
Oct  1 16:43:27 nativespace-cdp sshd[4819]: Disconnected from 77.52.19.44 port 46068 [preauth]
Oct  1 16:43:41 nativespace-cdp sshd[4878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.103.245  user=root
Oct  1 16:43:41 nativespace-cdp sshd[4878]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:43:42 nativespace-cdp sshd[4872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.194.211  user=root
Oct  1 16:43:42 nativespace-cdp sshd[4872]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:43:44 nativespace-cdp sshd[4878]: Failed password for root from 51.195.103.245 port 45648 ssh2
Oct  1 16:43:44 nativespace-cdp sshd[4872]: Failed password for root from 38.242.194.211 port 49046 ssh2
Oct  1 16:43:46 nativespace-cdp sshd[4872]: Received disconnect from 38.242.194.211 port 49046:11: Bye Bye [preauth]
Oct  1 16:43:46 nativespace-cdp sshd[4872]: Disconnected from 38.242.194.211 port 49046 [preauth]
Oct  1 16:43:47 nativespace-cdp sshd[4878]: Received disconnect from 51.195.103.245 port 45648:11: Bye Bye [preauth]
Oct  1 16:43:47 nativespace-cdp sshd[4878]: Disconnected from 51.195.103.245 port 45648 [preauth]
Oct  1 16:43:52 nativespace-cdp sshd[4920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.14.191.252  user=root
Oct  1 16:43:52 nativespace-cdp sshd[4920]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:43:55 nativespace-cdp sshd[4920]: Failed password for root from 72.14.191.252 port 50882 ssh2
Oct  1 16:43:55 nativespace-cdp sshd[4920]: Received disconnect from 72.14.191.252 port 50882:11: Bye Bye [preauth]
Oct  1 16:43:55 nativespace-cdp sshd[4920]: Disconnected from 72.14.191.252 port 50882 [preauth]
Oct  1 16:43:59 nativespace-cdp sshd[4939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.85.5  user=root
Oct  1 16:43:59 nativespace-cdp sshd[4939]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:44:02 nativespace-cdp sshd[4939]: Failed password for root from 5.42.85.5 port 53788 ssh2
Oct  1 16:44:03 nativespace-cdp sshd[4939]: Received disconnect from 5.42.85.5 port 53788:11: Bye Bye [preauth]
Oct  1 16:44:03 nativespace-cdp sshd[4939]: Disconnected from 5.42.85.5 port 53788 [preauth]
Oct  1 16:44:03 nativespace-cdp sshd[4958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.52.19.44  user=root
Oct  1 16:44:03 nativespace-cdp sshd[4958]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:44:05 nativespace-cdp sshd[4958]: Failed password for root from 77.52.19.44 port 57690 ssh2
Oct  1 16:44:05 nativespace-cdp sshd[4958]: Received disconnect from 77.52.19.44 port 57690:11: Bye Bye [preauth]
Oct  1 16:44:05 nativespace-cdp sshd[4958]: Disconnected from 77.52.19.44 port 57690 [preauth]
Oct  1 16:44:29 nativespace-cdp sshd[5100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.194.211  user=root
Oct  1 16:44:29 nativespace-cdp sshd[5100]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:44:30 nativespace-cdp sshd[5100]: Failed password for root from 38.242.194.211 port 46082 ssh2
Oct  1 16:44:31 nativespace-cdp sshd[5100]: Received disconnect from 38.242.194.211 port 46082:11: Bye Bye [preauth]
Oct  1 16:44:31 nativespace-cdp sshd[5100]: Disconnected from 38.242.194.211 port 46082 [preauth]
Oct  1 16:44:37 nativespace-cdp sshd[5183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.85.5  user=root
Oct  1 16:44:37 nativespace-cdp sshd[5183]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:44:39 nativespace-cdp sshd[5183]: Failed password for root from 5.42.85.5 port 53664 ssh2
Oct  1 16:44:43 nativespace-cdp sshd[5183]: Received disconnect from 5.42.85.5 port 53664:11: Bye Bye [preauth]
Oct  1 16:44:43 nativespace-cdp sshd[5183]: Disconnected from 5.42.85.5 port 53664 [preauth]
Oct  1 16:45:14 nativespace-cdp sshd[5447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.194.211  user=root
Oct  1 16:45:14 nativespace-cdp sshd[5447]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:45:16 nativespace-cdp sshd[5447]: Failed password for root from 38.242.194.211 port 58106 ssh2
Oct  1 16:45:19 nativespace-cdp sshd[5447]: Received disconnect from 38.242.194.211 port 58106:11: Bye Bye [preauth]
Oct  1 16:45:19 nativespace-cdp sshd[5447]: Disconnected from 38.242.194.211 port 58106 [preauth]
Oct  1 16:45:19 nativespace-cdp sshd[5459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.85.5  user=root
Oct  1 16:45:19 nativespace-cdp sshd[5459]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:45:22 nativespace-cdp sshd[5459]: Failed password for root from 5.42.85.5 port 36962 ssh2
Oct  1 16:45:22 nativespace-cdp sshd[5459]: Received disconnect from 5.42.85.5 port 36962:11: Bye Bye [preauth]
Oct  1 16:45:22 nativespace-cdp sshd[5459]: Disconnected from 5.42.85.5 port 36962 [preauth]
Oct  1 16:46:03 nativespace-cdp sshd[5666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.85.5  user=root
Oct  1 16:46:03 nativespace-cdp sshd[5666]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:46:03 nativespace-cdp sshd[5661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.194.211  user=root
Oct  1 16:46:03 nativespace-cdp sshd[5661]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:46:04 nativespace-cdp sshd[5666]: Failed password for root from 5.42.85.5 port 59894 ssh2
Oct  1 16:46:04 nativespace-cdp sshd[5666]: Received disconnect from 5.42.85.5 port 59894:11: Bye Bye [preauth]
Oct  1 16:46:04 nativespace-cdp sshd[5666]: Disconnected from 5.42.85.5 port 59894 [preauth]
Oct  1 16:46:04 nativespace-cdp sshd[5661]: Failed password for root from 38.242.194.211 port 58826 ssh2
Oct  1 16:46:04 nativespace-cdp sshd[5661]: Received disconnect from 38.242.194.211 port 58826:11: Bye Bye [preauth]
Oct  1 16:46:04 nativespace-cdp sshd[5661]: Disconnected from 38.242.194.211 port 58826 [preauth]
Oct  1 16:46:36 nativespace-cdp sshd[5770]: Connection closed by 159.100.136.21 port 56720 [preauth]
Oct  1 16:46:48 nativespace-cdp sshd[5820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.194.211  user=root
Oct  1 16:46:48 nativespace-cdp sshd[5820]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:46:50 nativespace-cdp sshd[5820]: Failed password for root from 38.242.194.211 port 59198 ssh2
Oct  1 16:46:50 nativespace-cdp sshd[5820]: Received disconnect from 38.242.194.211 port 59198:11: Bye Bye [preauth]
Oct  1 16:46:50 nativespace-cdp sshd[5820]: Disconnected from 38.242.194.211 port 59198 [preauth]
Oct  1 16:47:36 nativespace-cdp sshd[5959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.194.211  user=root
Oct  1 16:47:36 nativespace-cdp sshd[5959]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 16:47:38 nativespace-cdp sshd[5959]: Failed password for root from 38.242.194.211 port 42256 ssh2
Oct  1 16:47:38 nativespace-cdp sshd[5959]: Received disconnect from 38.242.194.211 port 42256:11: Bye Bye [preauth]
Oct  1 16:47:38 nativespace-cdp sshd[5959]: Disconnected from 38.242.194.211 port 42256 [preauth]
Oct  1 16:51:33 nativespace-cdp sshd[7171]: Connection closed by 159.100.136.21 port 37826 [preauth]
Oct  1 16:56:33 nativespace-cdp sshd[8206]: Connection closed by 159.100.136.21 port 46740 [preauth]
Oct  1 17:01:33 nativespace-cdp sshd[9552]: Connection closed by 159.100.136.21 port 56676 [preauth]
Oct  1 17:06:37 nativespace-cdp sshd[11081]: Connection closed by 159.100.136.21 port 38520 [preauth]
Oct  1 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:09:58 nativespace-cdp sudo[11876]: pam_unix(sudo:session): session closed for user root
Oct  1 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:09:58 nativespace-cdp sudo[11880]: pam_unix(sudo:session): session closed for user root
Oct  1 17:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 17:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:00 nativespace-cdp sudo[11883]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:00 nativespace-cdp sudo[11890]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 17:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:20 nativespace-cdp sudo[11893]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 17:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:20 nativespace-cdp sudo[12112]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 17:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:20 nativespace-cdp sudo[12116]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 17:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:20 nativespace-cdp sudo[12119]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 17:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:20 nativespace-cdp sudo[12123]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 17:10:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:20 nativespace-cdp sudo[12126]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 17:10:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:21 nativespace-cdp sudo[12129]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 17:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:28 nativespace-cdp sudo[12149]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 17:10:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:29 nativespace-cdp sudo[12153]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ianrayne user-2=accooper user-3=thqkgnbz user-4=connectedshoppin user-5=elecleis user-6=milloyco user-7=gilpin user-8=carsinyo user-9=fetch user-10=hubmaster user-11=costestimatorco user-12=firstrel user-13=clarkass user-14=southlon user-15=highlegh user-16=firstred user-17=firstres user-18=seftvta user-19=jonhartl user-20=ultbcrra user-21=opaiscyx user-22=coursemc user-23=stuartge user-24=askhform user-25=innovat1 user-26=nativene user-27=alexadmin user-28=skyfirec user-29=bedfords user-30=bemadonn user-31=ggaaorgu user-32=belle user-33=newstoda user-34=brighto1 user-35=nstriton user-36=battlere user-37=oneoarco user-38=firstre2 user-39=vivienn1 user-40=still user-41=agproduc user-42=leereyn1 user-43=stephani user-44=jarvisin user-45=theblack user-46=hodgesonweb user-47=spectrum
Oct  1 17:10:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=markward user-50=booff user-51=foundation user-52=maflemin user-53=lbscrmod user-54=connect9 user-55=athenare user-56=vantagep user-57=lbhyisi user-58=hhdugcor user-59=magichat user-60=martsblo user-61=ptkxhsbt user-62=dickemery123 user-63=wilsonsw user-64=musorguk user-65=megacards user-66=brmrjxl user-67=lakesan1 user-68=sarafoundation user-69=atestord user-70=strathar user-71=branko user-72=outdoorc user-73=hodgsonmail user-74=ranxterc user-75=romaldki user-76=attlebor user-77=lucy user-78=onlycont user-79=mcdermos user-80=chrisdal user-81=careers user-82=nbhavers user-83=david user-84=tomandle user-85=jennimil user-86=kategilpin user-87=ladburyp user-88=dancinggardener user-89=stagingerris user-90=design user-91=what user-92=oubpgvbx user-93=tstardom user-94=nvihkvu user-95=sketchy user-96=cath user-97=havantho user-98=sosevalu user-99=crrtipdl user-100=bakery user-101=nove
Oct  1 17:10:29 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=boldover user-103=eatspam user-104=darkstar user-105=beauty user-106=dhyana user-107=burydropin user-108=fawcettd user-109=nsceres user-110=zebrapho user-111=bwppodcast user-112=steve user-113=sibtoncc user-114=asandcoc user-115=hirefootballgame user-116=courseme user-117=eugincou user-118=ninejimm user-119=reliable user-120=cathski user-121=cambria1 user-122=howardon user-123=pugwash user-124=paulmca1 user-125=cwsocial user-126=isleofwi user-127=smrszyqg user-128=tigerlet user-129=barbersh user-130=hidden user-131=nomistakes user-132=fortunaz user-133=health2045 user-134=leftie user-135=foods user-136=nscdp user-137=philmcph user-138=ctedorgu user-139=donnychicago user-140=firstre5 user-141=steakbridieme user-142=lkpier feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 17:10:29 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 17:10:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:30 nativespace-cdp sudo[12161]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 17:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:31 nativespace-cdp sudo[12173]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sYhH46xN9UHiObBa.~
Oct  1 17:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:31 nativespace-cdp sudo[12179]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sYhH46xN9UHiObBa.~'
Oct  1 17:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:31 nativespace-cdp sudo[12182]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-sYhH46xN9UHiObBa.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 17:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:31 nativespace-cdp sudo[12188]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 17:10:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:31 nativespace-cdp sudo[12192]: pam_unix(sudo:session): session closed for user root
Oct  1 17:10:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 17:10:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 17:10:33 nativespace-cdp sudo[12212]: pam_unix(sudo:session): session closed for user root
Oct  1 17:11:33 nativespace-cdp sshd[12416]: Connection closed by 159.100.136.21 port 48154 [preauth]
Oct  1 17:16:34 nativespace-cdp sshd[13601]: Connection closed by 159.100.136.21 port 57778 [preauth]
Oct  1 17:21:34 nativespace-cdp sshd[14907]: Connection closed by 159.100.136.21 port 38228 [preauth]
Oct  1 17:26:15 nativespace-cdp sshd[15885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.10.190  user=root
Oct  1 17:26:15 nativespace-cdp sshd[15885]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:26:16 nativespace-cdp sshd[15892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.166.11  user=root
Oct  1 17:26:16 nativespace-cdp sshd[15892]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:26:17 nativespace-cdp sshd[15885]: Failed password for root from 222.90.10.190 port 36936 ssh2
Oct  1 17:26:17 nativespace-cdp sshd[15885]: Received disconnect from 222.90.10.190 port 36936:11: Bye Bye [preauth]
Oct  1 17:26:17 nativespace-cdp sshd[15885]: Disconnected from 222.90.10.190 port 36936 [preauth]
Oct  1 17:26:18 nativespace-cdp sshd[15892]: Failed password for root from 52.161.166.11 port 53852 ssh2
Oct  1 17:26:24 nativespace-cdp sshd[15892]: Received disconnect from 52.161.166.11 port 53852:11: Bye Bye [preauth]
Oct  1 17:26:24 nativespace-cdp sshd[15892]: Disconnected from 52.161.166.11 port 53852 [preauth]
Oct  1 17:26:27 nativespace-cdp sshd[15930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.233.163.70  user=root
Oct  1 17:26:27 nativespace-cdp sshd[15930]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:26:29 nativespace-cdp sshd[15930]: Failed password for root from 172.233.163.70 port 47586 ssh2
Oct  1 17:26:30 nativespace-cdp sshd[15930]: Received disconnect from 172.233.163.70 port 47586:11: Bye Bye [preauth]
Oct  1 17:26:30 nativespace-cdp sshd[15930]: Disconnected from 172.233.163.70 port 47586 [preauth]
Oct  1 17:26:33 nativespace-cdp sshd[15960]: Connection closed by 159.100.136.21 port 47734 [preauth]
Oct  1 17:27:00 nativespace-cdp sshd[16017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.113.116.40  user=root
Oct  1 17:27:00 nativespace-cdp sshd[16017]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:27:02 nativespace-cdp sshd[16017]: Failed password for root from 212.113.116.40 port 54184 ssh2
Oct  1 17:27:02 nativespace-cdp sshd[16017]: Received disconnect from 212.113.116.40 port 54184:11: Bye Bye [preauth]
Oct  1 17:27:02 nativespace-cdp sshd[16017]: Disconnected from 212.113.116.40 port 54184 [preauth]
Oct  1 17:28:50 nativespace-cdp sshd[16332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.156  user=root
Oct  1 17:28:50 nativespace-cdp sshd[16332]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:28:52 nativespace-cdp sshd[16332]: Failed password for root from 139.59.46.156 port 56248 ssh2
Oct  1 17:28:52 nativespace-cdp sshd[16332]: Received disconnect from 139.59.46.156 port 56248:11: Bye Bye [preauth]
Oct  1 17:28:52 nativespace-cdp sshd[16332]: Disconnected from 139.59.46.156 port 56248 [preauth]
Oct  1 17:29:18 nativespace-cdp sshd[16434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.59.118  user=root
Oct  1 17:29:18 nativespace-cdp sshd[16434]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:29:20 nativespace-cdp sshd[16434]: Failed password for root from 43.159.59.118 port 47226 ssh2
Oct  1 17:29:23 nativespace-cdp sshd[16434]: Received disconnect from 43.159.59.118 port 47226:11: Bye Bye [preauth]
Oct  1 17:29:23 nativespace-cdp sshd[16434]: Disconnected from 43.159.59.118 port 47226 [preauth]
Oct  1 17:29:47 nativespace-cdp sshd[16524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.82.235  user=root
Oct  1 17:29:47 nativespace-cdp sshd[16524]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:29:49 nativespace-cdp sshd[16524]: Failed password for root from 5.42.82.235 port 49472 ssh2
Oct  1 17:29:49 nativespace-cdp sshd[16524]: Received disconnect from 5.42.82.235 port 49472:11: Bye Bye [preauth]
Oct  1 17:29:49 nativespace-cdp sshd[16524]: Disconnected from 5.42.82.235 port 49472 [preauth]
Oct  1 17:30:35 nativespace-cdp sshd[16915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.187.160.26  user=root
Oct  1 17:30:35 nativespace-cdp sshd[16915]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:30:37 nativespace-cdp sshd[16915]: Failed password for root from 103.187.160.26 port 43308 ssh2
Oct  1 17:30:37 nativespace-cdp sshd[16915]: Received disconnect from 103.187.160.26 port 43308:11: Bye Bye [preauth]
Oct  1 17:30:37 nativespace-cdp sshd[16915]: Disconnected from 103.187.160.26 port 43308 [preauth]
Oct  1 17:30:59 nativespace-cdp sshd[17039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.171.206.63  user=root
Oct  1 17:30:59 nativespace-cdp sshd[17039]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:31:01 nativespace-cdp sshd[17039]: Failed password for root from 70.171.206.63 port 48586 ssh2
Oct  1 17:31:01 nativespace-cdp sshd[17039]: Received disconnect from 70.171.206.63 port 48586:11: Bye Bye [preauth]
Oct  1 17:31:01 nativespace-cdp sshd[17039]: Disconnected from 70.171.206.63 port 48586 [preauth]
Oct  1 17:31:35 nativespace-cdp sshd[17142]: Connection closed by 159.100.136.21 port 56612 [preauth]
Oct  1 17:31:54 nativespace-cdp sshd[17191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.113.116.40  user=root
Oct  1 17:31:54 nativespace-cdp sshd[17191]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:31:56 nativespace-cdp sshd[17191]: Failed password for root from 212.113.116.40 port 42554 ssh2
Oct  1 17:31:56 nativespace-cdp sshd[17191]: Received disconnect from 212.113.116.40 port 42554:11: Bye Bye [preauth]
Oct  1 17:31:56 nativespace-cdp sshd[17191]: Disconnected from 212.113.116.40 port 42554 [preauth]
Oct  1 17:32:09 nativespace-cdp sshd[17248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.166.11  user=root
Oct  1 17:32:09 nativespace-cdp sshd[17248]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:32:11 nativespace-cdp sshd[17248]: Failed password for root from 52.161.166.11 port 57816 ssh2
Oct  1 17:32:11 nativespace-cdp sshd[17248]: Received disconnect from 52.161.166.11 port 57816:11: Bye Bye [preauth]
Oct  1 17:32:11 nativespace-cdp sshd[17248]: Disconnected from 52.161.166.11 port 57816 [preauth]
Oct  1 17:32:17 nativespace-cdp sshd[17267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.156  user=root
Oct  1 17:32:17 nativespace-cdp sshd[17267]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:32:18 nativespace-cdp sshd[17276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.233.163.70  user=root
Oct  1 17:32:18 nativespace-cdp sshd[17276]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:32:19 nativespace-cdp sshd[17267]: Failed password for root from 139.59.46.156 port 56604 ssh2
Oct  1 17:32:19 nativespace-cdp sshd[17280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.10.190  user=root
Oct  1 17:32:19 nativespace-cdp sshd[17280]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:32:19 nativespace-cdp sshd[17267]: Received disconnect from 139.59.46.156 port 56604:11: Bye Bye [preauth]
Oct  1 17:32:19 nativespace-cdp sshd[17267]: Disconnected from 139.59.46.156 port 56604 [preauth]
Oct  1 17:32:19 nativespace-cdp sshd[17261]: Received disconnect from 5.42.82.235 port 36646:11: Bye Bye [preauth]
Oct  1 17:32:19 nativespace-cdp sshd[17261]: Disconnected from 5.42.82.235 port 36646 [preauth]
Oct  1 17:32:20 nativespace-cdp sshd[17276]: Failed password for root from 172.233.163.70 port 55072 ssh2
Oct  1 17:32:20 nativespace-cdp sshd[17276]: Received disconnect from 172.233.163.70 port 55072:11: Bye Bye [preauth]
Oct  1 17:32:20 nativespace-cdp sshd[17276]: Disconnected from 172.233.163.70 port 55072 [preauth]
Oct  1 17:32:21 nativespace-cdp sshd[17280]: Failed password for root from 222.90.10.190 port 35860 ssh2
Oct  1 17:32:21 nativespace-cdp sshd[17280]: Received disconnect from 222.90.10.190 port 35860:11: Bye Bye [preauth]
Oct  1 17:32:21 nativespace-cdp sshd[17280]: Disconnected from 222.90.10.190 port 35860 [preauth]
Oct  1 17:32:29 nativespace-cdp sshd[17330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.113.116.40  user=root
Oct  1 17:32:29 nativespace-cdp sshd[17330]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:32:30 nativespace-cdp sshd[17332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.187.160.26  user=root
Oct  1 17:32:30 nativespace-cdp sshd[17332]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:32:31 nativespace-cdp sshd[17330]: Failed password for root from 212.113.116.40 port 47462 ssh2
Oct  1 17:32:31 nativespace-cdp sshd[17330]: Received disconnect from 212.113.116.40 port 47462:11: Bye Bye [preauth]
Oct  1 17:32:31 nativespace-cdp sshd[17330]: Disconnected from 212.113.116.40 port 47462 [preauth]
Oct  1 17:32:32 nativespace-cdp sshd[17332]: Failed password for root from 103.187.160.26 port 36958 ssh2
Oct  1 17:32:32 nativespace-cdp sshd[17332]: Received disconnect from 103.187.160.26 port 36958:11: Bye Bye [preauth]
Oct  1 17:32:32 nativespace-cdp sshd[17332]: Disconnected from 103.187.160.26 port 36958 [preauth]
Oct  1 17:32:38 nativespace-cdp sshd[17390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.171.206.63  user=root
Oct  1 17:32:38 nativespace-cdp sshd[17390]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:32:40 nativespace-cdp sshd[17390]: Failed password for root from 70.171.206.63 port 37428 ssh2
Oct  1 17:32:40 nativespace-cdp sshd[17390]: Received disconnect from 70.171.206.63 port 37428:11: Bye Bye [preauth]
Oct  1 17:32:40 nativespace-cdp sshd[17390]: Disconnected from 70.171.206.63 port 37428 [preauth]
Oct  1 17:32:50 nativespace-cdp sshd[17428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.166.11  user=root
Oct  1 17:32:50 nativespace-cdp sshd[17428]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:32:52 nativespace-cdp sshd[17428]: Failed password for root from 52.161.166.11 port 49066 ssh2
Oct  1 17:32:52 nativespace-cdp sshd[17428]: Received disconnect from 52.161.166.11 port 49066:11: Bye Bye [preauth]
Oct  1 17:32:52 nativespace-cdp sshd[17428]: Disconnected from 52.161.166.11 port 49066 [preauth]
Oct  1 17:32:54 nativespace-cdp sshd[17462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.233.163.70  user=root
Oct  1 17:32:54 nativespace-cdp sshd[17462]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:32:54 nativespace-cdp sshd[17467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.82.235  user=root
Oct  1 17:32:54 nativespace-cdp sshd[17467]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:32:56 nativespace-cdp sshd[17462]: Failed password for root from 172.233.163.70 port 57152 ssh2
Oct  1 17:32:56 nativespace-cdp sshd[17462]: Received disconnect from 172.233.163.70 port 57152:11: Bye Bye [preauth]
Oct  1 17:32:56 nativespace-cdp sshd[17462]: Disconnected from 172.233.163.70 port 57152 [preauth]
Oct  1 17:32:56 nativespace-cdp sshd[17467]: Failed password for root from 5.42.82.235 port 54442 ssh2
Oct  1 17:32:56 nativespace-cdp sshd[17467]: Received disconnect from 5.42.82.235 port 54442:11: Bye Bye [preauth]
Oct  1 17:32:56 nativespace-cdp sshd[17467]: Disconnected from 5.42.82.235 port 54442 [preauth]
Oct  1 17:33:01 nativespace-cdp sshd[17488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.156  user=root
Oct  1 17:33:01 nativespace-cdp sshd[17488]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:02 nativespace-cdp sshd[17513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.59.118  user=root
Oct  1 17:33:02 nativespace-cdp sshd[17513]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:03 nativespace-cdp sshd[17537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.113.116.40  user=root
Oct  1 17:33:03 nativespace-cdp sshd[17537]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:04 nativespace-cdp sshd[17488]: Failed password for root from 139.59.46.156 port 60968 ssh2
Oct  1 17:33:04 nativespace-cdp sshd[17488]: Received disconnect from 139.59.46.156 port 60968:11: Bye Bye [preauth]
Oct  1 17:33:04 nativespace-cdp sshd[17488]: Disconnected from 139.59.46.156 port 60968 [preauth]
Oct  1 17:33:05 nativespace-cdp sshd[17513]: Failed password for root from 43.159.59.118 port 49706 ssh2
Oct  1 17:33:05 nativespace-cdp sshd[17513]: Received disconnect from 43.159.59.118 port 49706:11: Bye Bye [preauth]
Oct  1 17:33:05 nativespace-cdp sshd[17513]: Disconnected from 43.159.59.118 port 49706 [preauth]
Oct  1 17:33:05 nativespace-cdp sshd[17537]: Failed password for root from 212.113.116.40 port 43856 ssh2
Oct  1 17:33:05 nativespace-cdp sshd[17537]: Received disconnect from 212.113.116.40 port 43856:11: Bye Bye [preauth]
Oct  1 17:33:05 nativespace-cdp sshd[17537]: Disconnected from 212.113.116.40 port 43856 [preauth]
Oct  1 17:33:11 nativespace-cdp sshd[17585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.10.190  user=root
Oct  1 17:33:11 nativespace-cdp sshd[17585]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:13 nativespace-cdp sshd[17585]: Failed password for root from 222.90.10.190 port 48572 ssh2
Oct  1 17:33:13 nativespace-cdp sshd[17585]: Received disconnect from 222.90.10.190 port 48572:11: Bye Bye [preauth]
Oct  1 17:33:13 nativespace-cdp sshd[17585]: Disconnected from 222.90.10.190 port 48572 [preauth]
Oct  1 17:33:14 nativespace-cdp sshd[17593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.187.160.26  user=root
Oct  1 17:33:14 nativespace-cdp sshd[17593]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:16 nativespace-cdp sshd[17593]: Failed password for root from 103.187.160.26 port 49722 ssh2
Oct  1 17:33:16 nativespace-cdp sshd[17593]: Received disconnect from 103.187.160.26 port 49722:11: Bye Bye [preauth]
Oct  1 17:33:16 nativespace-cdp sshd[17593]: Disconnected from 103.187.160.26 port 49722 [preauth]
Oct  1 17:33:20 nativespace-cdp sshd[17663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.171.206.63  user=root
Oct  1 17:33:20 nativespace-cdp sshd[17663]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:23 nativespace-cdp sshd[17663]: Failed password for root from 70.171.206.63 port 53276 ssh2
Oct  1 17:33:23 nativespace-cdp sshd[17663]: Received disconnect from 70.171.206.63 port 53276:11: Bye Bye [preauth]
Oct  1 17:33:23 nativespace-cdp sshd[17663]: Disconnected from 70.171.206.63 port 53276 [preauth]
Oct  1 17:33:27 nativespace-cdp sshd[17699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.166.11  user=root
Oct  1 17:33:27 nativespace-cdp sshd[17699]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:28 nativespace-cdp sshd[17705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.233.163.70  user=root
Oct  1 17:33:28 nativespace-cdp sshd[17705]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:29 nativespace-cdp sshd[17699]: Failed password for root from 52.161.166.11 port 40444 ssh2
Oct  1 17:33:29 nativespace-cdp sshd[17699]: Received disconnect from 52.161.166.11 port 40444:11: Bye Bye [preauth]
Oct  1 17:33:29 nativespace-cdp sshd[17699]: Disconnected from 52.161.166.11 port 40444 [preauth]
Oct  1 17:33:30 nativespace-cdp sshd[17705]: Failed password for root from 172.233.163.70 port 40416 ssh2
Oct  1 17:33:30 nativespace-cdp sshd[17705]: Received disconnect from 172.233.163.70 port 40416:11: Bye Bye [preauth]
Oct  1 17:33:30 nativespace-cdp sshd[17705]: Disconnected from 172.233.163.70 port 40416 [preauth]
Oct  1 17:33:35 nativespace-cdp sshd[17724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.82.235  user=root
Oct  1 17:33:35 nativespace-cdp sshd[17724]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:36 nativespace-cdp sshd[17724]: Failed password for root from 5.42.82.235 port 54864 ssh2
Oct  1 17:33:36 nativespace-cdp sshd[17724]: Received disconnect from 5.42.82.235 port 54864:11: Bye Bye [preauth]
Oct  1 17:33:36 nativespace-cdp sshd[17724]: Disconnected from 5.42.82.235 port 54864 [preauth]
Oct  1 17:33:41 nativespace-cdp sshd[17769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.113.116.40  user=root
Oct  1 17:33:41 nativespace-cdp sshd[17769]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:42 nativespace-cdp sshd[17769]: Failed password for root from 212.113.116.40 port 46128 ssh2
Oct  1 17:33:42 nativespace-cdp sshd[17769]: Received disconnect from 212.113.116.40 port 46128:11: Bye Bye [preauth]
Oct  1 17:33:42 nativespace-cdp sshd[17769]: Disconnected from 212.113.116.40 port 46128 [preauth]
Oct  1 17:33:42 nativespace-cdp sshd[17775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.156  user=root
Oct  1 17:33:42 nativespace-cdp sshd[17775]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:45 nativespace-cdp sshd[17775]: Failed password for root from 139.59.46.156 port 36842 ssh2
Oct  1 17:33:45 nativespace-cdp sshd[17775]: Received disconnect from 139.59.46.156 port 36842:11: Bye Bye [preauth]
Oct  1 17:33:45 nativespace-cdp sshd[17775]: Disconnected from 139.59.46.156 port 36842 [preauth]
Oct  1 17:33:49 nativespace-cdp sshd[17787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.59.118  user=root
Oct  1 17:33:49 nativespace-cdp sshd[17787]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:33:51 nativespace-cdp sshd[17787]: Failed password for root from 43.159.59.118 port 41332 ssh2
Oct  1 17:33:51 nativespace-cdp sshd[17787]: Received disconnect from 43.159.59.118 port 41332:11: Bye Bye [preauth]
Oct  1 17:33:51 nativespace-cdp sshd[17787]: Disconnected from 43.159.59.118 port 41332 [preauth]
Oct  1 17:34:06 nativespace-cdp sshd[17856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.171.206.63  user=root
Oct  1 17:34:06 nativespace-cdp sshd[17856]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:34:06 nativespace-cdp sshd[17858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.10.190  user=root
Oct  1 17:34:06 nativespace-cdp sshd[17858]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:34:06 nativespace-cdp sshd[17870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.233.163.70  user=root
Oct  1 17:34:06 nativespace-cdp sshd[17870]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:34:06 nativespace-cdp sshd[17863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.187.160.26  user=root
Oct  1 17:34:06 nativespace-cdp sshd[17863]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:34:08 nativespace-cdp sshd[17856]: Failed password for root from 70.171.206.63 port 54066 ssh2
Oct  1 17:34:08 nativespace-cdp sshd[17858]: Failed password for root from 222.90.10.190 port 33052 ssh2
Oct  1 17:34:08 nativespace-cdp sshd[17856]: Received disconnect from 70.171.206.63 port 54066:11: Bye Bye [preauth]
Oct  1 17:34:08 nativespace-cdp sshd[17856]: Disconnected from 70.171.206.63 port 54066 [preauth]
Oct  1 17:34:08 nativespace-cdp sshd[17870]: Failed password for root from 172.233.163.70 port 45376 ssh2
Oct  1 17:34:08 nativespace-cdp sshd[17858]: Received disconnect from 222.90.10.190 port 33052:11: Bye Bye [preauth]
Oct  1 17:34:08 nativespace-cdp sshd[17858]: Disconnected from 222.90.10.190 port 33052 [preauth]
Oct  1 17:34:09 nativespace-cdp sshd[17870]: Received disconnect from 172.233.163.70 port 45376:11: Bye Bye [preauth]
Oct  1 17:34:09 nativespace-cdp sshd[17870]: Disconnected from 172.233.163.70 port 45376 [preauth]
Oct  1 17:34:09 nativespace-cdp sshd[17863]: Failed password for root from 103.187.160.26 port 34254 ssh2
Oct  1 17:34:09 nativespace-cdp sshd[17863]: Received disconnect from 103.187.160.26 port 34254:11: Bye Bye [preauth]
Oct  1 17:34:09 nativespace-cdp sshd[17863]: Disconnected from 103.187.160.26 port 34254 [preauth]
Oct  1 17:34:13 nativespace-cdp sshd[17892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.82.235  user=root
Oct  1 17:34:13 nativespace-cdp sshd[17892]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:34:14 nativespace-cdp sshd[17887]: Connection closed by 52.161.166.11 port 54714 [preauth]
Oct  1 17:34:15 nativespace-cdp sshd[17892]: Failed password for root from 5.42.82.235 port 47424 ssh2
Oct  1 17:34:15 nativespace-cdp sshd[17892]: Received disconnect from 5.42.82.235 port 47424:11: Bye Bye [preauth]
Oct  1 17:34:15 nativespace-cdp sshd[17892]: Disconnected from 5.42.82.235 port 47424 [preauth]
Oct  1 17:34:17 nativespace-cdp sshd[17909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.113.116.40  user=root
Oct  1 17:34:17 nativespace-cdp sshd[17909]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:34:19 nativespace-cdp sshd[17909]: Failed password for root from 212.113.116.40 port 35532 ssh2
Oct  1 17:34:19 nativespace-cdp sshd[17909]: Received disconnect from 212.113.116.40 port 35532:11: Bye Bye [preauth]
Oct  1 17:34:19 nativespace-cdp sshd[17909]: Disconnected from 212.113.116.40 port 35532 [preauth]
Oct  1 17:34:31 nativespace-cdp sshd[17943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.156  user=root
Oct  1 17:34:31 nativespace-cdp sshd[17943]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:34:33 nativespace-cdp sshd[17943]: Failed password for root from 139.59.46.156 port 53860 ssh2
Oct  1 17:34:33 nativespace-cdp sshd[17943]: Received disconnect from 139.59.46.156 port 53860:11: Bye Bye [preauth]
Oct  1 17:34:33 nativespace-cdp sshd[17943]: Disconnected from 139.59.46.156 port 53860 [preauth]
Oct  1 17:34:41 nativespace-cdp sshd[17977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.233.163.70  user=root
Oct  1 17:34:41 nativespace-cdp sshd[17977]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:34:42 nativespace-cdp sshd[17968]: Connection closed by 43.159.59.118 port 44106 [preauth]
Oct  1 17:34:44 nativespace-cdp sshd[17977]: Failed password for root from 172.233.163.70 port 43664 ssh2
Oct  1 17:34:44 nativespace-cdp sshd[17977]: Received disconnect from 172.233.163.70 port 43664:11: Bye Bye [preauth]
Oct  1 17:34:44 nativespace-cdp sshd[17977]: Disconnected from 172.233.163.70 port 43664 [preauth]
Oct  1 17:34:47 nativespace-cdp sshd[18003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.171.206.63  user=root
Oct  1 17:34:47 nativespace-cdp sshd[18003]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:34:50 nativespace-cdp sshd[18003]: Failed password for root from 70.171.206.63 port 56578 ssh2
Oct  1 17:34:51 nativespace-cdp sshd[18003]: Received disconnect from 70.171.206.63 port 56578:11: Bye Bye [preauth]
Oct  1 17:34:51 nativespace-cdp sshd[18003]: Disconnected from 70.171.206.63 port 56578 [preauth]
Oct  1 17:34:56 nativespace-cdp sshd[18124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.113.116.40  user=root
Oct  1 17:34:56 nativespace-cdp sshd[18124]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:34:57 nativespace-cdp sshd[18007]: Received disconnect from 103.187.160.26 port 47024:11: Bye Bye [preauth]
Oct  1 17:34:57 nativespace-cdp sshd[18007]: Disconnected from 103.187.160.26 port 47024 [preauth]
Oct  1 17:34:57 nativespace-cdp sshd[18113]: Received disconnect from 52.161.166.11 port 58460:11: Bye Bye [preauth]
Oct  1 17:34:57 nativespace-cdp sshd[18113]: Disconnected from 52.161.166.11 port 58460 [preauth]
Oct  1 17:34:59 nativespace-cdp sshd[18124]: Failed password for root from 212.113.116.40 port 59334 ssh2
Oct  1 17:35:00 nativespace-cdp sshd[18127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.10.190  user=root
Oct  1 17:35:00 nativespace-cdp sshd[18127]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:35:00 nativespace-cdp sshd[18124]: Received disconnect from 212.113.116.40 port 59334:11: Bye Bye [preauth]
Oct  1 17:35:00 nativespace-cdp sshd[18124]: Disconnected from 212.113.116.40 port 59334 [preauth]
Oct  1 17:35:02 nativespace-cdp sshd[18127]: Failed password for root from 222.90.10.190 port 45764 ssh2
Oct  1 17:35:02 nativespace-cdp sshd[18127]: Received disconnect from 222.90.10.190 port 45764:11: Bye Bye [preauth]
Oct  1 17:35:02 nativespace-cdp sshd[18127]: Disconnected from 222.90.10.190 port 45764 [preauth]
Oct  1 17:35:13 nativespace-cdp sshd[18382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.156  user=root
Oct  1 17:35:13 nativespace-cdp sshd[18382]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:35:15 nativespace-cdp sshd[18382]: Failed password for root from 139.59.46.156 port 47816 ssh2
Oct  1 17:35:15 nativespace-cdp sshd[18382]: Received disconnect from 139.59.46.156 port 47816:11: Bye Bye [preauth]
Oct  1 17:35:15 nativespace-cdp sshd[18382]: Disconnected from 139.59.46.156 port 47816 [preauth]
Oct  1 17:35:16 nativespace-cdp sshd[18432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.233.163.70  user=root
Oct  1 17:35:16 nativespace-cdp sshd[18432]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:35:18 nativespace-cdp sshd[18432]: Failed password for root from 172.233.163.70 port 40490 ssh2
Oct  1 17:35:18 nativespace-cdp sshd[18432]: Received disconnect from 172.233.163.70 port 40490:11: Bye Bye [preauth]
Oct  1 17:35:18 nativespace-cdp sshd[18432]: Disconnected from 172.233.163.70 port 40490 [preauth]
Oct  1 17:35:33 nativespace-cdp sshd[18515]: Connection closed by 70.171.206.63 port 60176 [preauth]
Oct  1 17:35:33 nativespace-cdp sshd[18510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.82.235  user=root
Oct  1 17:35:33 nativespace-cdp sshd[18510]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:35:34 nativespace-cdp sshd[18510]: Failed password for root from 5.42.82.235 port 44308 ssh2
Oct  1 17:35:34 nativespace-cdp sshd[18518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.187.160.26  user=root
Oct  1 17:35:34 nativespace-cdp sshd[18518]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:35:35 nativespace-cdp sshd[18510]: Received disconnect from 5.42.82.235 port 44308:11: Bye Bye [preauth]
Oct  1 17:35:35 nativespace-cdp sshd[18510]: Disconnected from 5.42.82.235 port 44308 [preauth]
Oct  1 17:35:35 nativespace-cdp sshd[18525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.166.11  user=root
Oct  1 17:35:35 nativespace-cdp sshd[18525]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:35:36 nativespace-cdp sshd[18518]: Failed password for root from 103.187.160.26 port 59788 ssh2
Oct  1 17:35:36 nativespace-cdp sshd[18518]: Received disconnect from 103.187.160.26 port 59788:11: Bye Bye [preauth]
Oct  1 17:35:36 nativespace-cdp sshd[18518]: Disconnected from 103.187.160.26 port 59788 [preauth]
Oct  1 17:35:37 nativespace-cdp sshd[18525]: Failed password for root from 52.161.166.11 port 36458 ssh2
Oct  1 17:35:37 nativespace-cdp sshd[18525]: Received disconnect from 52.161.166.11 port 36458:11: Bye Bye [preauth]
Oct  1 17:35:37 nativespace-cdp sshd[18525]: Disconnected from 52.161.166.11 port 36458 [preauth]
Oct  1 17:35:51 nativespace-cdp sshd[18623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.233.163.70  user=root
Oct  1 17:35:51 nativespace-cdp sshd[18623]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:35:51 nativespace-cdp sshd[18620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.10.190  user=root
Oct  1 17:35:51 nativespace-cdp sshd[18620]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:35:52 nativespace-cdp sshd[18623]: Failed password for root from 172.233.163.70 port 54606 ssh2
Oct  1 17:35:52 nativespace-cdp sshd[18620]: Failed password for root from 222.90.10.190 port 58476 ssh2
Oct  1 17:35:55 nativespace-cdp sshd[18623]: Received disconnect from 172.233.163.70 port 54606:11: Bye Bye [preauth]
Oct  1 17:35:55 nativespace-cdp sshd[18623]: Disconnected from 172.233.163.70 port 54606 [preauth]
Oct  1 17:35:55 nativespace-cdp sshd[18620]: Received disconnect from 222.90.10.190 port 58476:11: Bye Bye [preauth]
Oct  1 17:35:55 nativespace-cdp sshd[18620]: Disconnected from 222.90.10.190 port 58476 [preauth]
Oct  1 17:35:56 nativespace-cdp sshd[18631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.156  user=root
Oct  1 17:35:56 nativespace-cdp sshd[18631]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:35:58 nativespace-cdp sshd[18631]: Failed password for root from 139.59.46.156 port 46620 ssh2
Oct  1 17:35:58 nativespace-cdp sshd[18631]: Received disconnect from 139.59.46.156 port 46620:11: Bye Bye [preauth]
Oct  1 17:35:58 nativespace-cdp sshd[18631]: Disconnected from 139.59.46.156 port 46620 [preauth]
Oct  1 17:36:01 nativespace-cdp sshd[18656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.113.116.40  user=root
Oct  1 17:36:01 nativespace-cdp sshd[18656]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:03 nativespace-cdp sshd[18656]: Failed password for root from 212.113.116.40 port 47688 ssh2
Oct  1 17:36:03 nativespace-cdp sshd[18656]: Received disconnect from 212.113.116.40 port 47688:11: Bye Bye [preauth]
Oct  1 17:36:03 nativespace-cdp sshd[18656]: Disconnected from 212.113.116.40 port 47688 [preauth]
Oct  1 17:36:04 nativespace-cdp sshd[18665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.171.206.63  user=root
Oct  1 17:36:04 nativespace-cdp sshd[18665]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:05 nativespace-cdp sshd[18667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.59.118  user=root
Oct  1 17:36:05 nativespace-cdp sshd[18667]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:06 nativespace-cdp sshd[18665]: Failed password for root from 70.171.206.63 port 43244 ssh2
Oct  1 17:36:07 nativespace-cdp sshd[18667]: Failed password for root from 43.159.59.118 port 37072 ssh2
Oct  1 17:36:09 nativespace-cdp sshd[18667]: Received disconnect from 43.159.59.118 port 37072:11: Bye Bye [preauth]
Oct  1 17:36:09 nativespace-cdp sshd[18667]: Disconnected from 43.159.59.118 port 37072 [preauth]
Oct  1 17:36:09 nativespace-cdp sshd[18665]: Received disconnect from 70.171.206.63 port 43244:11: Bye Bye [preauth]
Oct  1 17:36:09 nativespace-cdp sshd[18665]: Disconnected from 70.171.206.63 port 43244 [preauth]
Oct  1 17:36:09 nativespace-cdp sshd[18679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.82.235  user=root
Oct  1 17:36:09 nativespace-cdp sshd[18679]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:11 nativespace-cdp sshd[18679]: Failed password for root from 5.42.82.235 port 43470 ssh2
Oct  1 17:36:11 nativespace-cdp sshd[18679]: Received disconnect from 5.42.82.235 port 43470:11: Bye Bye [preauth]
Oct  1 17:36:11 nativespace-cdp sshd[18679]: Disconnected from 5.42.82.235 port 43470 [preauth]
Oct  1 17:36:12 nativespace-cdp sshd[18694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.166.11  user=root
Oct  1 17:36:12 nativespace-cdp sshd[18694]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:14 nativespace-cdp sshd[18694]: Failed password for root from 52.161.166.11 port 51178 ssh2
Oct  1 17:36:15 nativespace-cdp sshd[18694]: Received disconnect from 52.161.166.11 port 51178:11: Bye Bye [preauth]
Oct  1 17:36:15 nativespace-cdp sshd[18694]: Disconnected from 52.161.166.11 port 51178 [preauth]
Oct  1 17:36:16 nativespace-cdp sshd[18731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.187.160.26  user=root
Oct  1 17:36:16 nativespace-cdp sshd[18731]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:19 nativespace-cdp sshd[18731]: Failed password for root from 103.187.160.26 port 44310 ssh2
Oct  1 17:36:22 nativespace-cdp sshd[18731]: Received disconnect from 103.187.160.26 port 44310:11: Bye Bye [preauth]
Oct  1 17:36:22 nativespace-cdp sshd[18731]: Disconnected from 103.187.160.26 port 44310 [preauth]
Oct  1 17:36:24 nativespace-cdp sshd[18747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.233.163.70  user=root
Oct  1 17:36:24 nativespace-cdp sshd[18747]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:26 nativespace-cdp sshd[18747]: Failed password for root from 172.233.163.70 port 41556 ssh2
Oct  1 17:36:26 nativespace-cdp sshd[18747]: Received disconnect from 172.233.163.70 port 41556:11: Bye Bye [preauth]
Oct  1 17:36:26 nativespace-cdp sshd[18747]: Disconnected from 172.233.163.70 port 41556 [preauth]
Oct  1 17:36:35 nativespace-cdp sshd[18778]: Connection closed by 159.100.136.21 port 38002 [preauth]
Oct  1 17:36:35 nativespace-cdp sshd[18780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.113.116.40  user=root
Oct  1 17:36:35 nativespace-cdp sshd[18780]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:36 nativespace-cdp sshd[18776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.156  user=root
Oct  1 17:36:36 nativespace-cdp sshd[18776]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:37 nativespace-cdp sshd[18780]: Failed password for root from 212.113.116.40 port 44636 ssh2
Oct  1 17:36:38 nativespace-cdp sshd[18776]: Failed password for root from 139.59.46.156 port 42940 ssh2
Oct  1 17:36:41 nativespace-cdp sshd[18780]: Received disconnect from 212.113.116.40 port 44636:11: Bye Bye [preauth]
Oct  1 17:36:41 nativespace-cdp sshd[18780]: Disconnected from 212.113.116.40 port 44636 [preauth]
Oct  1 17:36:41 nativespace-cdp sshd[18776]: Received disconnect from 139.59.46.156 port 42940:11: Bye Bye [preauth]
Oct  1 17:36:41 nativespace-cdp sshd[18776]: Disconnected from 139.59.46.156 port 42940 [preauth]
Oct  1 17:36:43 nativespace-cdp sshd[18806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.82.235  user=root
Oct  1 17:36:43 nativespace-cdp sshd[18806]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:44 nativespace-cdp sshd[18794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.10.190  user=root
Oct  1 17:36:44 nativespace-cdp sshd[18794]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:44 nativespace-cdp sshd[18799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.171.206.63  user=root
Oct  1 17:36:44 nativespace-cdp sshd[18799]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:45 nativespace-cdp sshd[18806]: Failed password for root from 5.42.82.235 port 60942 ssh2
Oct  1 17:36:45 nativespace-cdp sshd[18806]: Received disconnect from 5.42.82.235 port 60942:11: Bye Bye [preauth]
Oct  1 17:36:45 nativespace-cdp sshd[18806]: Disconnected from 5.42.82.235 port 60942 [preauth]
Oct  1 17:36:46 nativespace-cdp sshd[18794]: Failed password for root from 222.90.10.190 port 42954 ssh2
Oct  1 17:36:46 nativespace-cdp sshd[18794]: Received disconnect from 222.90.10.190 port 42954:11: Bye Bye [preauth]
Oct  1 17:36:46 nativespace-cdp sshd[18794]: Disconnected from 222.90.10.190 port 42954 [preauth]
Oct  1 17:36:46 nativespace-cdp sshd[18799]: Failed password for root from 70.171.206.63 port 42282 ssh2
Oct  1 17:36:46 nativespace-cdp sshd[18799]: Received disconnect from 70.171.206.63 port 42282:11: Bye Bye [preauth]
Oct  1 17:36:46 nativespace-cdp sshd[18799]: Disconnected from 70.171.206.63 port 42282 [preauth]
Oct  1 17:36:48 nativespace-cdp sshd[18817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.59.118  user=root
Oct  1 17:36:48 nativespace-cdp sshd[18817]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:50 nativespace-cdp sshd[18817]: Failed password for root from 43.159.59.118 port 54946 ssh2
Oct  1 17:36:50 nativespace-cdp sshd[18817]: Received disconnect from 43.159.59.118 port 54946:11: Bye Bye [preauth]
Oct  1 17:36:50 nativespace-cdp sshd[18817]: Disconnected from 43.159.59.118 port 54946 [preauth]
Oct  1 17:36:52 nativespace-cdp sshd[18830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.166.11  user=root
Oct  1 17:36:52 nativespace-cdp sshd[18830]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:54 nativespace-cdp sshd[18830]: Failed password for root from 52.161.166.11 port 53326 ssh2
Oct  1 17:36:54 nativespace-cdp sshd[18830]: Received disconnect from 52.161.166.11 port 53326:11: Bye Bye [preauth]
Oct  1 17:36:54 nativespace-cdp sshd[18830]: Disconnected from 52.161.166.11 port 53326 [preauth]
Oct  1 17:36:58 nativespace-cdp sshd[18850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.233.163.70  user=root
Oct  1 17:36:58 nativespace-cdp sshd[18850]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:59 nativespace-cdp sshd[18854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.187.160.26  user=root
Oct  1 17:36:59 nativespace-cdp sshd[18854]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:36:59 nativespace-cdp sshd[18850]: Failed password for root from 172.233.163.70 port 57564 ssh2
Oct  1 17:37:01 nativespace-cdp sshd[18854]: Failed password for root from 103.187.160.26 port 57068 ssh2
Oct  1 17:37:03 nativespace-cdp sshd[18854]: Received disconnect from 103.187.160.26 port 57068:11: Bye Bye [preauth]
Oct  1 17:37:03 nativespace-cdp sshd[18854]: Disconnected from 103.187.160.26 port 57068 [preauth]
Oct  1 17:37:17 nativespace-cdp sshd[18926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.156  user=root
Oct  1 17:37:17 nativespace-cdp sshd[18926]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:37:19 nativespace-cdp sshd[18926]: Failed password for root from 139.59.46.156 port 52996 ssh2
Oct  1 17:37:19 nativespace-cdp sshd[18933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.171.206.63  user=root
Oct  1 17:37:19 nativespace-cdp sshd[18933]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:37:19 nativespace-cdp sshd[18926]: Received disconnect from 139.59.46.156 port 52996:11: Bye Bye [preauth]
Oct  1 17:37:19 nativespace-cdp sshd[18926]: Disconnected from 139.59.46.156 port 52996 [preauth]
Oct  1 17:37:19 nativespace-cdp sshd[18939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.42.82.235  user=root
Oct  1 17:37:19 nativespace-cdp sshd[18939]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:37:20 nativespace-cdp sshd[18850]: Received disconnect from 172.233.163.70 port 57564:11: Bye Bye [preauth]
Oct  1 17:37:20 nativespace-cdp sshd[18850]: Disconnected from 172.233.163.70 port 57564 [preauth]
Oct  1 17:37:21 nativespace-cdp sshd[18933]: Failed password for root from 70.171.206.63 port 34256 ssh2
Oct  1 17:37:21 nativespace-cdp sshd[18939]: Failed password for root from 5.42.82.235 port 55336 ssh2
Oct  1 17:37:22 nativespace-cdp sshd[18939]: Received disconnect from 5.42.82.235 port 55336:11: Bye Bye [preauth]
Oct  1 17:37:22 nativespace-cdp sshd[18939]: Disconnected from 5.42.82.235 port 55336 [preauth]
Oct  1 17:37:23 nativespace-cdp sshd[18933]: Received disconnect from 70.171.206.63 port 34256:11: Bye Bye [preauth]
Oct  1 17:37:23 nativespace-cdp sshd[18933]: Disconnected from 70.171.206.63 port 34256 [preauth]
Oct  1 17:37:29 nativespace-cdp sshd[18964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.59.118  user=root
Oct  1 17:37:29 nativespace-cdp sshd[18964]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:37:31 nativespace-cdp sshd[18964]: Failed password for root from 43.159.59.118 port 39852 ssh2
Oct  1 17:37:31 nativespace-cdp sshd[18964]: Received disconnect from 43.159.59.118 port 39852:11: Bye Bye [preauth]
Oct  1 17:37:31 nativespace-cdp sshd[18964]: Disconnected from 43.159.59.118 port 39852 [preauth]
Oct  1 17:37:33 nativespace-cdp sshd[18981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.166.11  user=root
Oct  1 17:37:33 nativespace-cdp sshd[18981]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:37:34 nativespace-cdp sshd[18983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.10.190  user=root
Oct  1 17:37:34 nativespace-cdp sshd[18983]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:37:35 nativespace-cdp sshd[18981]: Failed password for root from 52.161.166.11 port 36936 ssh2
Oct  1 17:37:35 nativespace-cdp sshd[18983]: Failed password for root from 222.90.10.190 port 55672 ssh2
Oct  1 17:37:38 nativespace-cdp sshd[18983]: Received disconnect from 222.90.10.190 port 55672:11: Bye Bye [preauth]
Oct  1 17:37:38 nativespace-cdp sshd[18983]: Disconnected from 222.90.10.190 port 55672 [preauth]
Oct  1 17:37:40 nativespace-cdp sshd[18981]: Received disconnect from 52.161.166.11 port 36936:11: Bye Bye [preauth]
Oct  1 17:37:40 nativespace-cdp sshd[18981]: Disconnected from 52.161.166.11 port 36936 [preauth]
Oct  1 17:37:43 nativespace-cdp sshd[19008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.187.160.26  user=root
Oct  1 17:37:43 nativespace-cdp sshd[19008]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:37:45 nativespace-cdp sshd[19008]: Failed password for root from 103.187.160.26 port 41596 ssh2
Oct  1 17:37:45 nativespace-cdp sshd[19008]: Received disconnect from 103.187.160.26 port 41596:11: Bye Bye [preauth]
Oct  1 17:37:45 nativespace-cdp sshd[19008]: Disconnected from 103.187.160.26 port 41596 [preauth]
Oct  1 17:37:57 nativespace-cdp sshd[19044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.171.206.63  user=root
Oct  1 17:37:57 nativespace-cdp sshd[19044]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:38:00 nativespace-cdp sshd[19044]: Failed password for root from 70.171.206.63 port 42146 ssh2
Oct  1 17:38:00 nativespace-cdp sshd[19044]: Received disconnect from 70.171.206.63 port 42146:11: Bye Bye [preauth]
Oct  1 17:38:00 nativespace-cdp sshd[19044]: Disconnected from 70.171.206.63 port 42146 [preauth]
Oct  1 17:38:05 nativespace-cdp sshd[19071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.156  user=root
Oct  1 17:38:05 nativespace-cdp sshd[19071]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:38:07 nativespace-cdp sshd[19071]: Failed password for root from 139.59.46.156 port 48724 ssh2
Oct  1 17:38:07 nativespace-cdp sshd[19071]: Received disconnect from 139.59.46.156 port 48724:11: Bye Bye [preauth]
Oct  1 17:38:07 nativespace-cdp sshd[19071]: Disconnected from 139.59.46.156 port 48724 [preauth]
Oct  1 17:38:14 nativespace-cdp sshd[19079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.59.118  user=root
Oct  1 17:38:14 nativespace-cdp sshd[19079]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:38:15 nativespace-cdp sshd[19079]: Failed password for root from 43.159.59.118 port 48704 ssh2
Oct  1 17:38:16 nativespace-cdp sshd[19079]: Received disconnect from 43.159.59.118 port 48704:11: Bye Bye [preauth]
Oct  1 17:38:16 nativespace-cdp sshd[19079]: Disconnected from 43.159.59.118 port 48704 [preauth]
Oct  1 17:38:22 nativespace-cdp sshd[19114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.10.190  user=root
Oct  1 17:38:22 nativespace-cdp sshd[19114]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:38:24 nativespace-cdp sshd[19114]: Failed password for root from 222.90.10.190 port 40146 ssh2
Oct  1 17:38:27 nativespace-cdp sshd[19114]: Received disconnect from 222.90.10.190 port 40146:11: Bye Bye [preauth]
Oct  1 17:38:27 nativespace-cdp sshd[19114]: Disconnected from 222.90.10.190 port 40146 [preauth]
Oct  1 17:38:29 nativespace-cdp sshd[19123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.187.160.26  user=root
Oct  1 17:38:29 nativespace-cdp sshd[19123]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 17:38:31 nativespace-cdp sshd[19123]: Failed password for root from 103.187.160.26 port 54348 ssh2
Oct  1 17:38:31 nativespace-cdp sshd[19123]: Received disconnect from 103.187.160.26 port 54348:11: Bye Bye [preauth]
Oct  1 17:38:31 nativespace-cdp sshd[19123]: Disconnected from 103.187.160.26 port 54348 [preauth]
Oct  1 17:39:15 nativespace-cdp sshd[19247]: Invalid user ubuntu from 222.90.10.190 port 52858
Oct  1 17:39:15 nativespace-cdp sshd[19247]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 17:39:15 nativespace-cdp sshd[19247]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 17:39:15 nativespace-cdp sshd[19247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.90.10.190
Oct  1 17:39:18 nativespace-cdp sshd[19247]: Failed password for invalid user ubuntu from 222.90.10.190 port 52858 ssh2
Oct  1 17:39:21 nativespace-cdp sshd[19247]: Received disconnect from 222.90.10.190 port 52858:11: Bye Bye [preauth]
Oct  1 17:39:21 nativespace-cdp sshd[19247]: Disconnected from 222.90.10.190 port 52858 [preauth]
Oct  1 17:41:35 nativespace-cdp sshd[19905]: Connection closed by 159.100.136.21 port 47098 [preauth]
Oct  1 17:46:57 nativespace-cdp sshd[21384]: Did not receive identification string from 159.100.136.21 port 55252
Oct  1 17:51:33 nativespace-cdp sshd[22734]: Connection closed by 159.100.136.21 port 36260 [preauth]
Oct  1 17:56:35 nativespace-cdp sshd[23917]: Connection closed by 159.100.136.21 port 45778 [preauth]
Oct  1 18:01:33 nativespace-cdp sshd[25817]: Connection closed by 159.100.136.21 port 55114 [preauth]
Oct  1 18:06:33 nativespace-cdp sshd[27528]: Connection closed by 159.100.136.21 port 36692 [preauth]
Oct  1 18:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 18:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:01 nativespace-cdp sudo[29392]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 18:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:01 nativespace-cdp sudo[29462]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:01 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 18:10:01 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:06 nativespace-cdp sudo[29467]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:06 nativespace-cdp sudo[29604]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 18:10:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:08 nativespace-cdp sudo[29613]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 18:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:09 nativespace-cdp sudo[29624]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 18:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:09 nativespace-cdp sudo[29627]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 18:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:09 nativespace-cdp sudo[29630]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 18:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:09 nativespace-cdp sudo[29634]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 18:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:09 nativespace-cdp sudo[29637]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 18:10:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:09 nativespace-cdp sudo[29640]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 18:10:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:11 nativespace-cdp sudo[29664]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 18:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:12 nativespace-cdp sudo[29670]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=tomandle user-2=jennimil user-3=chrisdal user-4=mcdermos user-5=david user-6=nbhavers user-7=careers user-8=lucy user-9=attlebor user-10=onlycont user-11=outdoorc user-12=ranxterc user-13=hodgsonmail user-14=branko user-15=romaldki user-16=nove user-17=boldover user-18=bakery user-19=crrtipdl user-20=sosevalu user-21=oubpgvbx user-22=tstardom user-23=what user-24=havantho user-25=sketchy user-26=cath user-27=nvihkvu user-28=dancinggardener user-29=stagingerris user-30=ladburyp user-31=kategilpin user-32=design user-33=asandcoc user-34=sibtoncc user-35=bwppodcast user-36=zebrapho user-37=steve user-38=fawcettd user-39=burydropin user-40=nsceres user-41=beauty user-42=darkstar user-43=eatspam user-44=dhyana user-45=nscdp user-46=leftie user-47=foods user-48=health2045 user-49=fortunaz
Oct  1 18:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=lkpier user-51=steakbridieme user-52=firstre5 user-53=donnychicago user-54=philmcph user-55=ctedorgu user-56=isleofwi user-57=smrszyqg user-58=nomistakes user-59=hidden user-60=tigerlet user-61=barbersh user-62=cathski user-63=cambria1 user-64=reliable user-65=ninejimm user-66=cwsocial user-67=howardon user-68=pugwash user-69=paulmca1 user-70=hirefootballgame user-71=eugincou user-72=courseme user-73=ultbcrra user-74=jonhartl user-75=seftvta user-76=firstres user-77=coursemc user-78=opaiscyx user-79=clarkass user-80=firstrel user-81=costestimatorco user-82=firstred user-83=highlegh user-84=southlon user-85=gilpin user-86=milloyco user-87=elecleis user-88=hubmaster user-89=fetch user-90=carsinyo user-91=accooper user-92=ianrayne user-93=connectedshoppin user-94=thqkgnbz user-95=nstriton user-96=brighto1 user-97=vivienn1 user-98=firstre2 user-99=oneoarco user-100=battlere user-101=bedfords user-102=newstoda
Oct  1 18:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=ggaaorgu user-104=belle user-105=bemadonn user-106=skyfirec user-107=alexadmin user-108=innovat1 user-109=askhform user-110=stuartge user-111=nativene user-112=booff user-113=markward user-114=foundation user-115=vantagep user-116=athenare user-117=connect9 user-118=lbscrmod user-119=maflemin user-120=ulsukarm user-121=jarvisin user-122=spectrum user-123=hodgesonweb user-124=theblack user-125=agproduc user-126=still user-127=stephani user-128=leereyn1 user-129=lakesan1 user-130=brmrjxl user-131=strathar user-132=atestord user-133=sarafoundation user-134=wilsonsw user-135=megacards user-136=musorguk user-137=martsblo user-138=dickemery123 user-139=ptkxhsbt user-140=hhdugcor user-141=lbhyisi user-142=magichat feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 18:10:12 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 18:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:13 nativespace-cdp sudo[29678]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 18:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:13 nativespace-cdp sudo[29694]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-AvofA4zuDURHiG1W.~
Oct  1 18:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:13 nativespace-cdp sudo[29697]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-AvofA4zuDURHiG1W.~'
Oct  1 18:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:13 nativespace-cdp sudo[29700]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-AvofA4zuDURHiG1W.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 18:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:13 nativespace-cdp sudo[29704]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 18:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:13 nativespace-cdp sudo[29708]: pam_unix(sudo:session): session closed for user root
Oct  1 18:10:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 18:10:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 18:10:35 nativespace-cdp sudo[29785]: pam_unix(sudo:session): session closed for user root
Oct  1 18:11:34 nativespace-cdp sshd[30133]: Connection closed by 159.100.136.21 port 46164 [preauth]
Oct  1 18:16:36 nativespace-cdp sshd[31482]: Connection closed by 159.100.136.21 port 55826 [preauth]
Oct  1 18:21:33 nativespace-cdp sshd[584]: Connection closed by 159.100.136.21 port 37398 [preauth]
Oct  1 18:26:36 nativespace-cdp sshd[2200]: Connection closed by 159.100.136.21 port 47442 [preauth]
Oct  1 18:31:33 nativespace-cdp sshd[3551]: Connection closed by 159.100.136.21 port 57230 [preauth]
Oct  1 18:36:33 nativespace-cdp sshd[4848]: Connection closed by 159.100.136.21 port 38842 [preauth]
Oct  1 18:41:33 nativespace-cdp sshd[6098]: Connection closed by 159.100.136.21 port 48350 [preauth]
Oct  1 18:46:34 nativespace-cdp sshd[7346]: Connection closed by 159.100.136.21 port 58112 [preauth]
Oct  1 18:51:33 nativespace-cdp sshd[8548]: Connection closed by 159.100.136.21 port 39466 [preauth]
Oct  1 18:56:33 nativespace-cdp sshd[9682]: Connection closed by 159.100.136.21 port 49448 [preauth]
Oct  1 19:01:34 nativespace-cdp sshd[10886]: Connection closed by 159.100.136.21 port 58960 [preauth]
Oct  1 19:06:35 nativespace-cdp sshd[12086]: Connection closed by 159.100.136.21 port 40722 [preauth]
Oct  1 19:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 19:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:36 nativespace-cdp sudo[12534]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 19:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:36 nativespace-cdp sudo[12538]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 19:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:38 nativespace-cdp sudo[12543]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:38 nativespace-cdp sudo[12552]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 19:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:42 nativespace-cdp sudo[12555]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 19:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:42 nativespace-cdp sudo[12574]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 19:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:42 nativespace-cdp sudo[12577]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 19:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:42 nativespace-cdp sudo[12580]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 19:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:42 nativespace-cdp sudo[12583]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:43 nativespace-cdp sudo[12586]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 19:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:43 nativespace-cdp sudo[12589]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 19:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:45 nativespace-cdp sudo[12600]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 19:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:46 nativespace-cdp sudo[12605]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:46 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=design user-2=stagingerris user-3=dancinggardener user-4=ladburyp user-5=kategilpin user-6=havantho user-7=cath user-8=sketchy user-9=nvihkvu user-10=oubpgvbx user-11=tstardom user-12=what user-13=bakery user-14=crrtipdl user-15=sosevalu user-16=boldover user-17=nove user-18=romaldki user-19=hodgsonmail user-20=outdoorc user-21=ranxterc user-22=branko user-23=onlycont user-24=lucy user-25=attlebor user-26=david user-27=nbhavers user-28=careers user-29=chrisdal user-30=mcdermos user-31=jennimil user-32=tomandle user-33=eugincou user-34=courseme user-35=hirefootballgame user-36=cwsocial user-37=paulmca1 user-38=pugwash user-39=howardon user-40=cathski user-41=cambria1 user-42=ninejimm user-43=reliable user-44=nomistakes user-45=hidden user-46=tigerlet user-47=barbersh user-48=smrszyqg
Oct  1 19:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=isleofwi user-50=lkpier user-51=firstre5 user-52=donnychicago user-53=steakbridieme user-54=ctedorgu user-55=philmcph user-56=nscdp user-57=foods user-58=leftie user-59=health2045 user-60=fortunaz user-61=dhyana user-62=beauty user-63=darkstar user-64=eatspam user-65=nsceres user-66=fawcettd user-67=burydropin user-68=steve user-69=bwppodcast user-70=zebrapho user-71=asandcoc user-72=sibtoncc user-73=nativene user-74=innovat1 user-75=stuartge user-76=askhform user-77=alexadmin user-78=skyfirec user-79=newstoda user-80=ggaaorgu user-81=belle user-82=bemadonn user-83=bedfords user-84=vivienn1 user-85=firstre2 user-86=oneoarco user-87=battlere user-88=nstriton user-89=brighto1 user-90=connectedshoppin user-91=thqkgnbz user-92=accooper user-93=ianrayne user-94=hubmaster user-95=fetch user-96=carsinyo user-97=milloyco user-98=gilpin user-99=elecleis user-100=firstred user-101=highlegh user-102=southlon
Oct  1 19:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=firstrel user-104=clarkass user-105=costestimatorco user-106=coursemc user-107=opaiscyx user-108=ultbcrra user-109=seftvta user-110=jonhartl user-111=firstres user-112=magichat user-113=hhdugcor user-114=lbhyisi user-115=dickemery123 user-116=ptkxhsbt user-117=martsblo user-118=megacards user-119=musorguk user-120=wilsonsw user-121=strathar user-122=atestord user-123=sarafoundation user-124=brmrjxl user-125=lakesan1 user-126=stephani user-127=leereyn1 user-128=agproduc user-129=still user-130=spectrum user-131=hodgesonweb user-132=theblack user-133=jarvisin user-134=ulsukarm user-135=vantagep user-136=connect9 user-137=athenare user-138=lbscrmod user-139=maflemin user-140=foundation user-141=booff user-142=markward feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  1 19:09:46 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 19:09:46 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:48 nativespace-cdp sudo[12614]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 19:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:48 nativespace-cdp sudo[12619]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DB85dLcPHM7wnaWX.~
Oct  1 19:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:48 nativespace-cdp sudo[12622]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DB85dLcPHM7wnaWX.~'
Oct  1 19:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:48 nativespace-cdp sudo[12625]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-DB85dLcPHM7wnaWX.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 19:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:48 nativespace-cdp sudo[12629]: pam_unix(sudo:session): session closed for user root
Oct  1 19:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 19:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:09:48 nativespace-cdp sudo[12632]: pam_unix(sudo:session): session closed for user root
Oct  1 19:10:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 19:10:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 19:10:13 nativespace-cdp sudo[12827]: pam_unix(sudo:session): session closed for user root
Oct  1 19:11:33 nativespace-cdp sshd[13169]: Connection closed by 159.100.136.21 port 50268 [preauth]
Oct  1 19:16:35 nativespace-cdp sshd[14437]: Connection closed by 159.100.136.21 port 60260 [preauth]
Oct  1 19:21:33 nativespace-cdp crond[14997]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:33 nativespace-cdp crond[15008]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:33 nativespace-cdp crond[15002]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:33 nativespace-cdp crond[15003]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:33 nativespace-cdp crond[15018]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[15004]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[15007]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[14995]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[15020]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[15019]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[14992]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[14994]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[15005]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[15017]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[14993]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[14998]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[14996]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[15000]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[15001]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:34 nativespace-cdp crond[15009]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:35 nativespace-cdp crond[15006]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:21:35 nativespace-cdp crond[14999]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:22:01 nativespace-cdp crond[15083]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:22:01 nativespace-cdp CROND[14876]: pam_systemd(crond:session): Failed to release session: Connection timed out
Oct  1 19:22:01 nativespace-cdp crond[15084]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:24:15 nativespace-cdp sshd[15200]: Did not receive identification string from 159.100.136.21 port 41522
Oct  1 19:26:56 nativespace-cdp sshd[16269]: Did not receive identification string from 159.100.136.21 port 51288
Oct  1 19:28:35 nativespace-cdp crond[16507]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:28:37 nativespace-cdp crond[16506]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:31:01 nativespace-cdp CROND[15774]: pam_systemd(crond:session): Failed to release session: Input/output error
Oct  1 19:31:03 nativespace-cdp crond[16825]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16829]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16820]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16818]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16830]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16819]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16828]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16822]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16815]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16835]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16827]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16824]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16833]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16836]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16817]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16816]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16834]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16821]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16831]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16832]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:03 nativespace-cdp crond[16826]: pam_systemd(crond:session): Failed to create session: Connection reset by peer
Oct  1 19:31:04 nativespace-cdp crond[16823]: pam_systemd(crond:session): Failed to create session: Input/output error
Oct  1 19:31:35 nativespace-cdp sshd[16962]: Connection closed by 159.100.136.21 port 60770 [preauth]
Oct  1 19:36:19 nativespace-cdp crond[18027]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:20 nativespace-cdp crond[18016]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:20 nativespace-cdp crond[18015]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:20 nativespace-cdp crond[18025]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:20 nativespace-cdp crond[18019]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:20 nativespace-cdp crond[18031]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:21 nativespace-cdp crond[18018]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:21 nativespace-cdp crond[18022]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:21 nativespace-cdp crond[18035]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:22 nativespace-cdp crond[18021]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:22 nativespace-cdp crond[18024]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:22 nativespace-cdp crond[18033]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:22 nativespace-cdp crond[18034]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:22 nativespace-cdp crond[18017]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:22 nativespace-cdp crond[18023]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:23 nativespace-cdp crond[18028]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:23 nativespace-cdp crond[18030]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:23 nativespace-cdp crond[18032]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:23 nativespace-cdp crond[18029]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:23 nativespace-cdp crond[18026]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:36:36 nativespace-cdp sshd[18267]: Connection closed by 159.100.136.21 port 42430 [preauth]
Oct  1 19:37:44 nativespace-cdp crond[18345]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:37:45 nativespace-cdp crond[18344]: pam_systemd(crond:session): Failed to create session: Connection timed out
Oct  1 19:41:34 nativespace-cdp sshd[19588]: Connection closed by 159.100.136.21 port 51780 [preauth]
Oct  1 19:46:34 nativespace-cdp sshd[20854]: Connection closed by 159.100.136.21 port 32908 [preauth]
Oct  1 19:51:34 nativespace-cdp sshd[22381]: Connection closed by 159.100.136.21 port 41928 [preauth]
Oct  1 19:56:34 nativespace-cdp sshd[23673]: Connection closed by 159.100.136.21 port 51180 [preauth]
Oct  1 20:01:33 nativespace-cdp sshd[24692]: Connection closed by 159.100.136.21 port 60268 [preauth]
Oct  1 20:06:34 nativespace-cdp sshd[26128]: Connection closed by 159.100.136.21 port 41982 [preauth]
Oct  1 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:39 nativespace-cdp sudo[26781]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:39 nativespace-cdp sudo[26786]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 20:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:41 nativespace-cdp sudo[26790]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:41 nativespace-cdp sudo[26801]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 20:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:45 nativespace-cdp sudo[26804]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:45 nativespace-cdp sudo[26828]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:45 nativespace-cdp sudo[26831]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:45 nativespace-cdp sudo[26834]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:45 nativespace-cdp sudo[26837]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:45 nativespace-cdp sudo[26841]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 20:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:45 nativespace-cdp sudo[26845]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 20:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:47 nativespace-cdp sudo[26856]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 20:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:48 nativespace-cdp sudo[26862]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=tomandle user-2=jennimil user-3=mcdermos user-4=chrisdal user-5=careers user-6=nbhavers user-7=david user-8=attlebor user-9=lucy user-10=onlycont user-11=branko user-12=hodgsonmail user-13=ranxterc user-14=outdoorc user-15=romaldki user-16=nove user-17=boldover user-18=sosevalu user-19=crrtipdl user-20=bakery user-21=what user-22=oubpgvbx user-23=tstardom user-24=nvihkvu user-25=cath user-26=sketchy user-27=havantho user-28=kategilpin user-29=ladburyp user-30=stagingerris user-31=dancinggardener user-32=design user-33=sibtoncc user-34=asandcoc user-35=zebrapho user-36=bwppodcast user-37=steve user-38=burydropin user-39=fawcettd user-40=nsceres user-41=eatspam user-42=darkstar user-43=beauty user-44=dhyana user-45=health2045 user-46=fortunaz user-47=foods user-48=leftie user-49=nscdp
Oct  1 20:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=philmcph user-51=ctedorgu user-52=firstre5 user-53=steakbridieme user-54=donnychicago user-55=lkpier user-56=smrszyqg user-57=isleofwi user-58=tigerlet user-59=barbersh user-60=hidden user-61=nomistakes user-62=reliable user-63=ninejimm user-64=cambria1 user-65=cathski user-66=howardon user-67=pugwash user-68=paulmca1 user-69=cwsocial user-70=hirefootballgame user-71=courseme user-72=eugincou user-73=firstres user-74=seftvta user-75=jonhartl user-76=ultbcrra user-77=opaiscyx user-78=coursemc user-79=costestimatorco user-80=firstrel user-81=clarkass user-82=southlon user-83=highlegh user-84=firstred user-85=elecleis user-86=milloyco user-87=gilpin user-88=carsinyo user-89=fetch user-90=hubmaster user-91=ianrayne user-92=accooper user-93=thqkgnbz user-94=connectedshoppin user-95=brighto1 user-96=nstriton user-97=battlere user-98=oneoarco user-99=firstre2 user-100=vivienn1 user-101=bedfords user-102=bemadonn
Oct  1 20:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=belle user-104=ggaaorgu user-105=newstoda user-106=alexadmin user-107=skyfirec user-108=stuartge user-109=askhform user-110=innovat1 user-111=nativene user-112=booff user-113=markward user-114=foundation user-115=maflemin user-116=lbscrmod user-117=athenare user-118=connect9 user-119=vantagep user-120=ulsukarm user-121=jarvisin user-122=theblack user-123=hodgesonweb user-124=spectrum user-125=still user-126=agproduc user-127=leereyn1 user-128=stephani user-129=lakesan1 user-130=brmrjxl user-131=sarafoundation user-132=atestord user-133=strathar user-134=wilsonsw user-135=musorguk user-136=megacards user-137=martsblo user-138=ptkxhsbt user-139=dickemery123 user-140=lbhyisi user-141=hhdugcor user-142=magichat feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 20:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 20:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:49 nativespace-cdp sudo[26867]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 20:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:50 nativespace-cdp sudo[26876]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6PdWdSePp5fL8wyA.~
Oct  1 20:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:50 nativespace-cdp sudo[26879]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6PdWdSePp5fL8wyA.~'
Oct  1 20:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:50 nativespace-cdp sudo[26882]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6PdWdSePp5fL8wyA.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 20:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:50 nativespace-cdp sudo[26886]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 20:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:50 nativespace-cdp sudo[26889]: pam_unix(sudo:session): session closed for user root
Oct  1 20:09:58 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 20:09:58 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 20:09:58 nativespace-cdp sudo[26922]: pam_unix(sudo:session): session closed for user root
Oct  1 20:10:02 nativespace-cdp sshd[26520]: Connection closed by 175.102.11.225 port 57765 [preauth]
Oct  1 20:11:33 nativespace-cdp sshd[27494]: Connection closed by 159.100.136.21 port 51324 [preauth]
Oct  1 20:16:33 nativespace-cdp sshd[28712]: Connection closed by 159.100.136.21 port 60830 [preauth]
Oct  1 20:21:33 nativespace-cdp sshd[29956]: Connection closed by 159.100.136.21 port 42308 [preauth]
Oct  1 20:26:33 nativespace-cdp sshd[31126]: Connection closed by 159.100.136.21 port 51506 [preauth]
Oct  1 20:31:33 nativespace-cdp sshd[32400]: Connection closed by 159.100.136.21 port 32794 [preauth]
Oct  1 20:36:34 nativespace-cdp sshd[1299]: Connection closed by 159.100.136.21 port 42246 [preauth]
Oct  1 20:41:33 nativespace-cdp sshd[2454]: Connection closed by 159.100.136.21 port 51920 [preauth]
Oct  1 20:42:21 nativespace-cdp sshd[2604]: Did not receive identification string from 199.45.155.96 port 41326
Oct  1 20:42:41 nativespace-cdp sshd[2614]: Connection closed by 199.45.155.96 port 41368 [preauth]
Oct  1 20:46:33 nativespace-cdp sshd[3506]: Connection closed by 159.100.136.21 port 33420 [preauth]
Oct  1 20:51:33 nativespace-cdp sshd[4692]: Connection closed by 159.100.136.21 port 42430 [preauth]
Oct  1 20:56:33 nativespace-cdp sshd[5832]: Connection closed by 159.100.136.21 port 51658 [preauth]
Oct  1 21:01:33 nativespace-cdp sshd[7083]: Connection closed by 159.100.136.21 port 60874 [preauth]
Oct  1 21:06:35 nativespace-cdp sshd[8157]: Connection closed by 159.100.136.21 port 42842 [preauth]
Oct  1 21:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 21:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:33 nativespace-cdp sudo[8752]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 21:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:33 nativespace-cdp sudo[8755]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 21:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:35 nativespace-cdp sudo[8760]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 21:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:35 nativespace-cdp sudo[8765]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 21:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:38 nativespace-cdp sudo[8769]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 21:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:38 nativespace-cdp sudo[8778]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 21:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:38 nativespace-cdp sudo[8782]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 21:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:38 nativespace-cdp sudo[8785]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 21:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:38 nativespace-cdp sudo[8788]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 21:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:38 nativespace-cdp sudo[8791]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 21:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:38 nativespace-cdp sudo[8794]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:42 nativespace-cdp sudo[8817]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:42 nativespace-cdp sudo[8821]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=elecleis user-2=milloyco user-3=gilpin user-4=fetch user-5=carsinyo user-6=hubmaster user-7=ianrayne user-8=accooper user-9=thqkgnbz user-10=connectedshoppin user-11=firstres user-12=ultbcrra user-13=seftvta user-14=jonhartl user-15=opaiscyx user-16=coursemc user-17=costestimatorco user-18=clarkass user-19=firstrel user-20=highlegh user-21=southlon user-22=firstred user-23=alexadmin user-24=skyfirec user-25=askhform user-26=stuartge user-27=innovat1 user-28=nativene user-29=nstriton user-30=brighto1 user-31=oneoarco user-32=battlere user-33=vivienn1 user-34=firstre2 user-35=bedfords user-36=bemadonn user-37=newstoda user-38=belle user-39=ggaaorgu user-40=jarvisin user-41=theblack user-42=hodgesonweb user-43=spectrum user-44=agproduc user-45=still user-46=leereyn1 user-47=stephani user-48=booff
Oct  1 21:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=markward user-50=foundation user-51=lbscrmod user-52=maflemin user-53=vantagep user-54=athenare user-55=connect9 user-56=ulsukarm user-57=martsblo user-58=ptkxhsbt user-59=dickemery123 user-60=hhdugcor user-61=lbhyisi user-62=magichat user-63=lakesan1 user-64=brmrjxl user-65=atestord user-66=sarafoundation user-67=strathar user-68=wilsonsw user-69=megacards user-70=musorguk user-71=lucy user-72=attlebor user-73=onlycont user-74=branko user-75=outdoorc user-76=hodgsonmail user-77=ranxterc user-78=romaldki user-79=tomandle user-80=jennimil user-81=mcdermos user-82=chrisdal user-83=david user-84=nbhavers user-85=careers user-86=what user-87=oubpgvbx user-88=tstardom user-89=nvihkvu user-90=havantho user-91=sketchy user-92=cath user-93=kategilpin user-94=stagingerris user-95=dancinggardener user-96=ladburyp user-97=design user-98=nove user-99=boldover user-100=crrtipdl user-101=sosevalu user-102=bakery
Oct  1 21:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=fawcettd user-104=burydropin user-105=nsceres user-106=darkstar user-107=eatspam user-108=beauty user-109=dhyana user-110=asandcoc user-111=sibtoncc user-112=zebrapho user-113=bwppodcast user-114=steve user-115=reliable user-116=ninejimm user-117=cambria1 user-118=cathski user-119=cwsocial user-120=paulmca1 user-121=howardon user-122=pugwash user-123=hirefootballgame user-124=courseme user-125=eugincou user-126=leftie user-127=foods user-128=fortunaz user-129=health2045 user-130=nscdp user-131=donnychicago user-132=steakbridieme user-133=firstre5 user-134=philmcph user-135=ctedorgu user-136=lkpier user-137=isleofwi user-138=smrszyqg user-139=barbersh user-140=tigerlet user-141=nomistakes user-142=hidden feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 21:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 21:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:43 nativespace-cdp sudo[8826]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 21:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:44 nativespace-cdp sudo[8833]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-U3l1u1b8JKUFPQne.~
Oct  1 21:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:44 nativespace-cdp sudo[8836]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-U3l1u1b8JKUFPQne.~'
Oct  1 21:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:44 nativespace-cdp sudo[8839]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-U3l1u1b8JKUFPQne.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 21:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:44 nativespace-cdp sudo[8843]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 21:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:44 nativespace-cdp sudo[8846]: pam_unix(sudo:session): session closed for user root
Oct  1 21:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Oct  1 21:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:09:45 nativespace-cdp sudo[8849]: pam_unix(sudo:session): session closed for user root
Oct  1 21:10:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 21:10:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:10:24 nativespace-cdp sudo[9065]: pam_unix(sudo:session): session closed for user root
Oct  1 21:11:33 nativespace-cdp sshd[9363]: Connection closed by 159.100.136.21 port 52498 [preauth]
Oct  1 21:16:33 nativespace-cdp sshd[10495]: Connection closed by 159.100.136.21 port 34100 [preauth]
Oct  1 21:21:33 nativespace-cdp sshd[11734]: Connection closed by 159.100.136.21 port 43462 [preauth]
Oct  1 21:26:35 nativespace-cdp sshd[12748]: Connection closed by 159.100.136.21 port 53032 [preauth]
Oct  1 21:31:33 nativespace-cdp sshd[13873]: Connection closed by 159.100.136.21 port 34022 [preauth]
Oct  1 21:36:36 nativespace-cdp sshd[15076]: Connection closed by 159.100.136.21 port 43698 [preauth]
Oct  1 21:41:33 nativespace-cdp sshd[16017]: Connection closed by 159.100.136.21 port 53246 [preauth]
Oct  1 21:46:35 nativespace-cdp sshd[16999]: Connection closed by 159.100.136.21 port 34562 [preauth]
Oct  1 21:51:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 21:51:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:51:06 nativespace-cdp sudo[18258]: pam_unix(sudo:session): session closed for user root
Oct  1 21:51:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status opaiscyx
Oct  1 21:51:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 21:51:07 nativespace-cdp sudo[18263]: pam_unix(sudo:session): session closed for user root
Oct  1 21:51:33 nativespace-cdp sshd[18399]: Connection closed by 159.100.136.21 port 43924 [preauth]
Oct  1 21:56:34 nativespace-cdp sshd[19769]: Connection closed by 159.100.136.21 port 53740 [preauth]
Oct  1 22:01:33 nativespace-cdp sshd[22452]: Connection closed by 159.100.136.21 port 34766 [preauth]
Oct  1 22:06:35 nativespace-cdp sshd[23726]: Connection closed by 159.100.136.21 port 44562 [preauth]
Oct  1 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:34 nativespace-cdp sudo[24245]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:34 nativespace-cdp sudo[24249]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 22:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:36 nativespace-cdp sudo[24253]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 22:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:36 nativespace-cdp sudo[24258]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 22:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:39 nativespace-cdp sudo[24261]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:39 nativespace-cdp sudo[24276]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:39 nativespace-cdp sudo[24279]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 22:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:39 nativespace-cdp sudo[24282]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 22:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:40 nativespace-cdp sudo[24285]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 22:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:40 nativespace-cdp sudo[24288]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 22:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:40 nativespace-cdp sudo[24292]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 22:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:47 nativespace-cdp sudo[24324]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 22:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:48 nativespace-cdp sudo[24329]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=foundation user-3=booff user-4=markward user-5=lbscrmod user-6=maflemin user-7=vantagep user-8=athenare user-9=connect9 user-10=agproduc user-11=still user-12=leereyn1 user-13=stephani user-14=jarvisin user-15=theblack user-16=hodgesonweb user-17=spectrum user-18=wilsonsw user-19=megacards user-20=musorguk user-21=brmrjxl user-22=lakesan1 user-23=atestord user-24=sarafoundation user-25=strathar user-26=hhdugcor user-27=lbhyisi user-28=magichat user-29=martsblo user-30=ptkxhsbt user-31=dickemery123 user-32=costestimatorco user-33=clarkass user-34=firstrel user-35=highlegh user-36=southlon user-37=firstred user-38=firstres user-39=ultbcrra user-40=seftvta user-41=jonhartl user-42=coursemc user-43=opaiscyx user-44=ianrayne user-45=accooper user-46=thqkgnbz user-47=connectedshoppin
Oct  1 22:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=elecleis user-49=milloyco user-50=gilpin user-51=fetch user-52=carsinyo user-53=hubmaster user-54=bedfords user-55=bemadonn user-56=newstoda user-57=belle user-58=ggaaorgu user-59=nstriton user-60=brighto1 user-61=oneoarco user-62=battlere user-63=vivienn1 user-64=firstre2 user-65=askhform user-66=stuartge user-67=innovat1 user-68=nativene user-69=skyfirec user-70=alexadmin user-71=zebrapho user-72=bwppodcast user-73=steve user-74=sibtoncc user-75=asandcoc user-76=darkstar user-77=eatspam user-78=beauty user-79=dhyana user-80=fawcettd user-81=burydropin user-82=nsceres user-83=smrszyqg user-84=isleofwi user-85=tigerlet user-86=barbersh user-87=nomistakes user-88=hidden user-89=leftie user-90=foods user-91=fortunaz user-92=health2045 user-93=nscdp user-94=firstre5 user-95=donnychicago user-96=steakbridieme user-97=philmcph user-98=ctedorgu user-99=lkpier user-100=hirefootballgame user-101=courseme
Oct  1 22:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=eugincou user-103=reliable user-104=ninejimm user-105=cambria1 user-106=cathski user-107=cwsocial user-108=pugwash user-109=paulmca1 user-110=howardon user-111=mcdermos user-112=chrisdal user-113=david user-114=careers user-115=nbhavers user-116=tomandle user-117=jennimil user-118=branko user-119=hodgsonmail user-120=outdoorc user-121=ranxterc user-122=romaldki user-123=lucy user-124=attlebor user-125=onlycont user-126=crrtipdl user-127=sosevalu user-128=bakery user-129=nove user-130=boldover user-131=kategilpin user-132=dancinggardener user-133=stagingerris user-134=ladburyp user-135=design user-136=what user-137=tstardom user-138=oubpgvbx user-139=nvihkvu user-140=havantho user-141=cath user-142=sketchy feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 22:09:48 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 22:09:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:49 nativespace-cdp sudo[24334]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 22:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:50 nativespace-cdp sudo[24339]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YEa59ZWOLCQAxnKR.~
Oct  1 22:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:50 nativespace-cdp sudo[24342]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YEa59ZWOLCQAxnKR.~'
Oct  1 22:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:50 nativespace-cdp sudo[24345]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-YEa59ZWOLCQAxnKR.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 22:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:50 nativespace-cdp sudo[24349]: pam_unix(sudo:session): session closed for user root
Oct  1 22:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 22:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:09:50 nativespace-cdp sudo[24352]: pam_unix(sudo:session): session closed for user root
Oct  1 22:10:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 22:10:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 22:10:13 nativespace-cdp sudo[24531]: pam_unix(sudo:session): session closed for user root
Oct  1 22:11:33 nativespace-cdp sshd[24766]: Connection closed by 159.100.136.21 port 53998 [preauth]
Oct  1 22:16:35 nativespace-cdp sshd[25746]: Connection closed by 159.100.136.21 port 35412 [preauth]
Oct  1 22:21:33 nativespace-cdp sshd[26955]: Connection closed by 159.100.136.21 port 45000 [preauth]
Oct  1 22:26:33 nativespace-cdp sshd[27924]: Connection closed by 159.100.136.21 port 54732 [preauth]
Oct  1 22:26:45 nativespace-cdp sshd[27951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61  user=root
Oct  1 22:26:45 nativespace-cdp sshd[27951]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:26:47 nativespace-cdp sshd[27951]: Failed password for root from 167.99.237.61 port 34842 ssh2
Oct  1 22:26:47 nativespace-cdp sshd[27951]: Received disconnect from 167.99.237.61 port 34842:11: Bye Bye [preauth]
Oct  1 22:26:47 nativespace-cdp sshd[27951]: Disconnected from 167.99.237.61 port 34842 [preauth]
Oct  1 22:27:33 nativespace-cdp sshd[28168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.94.223  user=root
Oct  1 22:27:33 nativespace-cdp sshd[28168]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:27:34 nativespace-cdp sshd[28168]: Failed password for root from 104.244.94.223 port 47104 ssh2
Oct  1 22:27:35 nativespace-cdp sshd[28168]: Received disconnect from 104.244.94.223 port 47104:11: Bye Bye [preauth]
Oct  1 22:27:35 nativespace-cdp sshd[28168]: Disconnected from 104.244.94.223 port 47104 [preauth]
Oct  1 22:27:37 nativespace-cdp sshd[28175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.0  user=root
Oct  1 22:27:37 nativespace-cdp sshd[28175]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:27:39 nativespace-cdp sshd[28175]: Failed password for root from 113.142.134.0 port 42608 ssh2
Oct  1 22:27:39 nativespace-cdp sshd[28175]: Received disconnect from 113.142.134.0 port 42608:11: Bye Bye [preauth]
Oct  1 22:27:39 nativespace-cdp sshd[28175]: Disconnected from 113.142.134.0 port 42608 [preauth]
Oct  1 22:27:56 nativespace-cdp sshd[28222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.72.50  user=root
Oct  1 22:27:56 nativespace-cdp sshd[28222]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:27:58 nativespace-cdp sshd[28222]: Failed password for root from 178.217.72.50 port 51548 ssh2
Oct  1 22:27:58 nativespace-cdp sshd[28222]: Received disconnect from 178.217.72.50 port 51548:11: Bye Bye [preauth]
Oct  1 22:27:58 nativespace-cdp sshd[28222]: Disconnected from 178.217.72.50 port 51548 [preauth]
Oct  1 22:28:05 nativespace-cdp sshd[28376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.169.212  user=root
Oct  1 22:28:05 nativespace-cdp sshd[28376]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:28:06 nativespace-cdp sshd[28376]: Failed password for root from 142.93.169.212 port 37998 ssh2
Oct  1 22:28:07 nativespace-cdp sshd[28376]: Received disconnect from 142.93.169.212 port 37998:11: Bye Bye [preauth]
Oct  1 22:28:07 nativespace-cdp sshd[28376]: Disconnected from 142.93.169.212 port 37998 [preauth]
Oct  1 22:31:33 nativespace-cdp sshd[29146]: Connection closed by 159.100.136.21 port 36232 [preauth]
Oct  1 22:33:02 nativespace-cdp sshd[29424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61  user=root
Oct  1 22:33:02 nativespace-cdp sshd[29424]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:33:05 nativespace-cdp sshd[29424]: Failed password for root from 167.99.237.61 port 38380 ssh2
Oct  1 22:33:05 nativespace-cdp sshd[29424]: Received disconnect from 167.99.237.61 port 38380:11: Bye Bye [preauth]
Oct  1 22:33:05 nativespace-cdp sshd[29424]: Disconnected from 167.99.237.61 port 38380 [preauth]
Oct  1 22:33:11 nativespace-cdp sshd[29471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.169.212  user=root
Oct  1 22:33:11 nativespace-cdp sshd[29471]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:33:13 nativespace-cdp sshd[29471]: Failed password for root from 142.93.169.212 port 41756 ssh2
Oct  1 22:33:13 nativespace-cdp sshd[29471]: Received disconnect from 142.93.169.212 port 41756:11: Bye Bye [preauth]
Oct  1 22:33:13 nativespace-cdp sshd[29471]: Disconnected from 142.93.169.212 port 41756 [preauth]
Oct  1 22:33:16 nativespace-cdp sshd[29482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.72.50  user=root
Oct  1 22:33:16 nativespace-cdp sshd[29482]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:33:18 nativespace-cdp sshd[29482]: Failed password for root from 178.217.72.50 port 51554 ssh2
Oct  1 22:33:18 nativespace-cdp sshd[29482]: Received disconnect from 178.217.72.50 port 51554:11: Bye Bye [preauth]
Oct  1 22:33:18 nativespace-cdp sshd[29482]: Disconnected from 178.217.72.50 port 51554 [preauth]
Oct  1 22:33:36 nativespace-cdp sshd[29519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61  user=root
Oct  1 22:33:36 nativespace-cdp sshd[29519]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:33:38 nativespace-cdp sshd[29519]: Failed password for root from 167.99.237.61 port 50732 ssh2
Oct  1 22:33:38 nativespace-cdp sshd[29519]: Received disconnect from 167.99.237.61 port 50732:11: Bye Bye [preauth]
Oct  1 22:33:38 nativespace-cdp sshd[29519]: Disconnected from 167.99.237.61 port 50732 [preauth]
Oct  1 22:33:52 nativespace-cdp sshd[29582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.0  user=root
Oct  1 22:33:52 nativespace-cdp sshd[29582]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:33:53 nativespace-cdp sshd[29590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.169.212  user=root
Oct  1 22:33:53 nativespace-cdp sshd[29590]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:33:55 nativespace-cdp sshd[29582]: Failed password for root from 113.142.134.0 port 40602 ssh2
Oct  1 22:33:55 nativespace-cdp sshd[29582]: Received disconnect from 113.142.134.0 port 40602:11: Bye Bye [preauth]
Oct  1 22:33:55 nativespace-cdp sshd[29582]: Disconnected from 113.142.134.0 port 40602 [preauth]
Oct  1 22:33:55 nativespace-cdp sshd[29590]: Failed password for root from 142.93.169.212 port 33238 ssh2
Oct  1 22:33:55 nativespace-cdp sshd[29590]: Received disconnect from 142.93.169.212 port 33238:11: Bye Bye [preauth]
Oct  1 22:33:55 nativespace-cdp sshd[29590]: Disconnected from 142.93.169.212 port 33238 [preauth]
Oct  1 22:34:02 nativespace-cdp sshd[29640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.72.50  user=root
Oct  1 22:34:02 nativespace-cdp sshd[29640]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:34:04 nativespace-cdp sshd[29640]: Failed password for root from 178.217.72.50 port 51566 ssh2
Oct  1 22:34:04 nativespace-cdp sshd[29640]: Received disconnect from 178.217.72.50 port 51566:11: Bye Bye [preauth]
Oct  1 22:34:04 nativespace-cdp sshd[29640]: Disconnected from 178.217.72.50 port 51566 [preauth]
Oct  1 22:34:15 nativespace-cdp sshd[29697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61  user=root
Oct  1 22:34:15 nativespace-cdp sshd[29697]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:34:17 nativespace-cdp sshd[29697]: Failed password for root from 167.99.237.61 port 34814 ssh2
Oct  1 22:34:17 nativespace-cdp sshd[29697]: Received disconnect from 167.99.237.61 port 34814:11: Bye Bye [preauth]
Oct  1 22:34:17 nativespace-cdp sshd[29697]: Disconnected from 167.99.237.61 port 34814 [preauth]
Oct  1 22:34:30 nativespace-cdp sshd[29719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.169.212  user=root
Oct  1 22:34:30 nativespace-cdp sshd[29719]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:34:32 nativespace-cdp sshd[29719]: Failed password for root from 142.93.169.212 port 34494 ssh2
Oct  1 22:34:32 nativespace-cdp sshd[29719]: Received disconnect from 142.93.169.212 port 34494:11: Bye Bye [preauth]
Oct  1 22:34:32 nativespace-cdp sshd[29719]: Disconnected from 142.93.169.212 port 34494 [preauth]
Oct  1 22:34:36 nativespace-cdp sshd[29740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.0  user=root
Oct  1 22:34:36 nativespace-cdp sshd[29740]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:34:38 nativespace-cdp sshd[29740]: Failed password for root from 113.142.134.0 port 52602 ssh2
Oct  1 22:34:38 nativespace-cdp sshd[29740]: Received disconnect from 113.142.134.0 port 52602:11: Bye Bye [preauth]
Oct  1 22:34:38 nativespace-cdp sshd[29740]: Disconnected from 113.142.134.0 port 52602 [preauth]
Oct  1 22:34:47 nativespace-cdp sshd[29801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.72.50  user=root
Oct  1 22:34:47 nativespace-cdp sshd[29801]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:34:50 nativespace-cdp sshd[29801]: Failed password for root from 178.217.72.50 port 51586 ssh2
Oct  1 22:34:54 nativespace-cdp sshd[29883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61  user=root
Oct  1 22:34:54 nativespace-cdp sshd[29883]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:34:54 nativespace-cdp sshd[29801]: Received disconnect from 178.217.72.50 port 51586:11: Bye Bye [preauth]
Oct  1 22:34:54 nativespace-cdp sshd[29801]: Disconnected from 178.217.72.50 port 51586 [preauth]
Oct  1 22:34:56 nativespace-cdp sshd[29883]: Failed password for root from 167.99.237.61 port 47028 ssh2
Oct  1 22:34:56 nativespace-cdp sshd[29883]: Received disconnect from 167.99.237.61 port 47028:11: Bye Bye [preauth]
Oct  1 22:34:56 nativespace-cdp sshd[29883]: Disconnected from 167.99.237.61 port 47028 [preauth]
Oct  1 22:35:07 nativespace-cdp sshd[30107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.169.212  user=root
Oct  1 22:35:07 nativespace-cdp sshd[30107]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:35:08 nativespace-cdp sshd[30107]: Failed password for root from 142.93.169.212 port 57946 ssh2
Oct  1 22:35:08 nativespace-cdp sshd[30107]: Received disconnect from 142.93.169.212 port 57946:11: Bye Bye [preauth]
Oct  1 22:35:08 nativespace-cdp sshd[30107]: Disconnected from 142.93.169.212 port 57946 [preauth]
Oct  1 22:35:25 nativespace-cdp sshd[30188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.0  user=root
Oct  1 22:35:25 nativespace-cdp sshd[30188]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:35:27 nativespace-cdp sshd[30188]: Failed password for root from 113.142.134.0 port 36382 ssh2
Oct  1 22:35:27 nativespace-cdp sshd[30188]: Received disconnect from 113.142.134.0 port 36382:11: Bye Bye [preauth]
Oct  1 22:35:27 nativespace-cdp sshd[30188]: Disconnected from 113.142.134.0 port 36382 [preauth]
Oct  1 22:35:30 nativespace-cdp sshd[30208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61  user=root
Oct  1 22:35:30 nativespace-cdp sshd[30208]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:35:31 nativespace-cdp sshd[30208]: Failed password for root from 167.99.237.61 port 59332 ssh2
Oct  1 22:35:31 nativespace-cdp sshd[30208]: Received disconnect from 167.99.237.61 port 59332:11: Bye Bye [preauth]
Oct  1 22:35:31 nativespace-cdp sshd[30208]: Disconnected from 167.99.237.61 port 59332 [preauth]
Oct  1 22:35:35 nativespace-cdp sshd[30222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.72.50  user=root
Oct  1 22:35:35 nativespace-cdp sshd[30222]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:35:36 nativespace-cdp sshd[30222]: Failed password for root from 178.217.72.50 port 51600 ssh2
Oct  1 22:35:36 nativespace-cdp sshd[30222]: Received disconnect from 178.217.72.50 port 51600:11: Bye Bye [preauth]
Oct  1 22:35:36 nativespace-cdp sshd[30222]: Disconnected from 178.217.72.50 port 51600 [preauth]
Oct  1 22:35:42 nativespace-cdp sshd[30256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.169.212  user=root
Oct  1 22:35:42 nativespace-cdp sshd[30256]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:35:43 nativespace-cdp sshd[30256]: Failed password for root from 142.93.169.212 port 60888 ssh2
Oct  1 22:35:47 nativespace-cdp sshd[30256]: Received disconnect from 142.93.169.212 port 60888:11: Bye Bye [preauth]
Oct  1 22:35:47 nativespace-cdp sshd[30256]: Disconnected from 142.93.169.212 port 60888 [preauth]
Oct  1 22:36:09 nativespace-cdp sshd[30312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.0  user=root
Oct  1 22:36:09 nativespace-cdp sshd[30312]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:36:12 nativespace-cdp sshd[30312]: Failed password for root from 113.142.134.0 port 48390 ssh2
Oct  1 22:36:15 nativespace-cdp sshd[30312]: Received disconnect from 113.142.134.0 port 48390:11: Bye Bye [preauth]
Oct  1 22:36:15 nativespace-cdp sshd[30312]: Disconnected from 113.142.134.0 port 48390 [preauth]
Oct  1 22:36:16 nativespace-cdp sshd[30325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.169.212  user=root
Oct  1 22:36:16 nativespace-cdp sshd[30325]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:36:17 nativespace-cdp sshd[30325]: Failed password for root from 142.93.169.212 port 34824 ssh2
Oct  1 22:36:17 nativespace-cdp sshd[30325]: Received disconnect from 142.93.169.212 port 34824:11: Bye Bye [preauth]
Oct  1 22:36:17 nativespace-cdp sshd[30325]: Disconnected from 142.93.169.212 port 34824 [preauth]
Oct  1 22:36:18 nativespace-cdp sshd[30331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.72.50  user=root
Oct  1 22:36:18 nativespace-cdp sshd[30331]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:36:19 nativespace-cdp sshd[30331]: Failed password for root from 178.217.72.50 port 51626 ssh2
Oct  1 22:36:19 nativespace-cdp sshd[30331]: Received disconnect from 178.217.72.50 port 51626:11: Bye Bye [preauth]
Oct  1 22:36:19 nativespace-cdp sshd[30331]: Disconnected from 178.217.72.50 port 51626 [preauth]
Oct  1 22:36:34 nativespace-cdp sshd[30355]: Connection closed by 159.100.136.21 port 46016 [preauth]
Oct  1 22:36:39 nativespace-cdp sshd[30367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61  user=root
Oct  1 22:36:39 nativespace-cdp sshd[30367]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:36:41 nativespace-cdp sshd[30367]: Failed password for root from 167.99.237.61 port 55684 ssh2
Oct  1 22:36:41 nativespace-cdp sshd[30367]: Received disconnect from 167.99.237.61 port 55684:11: Bye Bye [preauth]
Oct  1 22:36:41 nativespace-cdp sshd[30367]: Disconnected from 167.99.237.61 port 55684 [preauth]
Oct  1 22:36:52 nativespace-cdp sshd[30482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.169.212  user=root
Oct  1 22:36:52 nativespace-cdp sshd[30482]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:36:55 nativespace-cdp sshd[30482]: Failed password for root from 142.93.169.212 port 44562 ssh2
Oct  1 22:36:58 nativespace-cdp sshd[30482]: Received disconnect from 142.93.169.212 port 44562:11: Bye Bye [preauth]
Oct  1 22:36:58 nativespace-cdp sshd[30482]: Disconnected from 142.93.169.212 port 44562 [preauth]
Oct  1 22:36:59 nativespace-cdp sshd[30489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.0  user=root
Oct  1 22:36:59 nativespace-cdp sshd[30489]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:36:59 nativespace-cdp sshd[30492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.72.50  user=root
Oct  1 22:36:59 nativespace-cdp sshd[30492]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:37:02 nativespace-cdp sshd[30489]: Failed password for root from 113.142.134.0 port 60394 ssh2
Oct  1 22:37:02 nativespace-cdp sshd[30492]: Failed password for root from 178.217.72.50 port 51636 ssh2
Oct  1 22:37:02 nativespace-cdp sshd[30492]: Received disconnect from 178.217.72.50 port 51636:11: Bye Bye [preauth]
Oct  1 22:37:02 nativespace-cdp sshd[30492]: Disconnected from 178.217.72.50 port 51636 [preauth]
Oct  1 22:37:02 nativespace-cdp sshd[30489]: Received disconnect from 113.142.134.0 port 60394:11: Bye Bye [preauth]
Oct  1 22:37:02 nativespace-cdp sshd[30489]: Disconnected from 113.142.134.0 port 60394 [preauth]
Oct  1 22:37:15 nativespace-cdp sshd[30545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61  user=root
Oct  1 22:37:15 nativespace-cdp sshd[30545]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:37:17 nativespace-cdp sshd[30545]: Failed password for root from 167.99.237.61 port 39718 ssh2
Oct  1 22:37:17 nativespace-cdp sshd[30545]: Received disconnect from 167.99.237.61 port 39718:11: Bye Bye [preauth]
Oct  1 22:37:17 nativespace-cdp sshd[30545]: Disconnected from 167.99.237.61 port 39718 [preauth]
Oct  1 22:37:30 nativespace-cdp sshd[30583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.169.212  user=root
Oct  1 22:37:30 nativespace-cdp sshd[30583]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:37:31 nativespace-cdp sshd[30583]: Failed password for root from 142.93.169.212 port 56790 ssh2
Oct  1 22:37:35 nativespace-cdp sshd[30583]: Received disconnect from 142.93.169.212 port 56790:11: Bye Bye [preauth]
Oct  1 22:37:35 nativespace-cdp sshd[30583]: Disconnected from 142.93.169.212 port 56790 [preauth]
Oct  1 22:37:38 nativespace-cdp sshd[30604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.72.50  user=root
Oct  1 22:37:38 nativespace-cdp sshd[30604]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:37:40 nativespace-cdp sshd[30604]: Failed password for root from 178.217.72.50 port 51662 ssh2
Oct  1 22:37:41 nativespace-cdp sshd[30604]: Received disconnect from 178.217.72.50 port 51662:11: Bye Bye [preauth]
Oct  1 22:37:41 nativespace-cdp sshd[30604]: Disconnected from 178.217.72.50 port 51662 [preauth]
Oct  1 22:37:48 nativespace-cdp sshd[30633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.0  user=root
Oct  1 22:37:48 nativespace-cdp sshd[30633]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:37:50 nativespace-cdp sshd[30633]: Failed password for root from 113.142.134.0 port 44160 ssh2
Oct  1 22:37:50 nativespace-cdp sshd[30640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.237.61  user=root
Oct  1 22:37:50 nativespace-cdp sshd[30640]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:37:50 nativespace-cdp sshd[30633]: Received disconnect from 113.142.134.0 port 44160:11: Bye Bye [preauth]
Oct  1 22:37:50 nativespace-cdp sshd[30633]: Disconnected from 113.142.134.0 port 44160 [preauth]
Oct  1 22:37:52 nativespace-cdp sshd[30640]: Failed password for root from 167.99.237.61 port 52110 ssh2
Oct  1 22:37:57 nativespace-cdp sshd[30640]: Received disconnect from 167.99.237.61 port 52110:11: Bye Bye [preauth]
Oct  1 22:37:57 nativespace-cdp sshd[30640]: Disconnected from 167.99.237.61 port 52110 [preauth]
Oct  1 22:38:06 nativespace-cdp sshd[30686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.169.212  user=root
Oct  1 22:38:06 nativespace-cdp sshd[30686]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:38:08 nativespace-cdp sshd[30686]: Failed password for root from 142.93.169.212 port 38300 ssh2
Oct  1 22:38:09 nativespace-cdp sshd[30686]: Received disconnect from 142.93.169.212 port 38300:11: Bye Bye [preauth]
Oct  1 22:38:09 nativespace-cdp sshd[30686]: Disconnected from 142.93.169.212 port 38300 [preauth]
Oct  1 22:38:21 nativespace-cdp sshd[30719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.72.50  user=root
Oct  1 22:38:21 nativespace-cdp sshd[30719]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:38:23 nativespace-cdp sshd[30719]: Failed password for root from 178.217.72.50 port 51670 ssh2
Oct  1 22:38:24 nativespace-cdp sshd[30719]: Received disconnect from 178.217.72.50 port 51670:11: Bye Bye [preauth]
Oct  1 22:38:24 nativespace-cdp sshd[30719]: Disconnected from 178.217.72.50 port 51670 [preauth]
Oct  1 22:38:42 nativespace-cdp sshd[30765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.94.223  user=root
Oct  1 22:38:42 nativespace-cdp sshd[30765]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:38:42 nativespace-cdp sshd[30750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.0  user=root
Oct  1 22:38:42 nativespace-cdp sshd[30750]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:38:43 nativespace-cdp sshd[30765]: Failed password for root from 104.244.94.223 port 47798 ssh2
Oct  1 22:38:43 nativespace-cdp sshd[30765]: Received disconnect from 104.244.94.223 port 47798:11: Bye Bye [preauth]
Oct  1 22:38:43 nativespace-cdp sshd[30765]: Disconnected from 104.244.94.223 port 47798 [preauth]
Oct  1 22:38:44 nativespace-cdp sshd[30750]: Failed password for root from 113.142.134.0 port 56168 ssh2
Oct  1 22:38:49 nativespace-cdp sshd[30750]: Received disconnect from 113.142.134.0 port 56168:11: Bye Bye [preauth]
Oct  1 22:38:49 nativespace-cdp sshd[30750]: Disconnected from 113.142.134.0 port 56168 [preauth]
Oct  1 22:39:05 nativespace-cdp sshd[30848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.217.72.50  user=root
Oct  1 22:39:05 nativespace-cdp sshd[30848]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:39:07 nativespace-cdp sshd[30848]: Failed password for root from 178.217.72.50 port 51684 ssh2
Oct  1 22:39:07 nativespace-cdp sshd[30848]: Received disconnect from 178.217.72.50 port 51684:11: Bye Bye [preauth]
Oct  1 22:39:07 nativespace-cdp sshd[30848]: Disconnected from 178.217.72.50 port 51684 [preauth]
Oct  1 22:39:27 nativespace-cdp sshd[30894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.0  user=root
Oct  1 22:39:27 nativespace-cdp sshd[30894]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:39:30 nativespace-cdp sshd[30894]: Failed password for root from 113.142.134.0 port 39952 ssh2
Oct  1 22:39:30 nativespace-cdp sshd[30894]: Received disconnect from 113.142.134.0 port 39952:11: Bye Bye [preauth]
Oct  1 22:39:30 nativespace-cdp sshd[30894]: Disconnected from 113.142.134.0 port 39952 [preauth]
Oct  1 22:39:54 nativespace-cdp sshd[30954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.94.223  user=root
Oct  1 22:39:54 nativespace-cdp sshd[30954]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:39:56 nativespace-cdp sshd[30954]: Failed password for root from 104.244.94.223 port 60466 ssh2
Oct  1 22:39:56 nativespace-cdp sshd[30954]: Received disconnect from 104.244.94.223 port 60466:11: Bye Bye [preauth]
Oct  1 22:39:56 nativespace-cdp sshd[30954]: Disconnected from 104.244.94.223 port 60466 [preauth]
Oct  1 22:40:19 nativespace-cdp sshd[31166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.0  user=root
Oct  1 22:40:19 nativespace-cdp sshd[31166]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:40:21 nativespace-cdp sshd[31166]: Failed password for root from 113.142.134.0 port 51966 ssh2
Oct  1 22:40:22 nativespace-cdp sshd[31166]: Received disconnect from 113.142.134.0 port 51966:11: Bye Bye [preauth]
Oct  1 22:40:22 nativespace-cdp sshd[31166]: Disconnected from 113.142.134.0 port 51966 [preauth]
Oct  1 22:41:02 nativespace-cdp sshd[31320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.94.223  user=root
Oct  1 22:41:02 nativespace-cdp sshd[31320]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:41:04 nativespace-cdp sshd[31320]: Failed password for root from 104.244.94.223 port 44902 ssh2
Oct  1 22:41:04 nativespace-cdp sshd[31320]: Received disconnect from 104.244.94.223 port 44902:11: Bye Bye [preauth]
Oct  1 22:41:04 nativespace-cdp sshd[31320]: Disconnected from 104.244.94.223 port 44902 [preauth]
Oct  1 22:41:34 nativespace-cdp sshd[31392]: Connection closed by 159.100.136.21 port 55490 [preauth]
Oct  1 22:42:08 nativespace-cdp sshd[31593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.94.223  user=root
Oct  1 22:42:08 nativespace-cdp sshd[31593]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:42:10 nativespace-cdp sshd[31593]: Failed password for root from 104.244.94.223 port 57566 ssh2
Oct  1 22:42:13 nativespace-cdp sshd[31593]: Received disconnect from 104.244.94.223 port 57566:11: Bye Bye [preauth]
Oct  1 22:42:13 nativespace-cdp sshd[31593]: Disconnected from 104.244.94.223 port 57566 [preauth]
Oct  1 22:43:13 nativespace-cdp sshd[31771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.94.223  user=root
Oct  1 22:43:13 nativespace-cdp sshd[31771]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:43:15 nativespace-cdp sshd[31771]: Failed password for root from 104.244.94.223 port 41998 ssh2
Oct  1 22:43:15 nativespace-cdp sshd[31771]: Received disconnect from 104.244.94.223 port 41998:11: Bye Bye [preauth]
Oct  1 22:43:15 nativespace-cdp sshd[31771]: Disconnected from 104.244.94.223 port 41998 [preauth]
Oct  1 22:44:21 nativespace-cdp sshd[31923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.94.223  user=root
Oct  1 22:44:21 nativespace-cdp sshd[31923]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:44:23 nativespace-cdp sshd[31923]: Failed password for root from 104.244.94.223 port 54658 ssh2
Oct  1 22:44:23 nativespace-cdp sshd[31923]: Received disconnect from 104.244.94.223 port 54658:11: Bye Bye [preauth]
Oct  1 22:44:23 nativespace-cdp sshd[31923]: Disconnected from 104.244.94.223 port 54658 [preauth]
Oct  1 22:45:22 nativespace-cdp sshd[32197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.94.223  user=root
Oct  1 22:45:22 nativespace-cdp sshd[32197]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:45:24 nativespace-cdp sshd[32197]: Failed password for root from 104.244.94.223 port 39090 ssh2
Oct  1 22:45:24 nativespace-cdp sshd[32197]: Received disconnect from 104.244.94.223 port 39090:11: Bye Bye [preauth]
Oct  1 22:45:24 nativespace-cdp sshd[32197]: Disconnected from 104.244.94.223 port 39090 [preauth]
Oct  1 22:46:27 nativespace-cdp sshd[32401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.94.223  user=root
Oct  1 22:46:27 nativespace-cdp sshd[32401]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:46:28 nativespace-cdp sshd[32401]: Failed password for root from 104.244.94.223 port 51752 ssh2
Oct  1 22:46:29 nativespace-cdp sshd[32401]: Received disconnect from 104.244.94.223 port 51752:11: Bye Bye [preauth]
Oct  1 22:46:29 nativespace-cdp sshd[32401]: Disconnected from 104.244.94.223 port 51752 [preauth]
Oct  1 22:46:33 nativespace-cdp sshd[32411]: Connection closed by 159.100.136.21 port 36920 [preauth]
Oct  1 22:47:08 nativespace-cdp sshd[32577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.162  user=root
Oct  1 22:47:08 nativespace-cdp sshd[32577]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:47:10 nativespace-cdp sshd[32577]: Failed password for root from 45.157.150.162 port 54422 ssh2
Oct  1 22:47:15 nativespace-cdp sshd[32577]: Received disconnect from 45.157.150.162 port 54422:11: Bye Bye [preauth]
Oct  1 22:47:15 nativespace-cdp sshd[32577]: Disconnected from 45.157.150.162 port 54422 [preauth]
Oct  1 22:47:18 nativespace-cdp sshd[32603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.14.195.48  user=root
Oct  1 22:47:18 nativespace-cdp sshd[32603]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:47:20 nativespace-cdp sshd[32603]: Failed password for root from 106.14.195.48 port 33090 ssh2
Oct  1 22:47:22 nativespace-cdp sshd[32603]: Received disconnect from 106.14.195.48 port 33090:11: Bye Bye [preauth]
Oct  1 22:47:22 nativespace-cdp sshd[32603]: Disconnected from 106.14.195.48 port 33090 [preauth]
Oct  1 22:47:34 nativespace-cdp sshd[32639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.94.223  user=root
Oct  1 22:47:34 nativespace-cdp sshd[32639]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:47:36 nativespace-cdp sshd[32639]: Failed password for root from 104.244.94.223 port 36184 ssh2
Oct  1 22:47:36 nativespace-cdp sshd[32639]: Received disconnect from 104.244.94.223 port 36184:11: Bye Bye [preauth]
Oct  1 22:47:36 nativespace-cdp sshd[32639]: Disconnected from 104.244.94.223 port 36184 [preauth]
Oct  1 22:47:49 nativespace-cdp sshd[32693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.242.234.8  user=root
Oct  1 22:47:49 nativespace-cdp sshd[32693]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:47:51 nativespace-cdp sshd[32693]: Failed password for root from 185.242.234.8 port 43966 ssh2
Oct  1 22:47:51 nativespace-cdp sshd[32693]: Received disconnect from 185.242.234.8 port 43966:11: Bye Bye [preauth]
Oct  1 22:47:51 nativespace-cdp sshd[32693]: Disconnected from 185.242.234.8 port 43966 [preauth]
Oct  1 22:48:15 nativespace-cdp sshd[316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.152.75  user=root
Oct  1 22:48:15 nativespace-cdp sshd[316]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:48:17 nativespace-cdp sshd[316]: Failed password for root from 210.59.152.75 port 48080 ssh2
Oct  1 22:48:17 nativespace-cdp sshd[331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.167.13.232  user=root
Oct  1 22:48:17 nativespace-cdp sshd[331]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:48:17 nativespace-cdp sshd[316]: Received disconnect from 210.59.152.75 port 48080:11: Bye Bye [preauth]
Oct  1 22:48:17 nativespace-cdp sshd[316]: Disconnected from 210.59.152.75 port 48080 [preauth]
Oct  1 22:48:19 nativespace-cdp sshd[331]: Failed password for root from 223.167.13.232 port 55840 ssh2
Oct  1 22:48:22 nativespace-cdp sshd[331]: Received disconnect from 223.167.13.232 port 55840:11: Bye Bye [preauth]
Oct  1 22:48:22 nativespace-cdp sshd[331]: Disconnected from 223.167.13.232 port 55840 [preauth]
Oct  1 22:48:38 nativespace-cdp sshd[401]: Connection closed by 159.223.45.100 port 59266 [preauth]
Oct  1 22:48:58 nativespace-cdp sshd[457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15  user=root
Oct  1 22:48:58 nativespace-cdp sshd[457]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:48:58 nativespace-cdp sshd[455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.49.217  user=root
Oct  1 22:48:58 nativespace-cdp sshd[455]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:49:00 nativespace-cdp sshd[457]: Failed password for root from 92.246.84.15 port 50438 ssh2
Oct  1 22:49:00 nativespace-cdp sshd[457]: Received disconnect from 92.246.84.15 port 50438:11: Bye Bye [preauth]
Oct  1 22:49:00 nativespace-cdp sshd[457]: Disconnected from 92.246.84.15 port 50438 [preauth]
Oct  1 22:49:00 nativespace-cdp sshd[455]: Failed password for root from 103.186.49.217 port 35492 ssh2
Oct  1 22:49:00 nativespace-cdp sshd[461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.190.159.34  user=root
Oct  1 22:49:00 nativespace-cdp sshd[461]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:49:01 nativespace-cdp sshd[461]: Failed password for root from 35.190.159.34 port 49948 ssh2
Oct  1 22:49:04 nativespace-cdp sshd[455]: Received disconnect from 103.186.49.217 port 35492:11: Bye Bye [preauth]
Oct  1 22:49:04 nativespace-cdp sshd[455]: Disconnected from 103.186.49.217 port 35492 [preauth]
Oct  1 22:49:04 nativespace-cdp sshd[461]: Received disconnect from 35.190.159.34 port 49948:11: Bye Bye [preauth]
Oct  1 22:49:04 nativespace-cdp sshd[461]: Disconnected from 35.190.159.34 port 49948 [preauth]
Oct  1 22:49:09 nativespace-cdp sshd[505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.199.87  user=root
Oct  1 22:49:09 nativespace-cdp sshd[505]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:49:11 nativespace-cdp sshd[505]: Failed password for root from 47.236.199.87 port 53772 ssh2
Oct  1 22:49:12 nativespace-cdp sshd[505]: Received disconnect from 47.236.199.87 port 53772:11: Bye Bye [preauth]
Oct  1 22:49:12 nativespace-cdp sshd[505]: Disconnected from 47.236.199.87 port 53772 [preauth]
Oct  1 22:49:24 nativespace-cdp sshd[576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.116.40  user=root
Oct  1 22:49:24 nativespace-cdp sshd[576]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:49:25 nativespace-cdp sshd[576]: Failed password for root from 101.36.116.40 port 49542 ssh2
Oct  1 22:49:26 nativespace-cdp sshd[583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.68.226.136  user=root
Oct  1 22:49:26 nativespace-cdp sshd[583]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:49:26 nativespace-cdp sshd[576]: Received disconnect from 101.36.116.40 port 49542:11: Bye Bye [preauth]
Oct  1 22:49:26 nativespace-cdp sshd[576]: Disconnected from 101.36.116.40 port 49542 [preauth]
Oct  1 22:49:28 nativespace-cdp sshd[583]: Failed password for root from 210.68.226.136 port 52794 ssh2
Oct  1 22:49:29 nativespace-cdp sshd[583]: Received disconnect from 210.68.226.136 port 52794:11: Bye Bye [preauth]
Oct  1 22:49:29 nativespace-cdp sshd[583]: Disconnected from 210.68.226.136 port 52794 [preauth]
Oct  1 22:49:36 nativespace-cdp sshd[609]: Connection closed by 221.156.126.1 port 33514 [preauth]
Oct  1 22:50:48 nativespace-cdp sshd[1193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.229.218.50  user=root
Oct  1 22:50:48 nativespace-cdp sshd[1193]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:50:51 nativespace-cdp sshd[1193]: Failed password for root from 221.229.218.50 port 54381 ssh2
Oct  1 22:50:52 nativespace-cdp sshd[1193]: Received disconnect from 221.229.218.50 port 54381:11: Bye Bye [preauth]
Oct  1 22:50:52 nativespace-cdp sshd[1193]: Disconnected from 221.229.218.50 port 54381 [preauth]
Oct  1 22:50:55 nativespace-cdp sshd[1216]: Invalid user ubuntu from 103.150.124.201 port 45058
Oct  1 22:50:55 nativespace-cdp sshd[1216]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:50:55 nativespace-cdp sshd[1216]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:50:55 nativespace-cdp sshd[1216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.150.124.201
Oct  1 22:50:55 nativespace-cdp sshd[1219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151  user=root
Oct  1 22:50:55 nativespace-cdp sshd[1219]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:50:57 nativespace-cdp sshd[1216]: Failed password for invalid user ubuntu from 103.150.124.201 port 45058 ssh2
Oct  1 22:50:57 nativespace-cdp sshd[1216]: Received disconnect from 103.150.124.201 port 45058:11: Bye Bye [preauth]
Oct  1 22:50:57 nativespace-cdp sshd[1216]: Disconnected from 103.150.124.201 port 45058 [preauth]
Oct  1 22:50:57 nativespace-cdp sshd[1219]: Failed password for root from 179.33.186.151 port 11798 ssh2
Oct  1 22:50:57 nativespace-cdp sshd[1225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.26.47.38  user=root
Oct  1 22:50:57 nativespace-cdp sshd[1225]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:50:57 nativespace-cdp sshd[1219]: Received disconnect from 179.33.186.151 port 11798:11: Bye Bye [preauth]
Oct  1 22:50:57 nativespace-cdp sshd[1219]: Disconnected from 179.33.186.151 port 11798 [preauth]
Oct  1 22:50:59 nativespace-cdp sshd[1225]: Failed password for root from 195.26.47.38 port 60956 ssh2
Oct  1 22:51:01 nativespace-cdp sshd[1225]: Received disconnect from 195.26.47.38 port 60956:11: Bye Bye [preauth]
Oct  1 22:51:01 nativespace-cdp sshd[1225]: Disconnected from 195.26.47.38 port 60956 [preauth]
Oct  1 22:51:35 nativespace-cdp sshd[1311]: Connection closed by 159.100.136.21 port 46388 [preauth]
Oct  1 22:52:03 nativespace-cdp sshd[1489]: Connection closed by 125.124.16.176 port 51310 [preauth]
Oct  1 22:52:11 nativespace-cdp sshd[1507]: Invalid user ubuntu from 92.246.84.15 port 60172
Oct  1 22:52:11 nativespace-cdp sshd[1507]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:52:11 nativespace-cdp sshd[1507]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:52:11 nativespace-cdp sshd[1507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15
Oct  1 22:52:13 nativespace-cdp sshd[1507]: Failed password for invalid user ubuntu from 92.246.84.15 port 60172 ssh2
Oct  1 22:52:13 nativespace-cdp sshd[1507]: Received disconnect from 92.246.84.15 port 60172:11: Bye Bye [preauth]
Oct  1 22:52:13 nativespace-cdp sshd[1507]: Disconnected from 92.246.84.15 port 60172 [preauth]
Oct  1 22:52:19 nativespace-cdp sshd[1524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.162  user=root
Oct  1 22:52:19 nativespace-cdp sshd[1524]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:52:21 nativespace-cdp sshd[1524]: Failed password for root from 45.157.150.162 port 47736 ssh2
Oct  1 22:52:21 nativespace-cdp sshd[1524]: Received disconnect from 45.157.150.162 port 47736:11: Bye Bye [preauth]
Oct  1 22:52:21 nativespace-cdp sshd[1524]: Disconnected from 45.157.150.162 port 47736 [preauth]
Oct  1 22:52:22 nativespace-cdp sshd[1533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.242.234.8  user=root
Oct  1 22:52:22 nativespace-cdp sshd[1533]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:52:24 nativespace-cdp sshd[1542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.212.238  user=root
Oct  1 22:52:24 nativespace-cdp sshd[1542]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:52:25 nativespace-cdp sshd[1533]: Failed password for root from 185.242.234.8 port 38298 ssh2
Oct  1 22:52:26 nativespace-cdp sshd[1542]: Failed password for root from 144.34.212.238 port 39194 ssh2
Oct  1 22:52:28 nativespace-cdp sshd[1542]: Received disconnect from 144.34.212.238 port 39194:11: Bye Bye [preauth]
Oct  1 22:52:28 nativespace-cdp sshd[1542]: Disconnected from 144.34.212.238 port 39194 [preauth]
Oct  1 22:52:34 nativespace-cdp sshd[1533]: Received disconnect from 185.242.234.8 port 38298:11: Bye Bye [preauth]
Oct  1 22:52:34 nativespace-cdp sshd[1533]: Disconnected from 185.242.234.8 port 38298 [preauth]
Oct  1 22:52:51 nativespace-cdp sshd[1605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15  user=root
Oct  1 22:52:51 nativespace-cdp sshd[1605]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:52:53 nativespace-cdp sshd[1605]: Failed password for root from 92.246.84.15 port 60294 ssh2
Oct  1 22:52:53 nativespace-cdp sshd[1605]: Received disconnect from 92.246.84.15 port 60294:11: Bye Bye [preauth]
Oct  1 22:52:53 nativespace-cdp sshd[1605]: Disconnected from 92.246.84.15 port 60294 [preauth]
Oct  1 22:53:02 nativespace-cdp sshd[1654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.205.30  user=root
Oct  1 22:53:02 nativespace-cdp sshd[1654]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:53:04 nativespace-cdp sshd[1654]: Failed password for root from 103.172.205.30 port 35548 ssh2
Oct  1 22:53:04 nativespace-cdp sshd[1680]: Invalid user ubuntu from 45.157.150.162 port 60074
Oct  1 22:53:04 nativespace-cdp sshd[1680]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:53:04 nativespace-cdp sshd[1680]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:53:04 nativespace-cdp sshd[1680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.162
Oct  1 22:53:04 nativespace-cdp sshd[1654]: Received disconnect from 103.172.205.30 port 35548:11: Bye Bye [preauth]
Oct  1 22:53:04 nativespace-cdp sshd[1654]: Disconnected from 103.172.205.30 port 35548 [preauth]
Oct  1 22:53:05 nativespace-cdp sshd[1684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.242.234.8  user=root
Oct  1 22:53:05 nativespace-cdp sshd[1684]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:53:06 nativespace-cdp sshd[1680]: Failed password for invalid user ubuntu from 45.157.150.162 port 60074 ssh2
Oct  1 22:53:06 nativespace-cdp sshd[1680]: Received disconnect from 45.157.150.162 port 60074:11: Bye Bye [preauth]
Oct  1 22:53:06 nativespace-cdp sshd[1680]: Disconnected from 45.157.150.162 port 60074 [preauth]
Oct  1 22:53:07 nativespace-cdp sshd[1684]: Failed password for root from 185.242.234.8 port 44581 ssh2
Oct  1 22:53:07 nativespace-cdp sshd[1684]: Received disconnect from 185.242.234.8 port 44581:11: Bye Bye [preauth]
Oct  1 22:53:07 nativespace-cdp sshd[1684]: Disconnected from 185.242.234.8 port 44581 [preauth]
Oct  1 22:53:29 nativespace-cdp sshd[1775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15  user=root
Oct  1 22:53:29 nativespace-cdp sshd[1775]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:53:31 nativespace-cdp sshd[1775]: Failed password for root from 92.246.84.15 port 56338 ssh2
Oct  1 22:53:31 nativespace-cdp sshd[1775]: Received disconnect from 92.246.84.15 port 56338:11: Bye Bye [preauth]
Oct  1 22:53:31 nativespace-cdp sshd[1775]: Disconnected from 92.246.84.15 port 56338 [preauth]
Oct  1 22:53:41 nativespace-cdp sshd[1798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.180.148  user=root
Oct  1 22:53:41 nativespace-cdp sshd[1798]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:53:43 nativespace-cdp sshd[1798]: Failed password for root from 129.150.180.148 port 16462 ssh2
Oct  1 22:53:43 nativespace-cdp sshd[1798]: Received disconnect from 129.150.180.148 port 16462:11: Bye Bye [preauth]
Oct  1 22:53:43 nativespace-cdp sshd[1798]: Disconnected from 129.150.180.148 port 16462 [preauth]
Oct  1 22:53:44 nativespace-cdp sshd[1810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.232  user=root
Oct  1 22:53:44 nativespace-cdp sshd[1810]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:53:46 nativespace-cdp sshd[1815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.242.234.8  user=root
Oct  1 22:53:46 nativespace-cdp sshd[1815]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:53:47 nativespace-cdp sshd[1810]: Failed password for root from 14.225.213.232 port 47772 ssh2
Oct  1 22:53:47 nativespace-cdp sshd[1810]: Received disconnect from 14.225.213.232 port 47772:11: Bye Bye [preauth]
Oct  1 22:53:47 nativespace-cdp sshd[1810]: Disconnected from 14.225.213.232 port 47772 [preauth]
Oct  1 22:53:48 nativespace-cdp sshd[1815]: Failed password for root from 185.242.234.8 port 50859 ssh2
Oct  1 22:53:48 nativespace-cdp sshd[1815]: Received disconnect from 185.242.234.8 port 50859:11: Bye Bye [preauth]
Oct  1 22:53:48 nativespace-cdp sshd[1815]: Disconnected from 185.242.234.8 port 50859 [preauth]
Oct  1 22:53:49 nativespace-cdp sshd[1833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.162  user=root
Oct  1 22:53:49 nativespace-cdp sshd[1833]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:53:51 nativespace-cdp sshd[1833]: Failed password for root from 45.157.150.162 port 44128 ssh2
Oct  1 22:53:53 nativespace-cdp sshd[1833]: Received disconnect from 45.157.150.162 port 44128:11: Bye Bye [preauth]
Oct  1 22:53:53 nativespace-cdp sshd[1833]: Disconnected from 45.157.150.162 port 44128 [preauth]
Oct  1 22:53:58 nativespace-cdp sshd[1858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.205.30  user=root
Oct  1 22:53:58 nativespace-cdp sshd[1858]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:01 nativespace-cdp sshd[1858]: Failed password for root from 103.172.205.30 port 39442 ssh2
Oct  1 22:54:01 nativespace-cdp sshd[1858]: Received disconnect from 103.172.205.30 port 39442:11: Bye Bye [preauth]
Oct  1 22:54:01 nativespace-cdp sshd[1858]: Disconnected from 103.172.205.30 port 39442 [preauth]
Oct  1 22:54:09 nativespace-cdp sshd[1895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15  user=root
Oct  1 22:54:09 nativespace-cdp sshd[1895]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:10 nativespace-cdp sshd[1893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.212.238  user=root
Oct  1 22:54:10 nativespace-cdp sshd[1893]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:10 nativespace-cdp sshd[1885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.78.50  user=root
Oct  1 22:54:10 nativespace-cdp sshd[1885]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:11 nativespace-cdp sshd[1895]: Failed password for root from 92.246.84.15 port 43728 ssh2
Oct  1 22:54:11 nativespace-cdp sshd[1895]: Received disconnect from 92.246.84.15 port 43728:11: Bye Bye [preauth]
Oct  1 22:54:11 nativespace-cdp sshd[1895]: Disconnected from 92.246.84.15 port 43728 [preauth]
Oct  1 22:54:12 nativespace-cdp sshd[1893]: Failed password for root from 144.34.212.238 port 58692 ssh2
Oct  1 22:54:12 nativespace-cdp sshd[1893]: Received disconnect from 144.34.212.238 port 58692:11: Bye Bye [preauth]
Oct  1 22:54:12 nativespace-cdp sshd[1893]: Disconnected from 144.34.212.238 port 58692 [preauth]
Oct  1 22:54:12 nativespace-cdp sshd[1885]: Failed password for root from 27.112.78.50 port 42696 ssh2
Oct  1 22:54:13 nativespace-cdp sshd[1885]: Received disconnect from 27.112.78.50 port 42696:11: Bye Bye [preauth]
Oct  1 22:54:13 nativespace-cdp sshd[1885]: Disconnected from 27.112.78.50 port 42696 [preauth]
Oct  1 22:54:31 nativespace-cdp sshd[1943]: Connection closed by 185.242.234.8 port 57140 [preauth]
Oct  1 22:54:32 nativespace-cdp sshd[1937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.88.239.33  user=root
Oct  1 22:54:32 nativespace-cdp sshd[1937]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:33 nativespace-cdp sshd[1951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.162  user=root
Oct  1 22:54:33 nativespace-cdp sshd[1951]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:34 nativespace-cdp sshd[1937]: Failed password for root from 125.88.239.33 port 48676 ssh2
Oct  1 22:54:34 nativespace-cdp sshd[1937]: Received disconnect from 125.88.239.33 port 48676:11: Bye Bye [preauth]
Oct  1 22:54:34 nativespace-cdp sshd[1937]: Disconnected from 125.88.239.33 port 48676 [preauth]
Oct  1 22:54:35 nativespace-cdp sshd[1951]: Failed password for root from 45.157.150.162 port 56472 ssh2
Oct  1 22:54:38 nativespace-cdp sshd[1951]: Received disconnect from 45.157.150.162 port 56472:11: Bye Bye [preauth]
Oct  1 22:54:38 nativespace-cdp sshd[1951]: Disconnected from 45.157.150.162 port 56472 [preauth]
Oct  1 22:54:38 nativespace-cdp sshd[1964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.190.159.34  user=root
Oct  1 22:54:38 nativespace-cdp sshd[1964]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:40 nativespace-cdp sshd[1964]: Failed password for root from 35.190.159.34 port 43702 ssh2
Oct  1 22:54:40 nativespace-cdp sshd[1964]: Received disconnect from 35.190.159.34 port 43702:11: Bye Bye [preauth]
Oct  1 22:54:40 nativespace-cdp sshd[1964]: Disconnected from 35.190.159.34 port 43702 [preauth]
Oct  1 22:54:42 nativespace-cdp sshd[1981]: Invalid user ubuntu from 92.246.84.15 port 53352
Oct  1 22:54:42 nativespace-cdp sshd[1981]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:54:42 nativespace-cdp sshd[1981]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:54:42 nativespace-cdp sshd[1981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15
Oct  1 22:54:44 nativespace-cdp sshd[1981]: Failed password for invalid user ubuntu from 92.246.84.15 port 53352 ssh2
Oct  1 22:54:44 nativespace-cdp sshd[1981]: Received disconnect from 92.246.84.15 port 53352:11: Bye Bye [preauth]
Oct  1 22:54:44 nativespace-cdp sshd[1981]: Disconnected from 92.246.84.15 port 53352 [preauth]
Oct  1 22:54:47 nativespace-cdp sshd[1990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.49.217  user=root
Oct  1 22:54:47 nativespace-cdp sshd[1990]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:49 nativespace-cdp sshd[1990]: Failed password for root from 103.186.49.217 port 33686 ssh2
Oct  1 22:54:49 nativespace-cdp sshd[1990]: Received disconnect from 103.186.49.217 port 33686:11: Bye Bye [preauth]
Oct  1 22:54:49 nativespace-cdp sshd[1990]: Disconnected from 103.186.49.217 port 33686 [preauth]
Oct  1 22:54:54 nativespace-cdp sshd[2009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.205.30  user=root
Oct  1 22:54:54 nativespace-cdp sshd[2009]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:56 nativespace-cdp sshd[2009]: Failed password for root from 103.172.205.30 port 49898 ssh2
Oct  1 22:54:57 nativespace-cdp sshd[2016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.212.238  user=root
Oct  1 22:54:57 nativespace-cdp sshd[2016]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:57 nativespace-cdp sshd[2009]: Received disconnect from 103.172.205.30 port 49898:11: Bye Bye [preauth]
Oct  1 22:54:57 nativespace-cdp sshd[2009]: Disconnected from 103.172.205.30 port 49898 [preauth]
Oct  1 22:54:59 nativespace-cdp sshd[2035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.116.40  user=root
Oct  1 22:54:59 nativespace-cdp sshd[2035]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:54:59 nativespace-cdp sshd[2016]: Failed password for root from 144.34.212.238 port 57676 ssh2
Oct  1 22:54:59 nativespace-cdp sshd[2016]: Received disconnect from 144.34.212.238 port 57676:11: Bye Bye [preauth]
Oct  1 22:54:59 nativespace-cdp sshd[2016]: Disconnected from 144.34.212.238 port 57676 [preauth]
Oct  1 22:55:01 nativespace-cdp sshd[2035]: Failed password for root from 101.36.116.40 port 49752 ssh2
Oct  1 22:55:05 nativespace-cdp sshd[2035]: Received disconnect from 101.36.116.40 port 49752:11: Bye Bye [preauth]
Oct  1 22:55:05 nativespace-cdp sshd[2035]: Disconnected from 101.36.116.40 port 49752 [preauth]
Oct  1 22:55:05 nativespace-cdp sshd[2156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.242.234.8  user=root
Oct  1 22:55:05 nativespace-cdp sshd[2156]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:08 nativespace-cdp sshd[2156]: Failed password for root from 185.242.234.8 port 35190 ssh2
Oct  1 22:55:08 nativespace-cdp sshd[2169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151  user=root
Oct  1 22:55:08 nativespace-cdp sshd[2169]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:08 nativespace-cdp sshd[2156]: Received disconnect from 185.242.234.8 port 35190:11: Bye Bye [preauth]
Oct  1 22:55:08 nativespace-cdp sshd[2156]: Disconnected from 185.242.234.8 port 35190 [preauth]
Oct  1 22:55:10 nativespace-cdp sshd[2169]: Failed password for root from 179.33.186.151 port 53256 ssh2
Oct  1 22:55:10 nativespace-cdp sshd[2169]: Received disconnect from 179.33.186.151 port 53256:11: Bye Bye [preauth]
Oct  1 22:55:10 nativespace-cdp sshd[2169]: Disconnected from 179.33.186.151 port 53256 [preauth]
Oct  1 22:55:15 nativespace-cdp sshd[2204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.190.159.34  user=root
Oct  1 22:55:15 nativespace-cdp sshd[2204]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:15 nativespace-cdp sshd[2206]: Invalid user ubuntu from 45.157.150.162 port 40574
Oct  1 22:55:15 nativespace-cdp sshd[2206]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:55:15 nativespace-cdp sshd[2206]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:55:15 nativespace-cdp sshd[2206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.162
Oct  1 22:55:17 nativespace-cdp sshd[2204]: Failed password for root from 35.190.159.34 port 39546 ssh2
Oct  1 22:55:17 nativespace-cdp sshd[2222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15  user=root
Oct  1 22:55:17 nativespace-cdp sshd[2222]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:17 nativespace-cdp sshd[2204]: Received disconnect from 35.190.159.34 port 39546:11: Bye Bye [preauth]
Oct  1 22:55:17 nativespace-cdp sshd[2204]: Disconnected from 35.190.159.34 port 39546 [preauth]
Oct  1 22:55:17 nativespace-cdp sshd[2206]: Failed password for invalid user ubuntu from 45.157.150.162 port 40574 ssh2
Oct  1 22:55:17 nativespace-cdp sshd[2206]: Received disconnect from 45.157.150.162 port 40574:11: Bye Bye [preauth]
Oct  1 22:55:17 nativespace-cdp sshd[2206]: Disconnected from 45.157.150.162 port 40574 [preauth]
Oct  1 22:55:19 nativespace-cdp sshd[2222]: Failed password for root from 92.246.84.15 port 57918 ssh2
Oct  1 22:55:19 nativespace-cdp sshd[2222]: Received disconnect from 92.246.84.15 port 57918:11: Bye Bye [preauth]
Oct  1 22:55:19 nativespace-cdp sshd[2222]: Disconnected from 92.246.84.15 port 57918 [preauth]
Oct  1 22:55:35 nativespace-cdp sshd[2290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.49.217  user=root
Oct  1 22:55:35 nativespace-cdp sshd[2290]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:37 nativespace-cdp sshd[2290]: Failed password for root from 103.186.49.217 port 46378 ssh2
Oct  1 22:55:37 nativespace-cdp sshd[2290]: Received disconnect from 103.186.49.217 port 46378:11: Bye Bye [preauth]
Oct  1 22:55:37 nativespace-cdp sshd[2290]: Disconnected from 103.186.49.217 port 46378 [preauth]
Oct  1 22:55:37 nativespace-cdp sshd[2296]: Invalid user ubuntu from 14.225.213.232 port 41028
Oct  1 22:55:37 nativespace-cdp sshd[2296]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:55:37 nativespace-cdp sshd[2296]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:55:37 nativespace-cdp sshd[2296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.232
Oct  1 22:55:38 nativespace-cdp sshd[2312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.229.218.50  user=root
Oct  1 22:55:38 nativespace-cdp sshd[2312]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:38 nativespace-cdp sshd[2296]: Failed password for invalid user ubuntu from 14.225.213.232 port 41028 ssh2
Oct  1 22:55:39 nativespace-cdp sshd[2296]: Received disconnect from 14.225.213.232 port 41028:11: Bye Bye [preauth]
Oct  1 22:55:39 nativespace-cdp sshd[2296]: Disconnected from 14.225.213.232 port 41028 [preauth]
Oct  1 22:55:40 nativespace-cdp sshd[2312]: Failed password for root from 221.229.218.50 port 47148 ssh2
Oct  1 22:55:42 nativespace-cdp sshd[2312]: Received disconnect from 221.229.218.50 port 47148:11: Bye Bye [preauth]
Oct  1 22:55:42 nativespace-cdp sshd[2312]: Disconnected from 221.229.218.50 port 47148 [preauth]
Oct  1 22:55:43 nativespace-cdp sshd[2339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.116.40  user=root
Oct  1 22:55:43 nativespace-cdp sshd[2339]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:44 nativespace-cdp sshd[2343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.212.238  user=root
Oct  1 22:55:44 nativespace-cdp sshd[2343]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:45 nativespace-cdp sshd[2349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.242.234.8  user=root
Oct  1 22:55:45 nativespace-cdp sshd[2349]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:45 nativespace-cdp sshd[2346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.205.30  user=root
Oct  1 22:55:45 nativespace-cdp sshd[2346]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:45 nativespace-cdp sshd[2339]: Failed password for root from 101.36.116.40 port 49804 ssh2
Oct  1 22:55:45 nativespace-cdp sshd[2339]: Received disconnect from 101.36.116.40 port 49804:11: Bye Bye [preauth]
Oct  1 22:55:45 nativespace-cdp sshd[2339]: Disconnected from 101.36.116.40 port 49804 [preauth]
Oct  1 22:55:46 nativespace-cdp sshd[2343]: Failed password for root from 144.34.212.238 port 41832 ssh2
Oct  1 22:55:46 nativespace-cdp sshd[2343]: Received disconnect from 144.34.212.238 port 41832:11: Bye Bye [preauth]
Oct  1 22:55:46 nativespace-cdp sshd[2343]: Disconnected from 144.34.212.238 port 41832 [preauth]
Oct  1 22:55:46 nativespace-cdp sshd[2349]: Failed password for root from 185.242.234.8 port 41471 ssh2
Oct  1 22:55:46 nativespace-cdp sshd[2346]: Failed password for root from 103.172.205.30 port 60854 ssh2
Oct  1 22:55:46 nativespace-cdp sshd[2349]: Received disconnect from 185.242.234.8 port 41471:11: Bye Bye [preauth]
Oct  1 22:55:46 nativespace-cdp sshd[2349]: Disconnected from 185.242.234.8 port 41471 [preauth]
Oct  1 22:55:47 nativespace-cdp sshd[2346]: Received disconnect from 103.172.205.30 port 60854:11: Bye Bye [preauth]
Oct  1 22:55:47 nativespace-cdp sshd[2346]: Disconnected from 103.172.205.30 port 60854 [preauth]
Oct  1 22:55:47 nativespace-cdp sshd[2410]: Invalid user ubuntu from 129.150.180.148 port 28236
Oct  1 22:55:47 nativespace-cdp sshd[2410]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:55:47 nativespace-cdp sshd[2410]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:55:47 nativespace-cdp sshd[2410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.180.148
Oct  1 22:55:49 nativespace-cdp sshd[2410]: Failed password for invalid user ubuntu from 129.150.180.148 port 28236 ssh2
Oct  1 22:55:53 nativespace-cdp sshd[2410]: Received disconnect from 129.150.180.148 port 28236:11: Bye Bye [preauth]
Oct  1 22:55:53 nativespace-cdp sshd[2410]: Disconnected from 129.150.180.148 port 28236 [preauth]
Oct  1 22:55:53 nativespace-cdp sshd[2439]: Invalid user ubuntu from 35.190.159.34 port 37246
Oct  1 22:55:53 nativespace-cdp sshd[2439]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:55:53 nativespace-cdp sshd[2439]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:55:53 nativespace-cdp sshd[2439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.190.159.34
Oct  1 22:55:53 nativespace-cdp sshd[2442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15  user=root
Oct  1 22:55:53 nativespace-cdp sshd[2442]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:55 nativespace-cdp sshd[2452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.162  user=root
Oct  1 22:55:55 nativespace-cdp sshd[2452]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:55 nativespace-cdp sshd[2439]: Failed password for invalid user ubuntu from 35.190.159.34 port 37246 ssh2
Oct  1 22:55:55 nativespace-cdp sshd[2439]: Received disconnect from 35.190.159.34 port 37246:11: Bye Bye [preauth]
Oct  1 22:55:55 nativespace-cdp sshd[2439]: Disconnected from 35.190.159.34 port 37246 [preauth]
Oct  1 22:55:55 nativespace-cdp sshd[2442]: Failed password for root from 92.246.84.15 port 42120 ssh2
Oct  1 22:55:55 nativespace-cdp sshd[2442]: Received disconnect from 92.246.84.15 port 42120:11: Bye Bye [preauth]
Oct  1 22:55:55 nativespace-cdp sshd[2442]: Disconnected from 92.246.84.15 port 42120 [preauth]
Oct  1 22:55:56 nativespace-cdp sshd[2450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151  user=root
Oct  1 22:55:56 nativespace-cdp sshd[2450]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:55:57 nativespace-cdp sshd[2452]: Failed password for root from 45.157.150.162 port 52862 ssh2
Oct  1 22:55:57 nativespace-cdp sshd[2452]: Received disconnect from 45.157.150.162 port 52862:11: Bye Bye [preauth]
Oct  1 22:55:57 nativespace-cdp sshd[2452]: Disconnected from 45.157.150.162 port 52862 [preauth]
Oct  1 22:55:57 nativespace-cdp sshd[2450]: Failed password for root from 179.33.186.151 port 36961 ssh2
Oct  1 22:55:57 nativespace-cdp sshd[2450]: Received disconnect from 179.33.186.151 port 36961:11: Bye Bye [preauth]
Oct  1 22:55:57 nativespace-cdp sshd[2450]: Disconnected from 179.33.186.151 port 36961 [preauth]
Oct  1 22:56:00 nativespace-cdp sshd[2472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.150.124.201  user=root
Oct  1 22:56:00 nativespace-cdp sshd[2472]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:02 nativespace-cdp sshd[2472]: Failed password for root from 103.150.124.201 port 36590 ssh2
Oct  1 22:56:02 nativespace-cdp sshd[2472]: Received disconnect from 103.150.124.201 port 36590:11: Bye Bye [preauth]
Oct  1 22:56:02 nativespace-cdp sshd[2472]: Disconnected from 103.150.124.201 port 36590 [preauth]
Oct  1 22:56:19 nativespace-cdp sshd[2533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.43.197  user=root
Oct  1 22:56:19 nativespace-cdp sshd[2533]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:21 nativespace-cdp sshd[2533]: Failed password for root from 209.141.43.197 port 42340 ssh2
Oct  1 22:56:21 nativespace-cdp sshd[2533]: Received disconnect from 209.141.43.197 port 42340:11: Bye Bye [preauth]
Oct  1 22:56:21 nativespace-cdp sshd[2533]: Disconnected from 209.141.43.197 port 42340 [preauth]
Oct  1 22:56:22 nativespace-cdp sshd[2543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.242.234.8  user=root
Oct  1 22:56:22 nativespace-cdp sshd[2543]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:24 nativespace-cdp sshd[2550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.232  user=root
Oct  1 22:56:24 nativespace-cdp sshd[2550]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:24 nativespace-cdp sshd[2548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.116.40  user=root
Oct  1 22:56:24 nativespace-cdp sshd[2548]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:24 nativespace-cdp sshd[2554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.49.217  user=root
Oct  1 22:56:24 nativespace-cdp sshd[2554]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:24 nativespace-cdp sshd[2543]: Failed password for root from 185.242.234.8 port 47751 ssh2
Oct  1 22:56:24 nativespace-cdp sshd[2543]: Received disconnect from 185.242.234.8 port 47751:11: Bye Bye [preauth]
Oct  1 22:56:24 nativespace-cdp sshd[2543]: Disconnected from 185.242.234.8 port 47751 [preauth]
Oct  1 22:56:26 nativespace-cdp sshd[2550]: Failed password for root from 14.225.213.232 port 53448 ssh2
Oct  1 22:56:26 nativespace-cdp sshd[2548]: Failed password for root from 101.36.116.40 port 49860 ssh2
Oct  1 22:56:26 nativespace-cdp sshd[2554]: Failed password for root from 103.186.49.217 port 59072 ssh2
Oct  1 22:56:29 nativespace-cdp sshd[2550]: Received disconnect from 14.225.213.232 port 53448:11: Bye Bye [preauth]
Oct  1 22:56:29 nativespace-cdp sshd[2550]: Disconnected from 14.225.213.232 port 53448 [preauth]
Oct  1 22:56:30 nativespace-cdp sshd[2578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15  user=root
Oct  1 22:56:30 nativespace-cdp sshd[2578]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:30 nativespace-cdp sshd[2554]: Received disconnect from 103.186.49.217 port 59072:11: Bye Bye [preauth]
Oct  1 22:56:30 nativespace-cdp sshd[2554]: Disconnected from 103.186.49.217 port 59072 [preauth]
Oct  1 22:56:31 nativespace-cdp sshd[2548]: Received disconnect from 101.36.116.40 port 49860:11: Bye Bye [preauth]
Oct  1 22:56:31 nativespace-cdp sshd[2548]: Disconnected from 101.36.116.40 port 49860 [preauth]
Oct  1 22:56:31 nativespace-cdp sshd[2582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.190.159.34  user=root
Oct  1 22:56:31 nativespace-cdp sshd[2582]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:31 nativespace-cdp sshd[2561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.199.87  user=root
Oct  1 22:56:31 nativespace-cdp sshd[2561]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:31 nativespace-cdp sshd[2564]: Received disconnect from 27.112.78.50 port 52834:11: Bye Bye [preauth]
Oct  1 22:56:31 nativespace-cdp sshd[2564]: Disconnected from 27.112.78.50 port 52834 [preauth]
Oct  1 22:56:32 nativespace-cdp sshd[2587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.180.148  user=root
Oct  1 22:56:32 nativespace-cdp sshd[2587]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:32 nativespace-cdp sshd[2578]: Failed password for root from 92.246.84.15 port 34352 ssh2
Oct  1 22:56:32 nativespace-cdp sshd[2578]: Received disconnect from 92.246.84.15 port 34352:11: Bye Bye [preauth]
Oct  1 22:56:32 nativespace-cdp sshd[2578]: Disconnected from 92.246.84.15 port 34352 [preauth]
Oct  1 22:56:32 nativespace-cdp sshd[2585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.212.238  user=root
Oct  1 22:56:32 nativespace-cdp sshd[2585]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:32 nativespace-cdp sshd[2582]: Failed password for root from 35.190.159.34 port 33726 ssh2
Oct  1 22:56:32 nativespace-cdp sshd[2582]: Received disconnect from 35.190.159.34 port 33726:11: Bye Bye [preauth]
Oct  1 22:56:32 nativespace-cdp sshd[2582]: Disconnected from 35.190.159.34 port 33726 [preauth]
Oct  1 22:56:32 nativespace-cdp sshd[2561]: Failed password for root from 47.236.199.87 port 47180 ssh2
Oct  1 22:56:33 nativespace-cdp sshd[2561]: Received disconnect from 47.236.199.87 port 47180:11: Bye Bye [preauth]
Oct  1 22:56:33 nativespace-cdp sshd[2561]: Disconnected from 47.236.199.87 port 47180 [preauth]
Oct  1 22:56:33 nativespace-cdp sshd[2607]: Connection closed by 159.100.136.21 port 56218 [preauth]
Oct  1 22:56:33 nativespace-cdp sshd[2587]: Failed password for root from 129.150.180.148 port 34586 ssh2
Oct  1 22:56:34 nativespace-cdp sshd[2587]: Received disconnect from 129.150.180.148 port 34586:11: Bye Bye [preauth]
Oct  1 22:56:34 nativespace-cdp sshd[2587]: Disconnected from 129.150.180.148 port 34586 [preauth]
Oct  1 22:56:34 nativespace-cdp sshd[2585]: Failed password for root from 144.34.212.238 port 45156 ssh2
Oct  1 22:56:34 nativespace-cdp sshd[2585]: Received disconnect from 144.34.212.238 port 45156:11: Bye Bye [preauth]
Oct  1 22:56:34 nativespace-cdp sshd[2585]: Disconnected from 144.34.212.238 port 45156 [preauth]
Oct  1 22:56:35 nativespace-cdp sshd[2617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.205.30  user=root
Oct  1 22:56:35 nativespace-cdp sshd[2617]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:36 nativespace-cdp sshd[2624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.162  user=root
Oct  1 22:56:36 nativespace-cdp sshd[2624]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:36 nativespace-cdp sshd[2622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151  user=root
Oct  1 22:56:36 nativespace-cdp sshd[2622]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:37 nativespace-cdp sshd[2617]: Failed password for root from 103.172.205.30 port 43108 ssh2
Oct  1 22:56:37 nativespace-cdp sshd[2617]: Received disconnect from 103.172.205.30 port 43108:11: Bye Bye [preauth]
Oct  1 22:56:37 nativespace-cdp sshd[2617]: Disconnected from 103.172.205.30 port 43108 [preauth]
Oct  1 22:56:39 nativespace-cdp sshd[2624]: Failed password for root from 45.157.150.162 port 36964 ssh2
Oct  1 22:56:39 nativespace-cdp sshd[2622]: Failed password for root from 179.33.186.151 port 49384 ssh2
Oct  1 22:56:42 nativespace-cdp sshd[2622]: Received disconnect from 179.33.186.151 port 49384:11: Bye Bye [preauth]
Oct  1 22:56:42 nativespace-cdp sshd[2622]: Disconnected from 179.33.186.151 port 49384 [preauth]
Oct  1 22:56:42 nativespace-cdp sshd[2658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.26.47.38  user=root
Oct  1 22:56:42 nativespace-cdp sshd[2658]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:44 nativespace-cdp sshd[2624]: Received disconnect from 45.157.150.162 port 36964:11: Bye Bye [preauth]
Oct  1 22:56:44 nativespace-cdp sshd[2624]: Disconnected from 45.157.150.162 port 36964 [preauth]
Oct  1 22:56:44 nativespace-cdp sshd[2658]: Failed password for root from 195.26.47.38 port 53980 ssh2
Oct  1 22:56:44 nativespace-cdp sshd[2658]: Received disconnect from 195.26.47.38 port 53980:11: Bye Bye [preauth]
Oct  1 22:56:44 nativespace-cdp sshd[2658]: Disconnected from 195.26.47.38 port 53980 [preauth]
Oct  1 22:56:47 nativespace-cdp sshd[2681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.199.87  user=root
Oct  1 22:56:47 nativespace-cdp sshd[2681]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:48 nativespace-cdp sshd[2681]: Failed password for root from 47.236.199.87 port 48058 ssh2
Oct  1 22:56:51 nativespace-cdp sshd[2681]: Received disconnect from 47.236.199.87 port 48058:11: Bye Bye [preauth]
Oct  1 22:56:51 nativespace-cdp sshd[2681]: Disconnected from 47.236.199.87 port 48058 [preauth]
Oct  1 22:56:53 nativespace-cdp sshd[2724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.150.124.201  user=root
Oct  1 22:56:53 nativespace-cdp sshd[2724]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:56:55 nativespace-cdp sshd[2724]: Failed password for root from 103.150.124.201 port 49126 ssh2
Oct  1 22:56:56 nativespace-cdp sshd[2724]: Received disconnect from 103.150.124.201 port 49126:11: Bye Bye [preauth]
Oct  1 22:56:56 nativespace-cdp sshd[2724]: Disconnected from 103.150.124.201 port 49126 [preauth]
Oct  1 22:56:59 nativespace-cdp sshd[2794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.242.234.8  user=root
Oct  1 22:56:59 nativespace-cdp sshd[2794]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:01 nativespace-cdp sshd[2794]: Failed password for root from 185.242.234.8 port 54031 ssh2
Oct  1 22:57:03 nativespace-cdp sshd[2794]: Received disconnect from 185.242.234.8 port 54031:11: Bye Bye [preauth]
Oct  1 22:57:03 nativespace-cdp sshd[2794]: Disconnected from 185.242.234.8 port 54031 [preauth]
Oct  1 22:57:04 nativespace-cdp sshd[2916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.190.159.34  user=root
Oct  1 22:57:04 nativespace-cdp sshd[2916]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:04 nativespace-cdp sshd[2919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.14.195.48  user=root
Oct  1 22:57:04 nativespace-cdp sshd[2919]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:05 nativespace-cdp sshd[2923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.199.87  user=root
Oct  1 22:57:05 nativespace-cdp sshd[2923]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:05 nativespace-cdp sshd[2916]: Failed password for root from 35.190.159.34 port 34478 ssh2
Oct  1 22:57:05 nativespace-cdp sshd[2916]: Received disconnect from 35.190.159.34 port 34478:11: Bye Bye [preauth]
Oct  1 22:57:05 nativespace-cdp sshd[2916]: Disconnected from 35.190.159.34 port 34478 [preauth]
Oct  1 22:57:06 nativespace-cdp sshd[2932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.167.13.232  user=root
Oct  1 22:57:06 nativespace-cdp sshd[2932]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:06 nativespace-cdp sshd[2919]: Failed password for root from 106.14.195.48 port 56726 ssh2
Oct  1 22:57:06 nativespace-cdp sshd[2919]: Received disconnect from 106.14.195.48 port 56726:11: Bye Bye [preauth]
Oct  1 22:57:06 nativespace-cdp sshd[2919]: Disconnected from 106.14.195.48 port 56726 [preauth]
Oct  1 22:57:07 nativespace-cdp sshd[2923]: Failed password for root from 47.236.199.87 port 40214 ssh2
Oct  1 22:57:07 nativespace-cdp sshd[2943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.84.15  user=root
Oct  1 22:57:07 nativespace-cdp sshd[2943]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:07 nativespace-cdp sshd[2939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.116.40  user=root
Oct  1 22:57:07 nativespace-cdp sshd[2939]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:07 nativespace-cdp sshd[2923]: Received disconnect from 47.236.199.87 port 40214:11: Bye Bye [preauth]
Oct  1 22:57:07 nativespace-cdp sshd[2923]: Disconnected from 47.236.199.87 port 40214 [preauth]
Oct  1 22:57:08 nativespace-cdp sshd[2932]: Failed password for root from 223.167.13.232 port 48958 ssh2
Oct  1 22:57:08 nativespace-cdp sshd[2932]: Received disconnect from 223.167.13.232 port 48958:11: Bye Bye [preauth]
Oct  1 22:57:08 nativespace-cdp sshd[2932]: Disconnected from 223.167.13.232 port 48958 [preauth]
Oct  1 22:57:08 nativespace-cdp sshd[2943]: Failed password for root from 92.246.84.15 port 46214 ssh2
Oct  1 22:57:08 nativespace-cdp sshd[2943]: Received disconnect from 92.246.84.15 port 46214:11: Bye Bye [preauth]
Oct  1 22:57:08 nativespace-cdp sshd[2943]: Disconnected from 92.246.84.15 port 46214 [preauth]
Oct  1 22:57:09 nativespace-cdp sshd[2939]: Failed password for root from 101.36.116.40 port 49912 ssh2
Oct  1 22:57:09 nativespace-cdp sshd[2951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.180.148  user=root
Oct  1 22:57:09 nativespace-cdp sshd[2951]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:09 nativespace-cdp sshd[2939]: Received disconnect from 101.36.116.40 port 49912:11: Bye Bye [preauth]
Oct  1 22:57:09 nativespace-cdp sshd[2939]: Disconnected from 101.36.116.40 port 49912 [preauth]
Oct  1 22:57:09 nativespace-cdp sshd[2949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.232  user=root
Oct  1 22:57:09 nativespace-cdp sshd[2949]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:11 nativespace-cdp sshd[2951]: Failed password for root from 129.150.180.148 port 40936 ssh2
Oct  1 22:57:12 nativespace-cdp sshd[2949]: Failed password for root from 14.225.213.232 port 37634 ssh2
Oct  1 22:57:15 nativespace-cdp sshd[2951]: Received disconnect from 129.150.180.148 port 40936:11: Bye Bye [preauth]
Oct  1 22:57:15 nativespace-cdp sshd[2951]: Disconnected from 129.150.180.148 port 40936 [preauth]
Oct  1 22:57:15 nativespace-cdp sshd[2958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.212.238  user=root
Oct  1 22:57:15 nativespace-cdp sshd[2958]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:16 nativespace-cdp sshd[2949]: Received disconnect from 14.225.213.232 port 37634:11: Bye Bye [preauth]
Oct  1 22:57:16 nativespace-cdp sshd[2949]: Disconnected from 14.225.213.232 port 37634 [preauth]
Oct  1 22:57:16 nativespace-cdp sshd[2968]: Connection closed by 103.186.49.217 port 43536 [preauth]
Oct  1 22:57:18 nativespace-cdp sshd[2978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.162  user=root
Oct  1 22:57:18 nativespace-cdp sshd[2978]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:18 nativespace-cdp sshd[2972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.78.50  user=root
Oct  1 22:57:18 nativespace-cdp sshd[2972]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:18 nativespace-cdp sshd[2958]: Failed password for root from 144.34.212.238 port 40614 ssh2
Oct  1 22:57:18 nativespace-cdp sshd[2958]: Received disconnect from 144.34.212.238 port 40614:11: Bye Bye [preauth]
Oct  1 22:57:18 nativespace-cdp sshd[2958]: Disconnected from 144.34.212.238 port 40614 [preauth]
Oct  1 22:57:18 nativespace-cdp sshd[2976]: Invalid user ubuntu from 125.88.239.33 port 47892
Oct  1 22:57:18 nativespace-cdp sshd[2976]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:57:18 nativespace-cdp sshd[2976]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:57:18 nativespace-cdp sshd[2976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.88.239.33
Oct  1 22:57:20 nativespace-cdp sshd[2978]: Failed password for root from 45.157.150.162 port 49296 ssh2
Oct  1 22:57:20 nativespace-cdp sshd[2972]: Failed password for root from 27.112.78.50 port 37308 ssh2
Oct  1 22:57:20 nativespace-cdp sshd[2978]: Received disconnect from 45.157.150.162 port 49296:11: Bye Bye [preauth]
Oct  1 22:57:20 nativespace-cdp sshd[2978]: Disconnected from 45.157.150.162 port 49296 [preauth]
Oct  1 22:57:20 nativespace-cdp sshd[2972]: Received disconnect from 27.112.78.50 port 37308:11: Bye Bye [preauth]
Oct  1 22:57:20 nativespace-cdp sshd[2972]: Disconnected from 27.112.78.50 port 37308 [preauth]
Oct  1 22:57:20 nativespace-cdp sshd[2976]: Failed password for invalid user ubuntu from 125.88.239.33 port 47892 ssh2
Oct  1 22:57:21 nativespace-cdp sshd[2976]: Received disconnect from 125.88.239.33 port 47892:11: Bye Bye [preauth]
Oct  1 22:57:21 nativespace-cdp sshd[2976]: Disconnected from 125.88.239.33 port 47892 [preauth]
Oct  1 22:57:21 nativespace-cdp sshd[2999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.26.47.38  user=root
Oct  1 22:57:21 nativespace-cdp sshd[2999]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:22 nativespace-cdp sshd[2996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151  user=root
Oct  1 22:57:22 nativespace-cdp sshd[2996]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:22 nativespace-cdp sshd[2993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.199.87  user=root
Oct  1 22:57:22 nativespace-cdp sshd[2993]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:23 nativespace-cdp sshd[2996]: Failed password for root from 179.33.186.151 port 48547 ssh2
Oct  1 22:57:23 nativespace-cdp sshd[2993]: Failed password for root from 47.236.199.87 port 37288 ssh2
Oct  1 22:57:23 nativespace-cdp sshd[2996]: Received disconnect from 179.33.186.151 port 48547:11: Bye Bye [preauth]
Oct  1 22:57:23 nativespace-cdp sshd[2996]: Disconnected from 179.33.186.151 port 48547 [preauth]
Oct  1 22:57:23 nativespace-cdp sshd[2993]: Received disconnect from 47.236.199.87 port 37288:11: Bye Bye [preauth]
Oct  1 22:57:23 nativespace-cdp sshd[2993]: Disconnected from 47.236.199.87 port 37288 [preauth]
Oct  1 22:57:24 nativespace-cdp sshd[2999]: Failed password for root from 195.26.47.38 port 60062 ssh2
Oct  1 22:57:24 nativespace-cdp sshd[2999]: Received disconnect from 195.26.47.38 port 60062:11: Bye Bye [preauth]
Oct  1 22:57:24 nativespace-cdp sshd[2999]: Disconnected from 195.26.47.38 port 60062 [preauth]
Oct  1 22:57:26 nativespace-cdp sshd[3049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.205.30  user=root
Oct  1 22:57:26 nativespace-cdp sshd[3049]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:28 nativespace-cdp sshd[3049]: Failed password for root from 103.172.205.30 port 53768 ssh2
Oct  1 22:57:33 nativespace-cdp sshd[3049]: Received disconnect from 103.172.205.30 port 53768:11: Bye Bye [preauth]
Oct  1 22:57:33 nativespace-cdp sshd[3049]: Disconnected from 103.172.205.30 port 53768 [preauth]
Oct  1 22:57:37 nativespace-cdp sshd[3082]: Invalid user ubuntu from 35.190.159.34 port 35688
Oct  1 22:57:37 nativespace-cdp sshd[3082]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:57:37 nativespace-cdp sshd[3082]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:57:37 nativespace-cdp sshd[3082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.190.159.34
Oct  1 22:57:39 nativespace-cdp sshd[3082]: Failed password for invalid user ubuntu from 35.190.159.34 port 35688 ssh2
Oct  1 22:57:42 nativespace-cdp sshd[3082]: Received disconnect from 35.190.159.34 port 35688:11: Bye Bye [preauth]
Oct  1 22:57:42 nativespace-cdp sshd[3082]: Disconnected from 35.190.159.34 port 35688 [preauth]
Oct  1 22:57:42 nativespace-cdp sshd[3100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.242.234.8  user=root
Oct  1 22:57:42 nativespace-cdp sshd[3100]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:43 nativespace-cdp sshd[3104]: Invalid user ubuntu from 103.150.124.201 port 33430
Oct  1 22:57:43 nativespace-cdp sshd[3104]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:57:43 nativespace-cdp sshd[3104]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:57:43 nativespace-cdp sshd[3104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.150.124.201
Oct  1 22:57:44 nativespace-cdp sshd[3084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.199.87  user=root
Oct  1 22:57:44 nativespace-cdp sshd[3084]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:45 nativespace-cdp sshd[3100]: Failed password for root from 185.242.234.8 port 60314 ssh2
Oct  1 22:57:45 nativespace-cdp sshd[3100]: Received disconnect from 185.242.234.8 port 60314:11: Bye Bye [preauth]
Oct  1 22:57:45 nativespace-cdp sshd[3100]: Disconnected from 185.242.234.8 port 60314 [preauth]
Oct  1 22:57:45 nativespace-cdp sshd[3104]: Failed password for invalid user ubuntu from 103.150.124.201 port 33430 ssh2
Oct  1 22:57:45 nativespace-cdp sshd[3104]: Received disconnect from 103.150.124.201 port 33430:11: Bye Bye [preauth]
Oct  1 22:57:45 nativespace-cdp sshd[3104]: Disconnected from 103.150.124.201 port 33430 [preauth]
Oct  1 22:57:46 nativespace-cdp sshd[3084]: Failed password for root from 47.236.199.87 port 47642 ssh2
Oct  1 22:57:46 nativespace-cdp sshd[3084]: Received disconnect from 47.236.199.87 port 47642:11: Bye Bye [preauth]
Oct  1 22:57:46 nativespace-cdp sshd[3084]: Disconnected from 47.236.199.87 port 47642 [preauth]
Oct  1 22:57:51 nativespace-cdp sshd[3124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.88.239.33  user=root
Oct  1 22:57:51 nativespace-cdp sshd[3124]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:51 nativespace-cdp sshd[3140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.180.148  user=root
Oct  1 22:57:51 nativespace-cdp sshd[3140]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:53 nativespace-cdp sshd[3148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.116.40  user=root
Oct  1 22:57:53 nativespace-cdp sshd[3148]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:53 nativespace-cdp sshd[3124]: Failed password for root from 125.88.239.33 port 54182 ssh2
Oct  1 22:57:53 nativespace-cdp sshd[3124]: Received disconnect from 125.88.239.33 port 54182:11: Bye Bye [preauth]
Oct  1 22:57:53 nativespace-cdp sshd[3124]: Disconnected from 125.88.239.33 port 54182 [preauth]
Oct  1 22:57:54 nativespace-cdp sshd[3140]: Failed password for root from 129.150.180.148 port 47286 ssh2
Oct  1 22:57:54 nativespace-cdp sshd[3140]: Received disconnect from 129.150.180.148 port 47286:11: Bye Bye [preauth]
Oct  1 22:57:54 nativespace-cdp sshd[3140]: Disconnected from 129.150.180.148 port 47286 [preauth]
Oct  1 22:57:54 nativespace-cdp sshd[3148]: Failed password for root from 101.36.116.40 port 49964 ssh2
Oct  1 22:57:55 nativespace-cdp sshd[3148]: Received disconnect from 101.36.116.40 port 49964:11: Bye Bye [preauth]
Oct  1 22:57:55 nativespace-cdp sshd[3148]: Disconnected from 101.36.116.40 port 49964 [preauth]
Oct  1 22:57:56 nativespace-cdp sshd[3185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.212.238  user=root
Oct  1 22:57:56 nativespace-cdp sshd[3185]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:56 nativespace-cdp sshd[3183]: Invalid user ubuntu from 14.225.213.232 port 50056
Oct  1 22:57:56 nativespace-cdp sshd[3183]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:57:56 nativespace-cdp sshd[3183]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:57:56 nativespace-cdp sshd[3183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.232
Oct  1 22:57:58 nativespace-cdp sshd[3185]: Failed password for root from 144.34.212.238 port 48484 ssh2
Oct  1 22:57:58 nativespace-cdp sshd[3183]: Failed password for invalid user ubuntu from 14.225.213.232 port 50056 ssh2
Oct  1 22:57:59 nativespace-cdp sshd[3185]: Received disconnect from 144.34.212.238 port 48484:11: Bye Bye [preauth]
Oct  1 22:57:59 nativespace-cdp sshd[3185]: Disconnected from 144.34.212.238 port 48484 [preauth]
Oct  1 22:57:59 nativespace-cdp sshd[3183]: Received disconnect from 14.225.213.232 port 50056:11: Bye Bye [preauth]
Oct  1 22:57:59 nativespace-cdp sshd[3183]: Disconnected from 14.225.213.232 port 50056 [preauth]
Oct  1 22:57:59 nativespace-cdp sshd[3196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.49.217  user=root
Oct  1 22:57:59 nativespace-cdp sshd[3196]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:57:59 nativespace-cdp sshd[3200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.150.162  user=root
Oct  1 22:57:59 nativespace-cdp sshd[3200]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:01 nativespace-cdp sshd[3196]: Failed password for root from 103.186.49.217 port 56234 ssh2
Oct  1 22:58:01 nativespace-cdp sshd[3196]: Received disconnect from 103.186.49.217 port 56234:11: Bye Bye [preauth]
Oct  1 22:58:01 nativespace-cdp sshd[3196]: Disconnected from 103.186.49.217 port 56234 [preauth]
Oct  1 22:58:01 nativespace-cdp sshd[3200]: Failed password for root from 45.157.150.162 port 33344 ssh2
Oct  1 22:58:01 nativespace-cdp sshd[3200]: Received disconnect from 45.157.150.162 port 33344:11: Bye Bye [preauth]
Oct  1 22:58:01 nativespace-cdp sshd[3200]: Disconnected from 45.157.150.162 port 33344 [preauth]
Oct  1 22:58:01 nativespace-cdp sshd[3206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.199.87  user=root
Oct  1 22:58:01 nativespace-cdp sshd[3206]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:04 nativespace-cdp sshd[3206]: Failed password for root from 47.236.199.87 port 50742 ssh2
Oct  1 22:58:05 nativespace-cdp sshd[3206]: Received disconnect from 47.236.199.87 port 50742:11: Bye Bye [preauth]
Oct  1 22:58:05 nativespace-cdp sshd[3206]: Disconnected from 47.236.199.87 port 50742 [preauth]
Oct  1 22:58:08 nativespace-cdp sshd[3241]: Connection closed by 27.112.78.50 port 58046 [preauth]
Oct  1 22:58:09 nativespace-cdp sshd[3245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.26.47.38  user=root
Oct  1 22:58:09 nativespace-cdp sshd[3245]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:11 nativespace-cdp sshd[3245]: Failed password for root from 195.26.47.38 port 44872 ssh2
Oct  1 22:58:11 nativespace-cdp sshd[3245]: Received disconnect from 195.26.47.38 port 44872:11: Bye Bye [preauth]
Oct  1 22:58:11 nativespace-cdp sshd[3245]: Disconnected from 195.26.47.38 port 44872 [preauth]
Oct  1 22:58:13 nativespace-cdp sshd[3254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.190.159.34  user=root
Oct  1 22:58:13 nativespace-cdp sshd[3254]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:15 nativespace-cdp sshd[3260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.152.75  user=root
Oct  1 22:58:15 nativespace-cdp sshd[3260]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:15 nativespace-cdp sshd[3254]: Failed password for root from 35.190.159.34 port 46010 ssh2
Oct  1 22:58:15 nativespace-cdp sshd[3254]: Received disconnect from 35.190.159.34 port 46010:11: Bye Bye [preauth]
Oct  1 22:58:15 nativespace-cdp sshd[3254]: Disconnected from 35.190.159.34 port 46010 [preauth]
Oct  1 22:58:17 nativespace-cdp sshd[3264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.43.197  user=root
Oct  1 22:58:17 nativespace-cdp sshd[3264]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:18 nativespace-cdp sshd[3260]: Failed password for root from 210.59.152.75 port 44402 ssh2
Oct  1 22:58:18 nativespace-cdp sshd[3260]: Received disconnect from 210.59.152.75 port 44402:11: Bye Bye [preauth]
Oct  1 22:58:18 nativespace-cdp sshd[3260]: Disconnected from 210.59.152.75 port 44402 [preauth]
Oct  1 22:58:19 nativespace-cdp sshd[3264]: Failed password for root from 209.141.43.197 port 36444 ssh2
Oct  1 22:58:23 nativespace-cdp sshd[3275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.199.87  user=root
Oct  1 22:58:23 nativespace-cdp sshd[3275]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:23 nativespace-cdp sshd[3264]: Received disconnect from 209.141.43.197 port 36444:11: Bye Bye [preauth]
Oct  1 22:58:23 nativespace-cdp sshd[3264]: Disconnected from 209.141.43.197 port 36444 [preauth]
Oct  1 22:58:23 nativespace-cdp sshd[3286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.205.30  user=root
Oct  1 22:58:23 nativespace-cdp sshd[3286]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:25 nativespace-cdp sshd[3275]: Failed password for root from 47.236.199.87 port 60576 ssh2
Oct  1 22:58:25 nativespace-cdp sshd[3286]: Failed password for root from 103.172.205.30 port 52134 ssh2
Oct  1 22:58:25 nativespace-cdp sshd[3275]: Received disconnect from 47.236.199.87 port 60576:11: Bye Bye [preauth]
Oct  1 22:58:25 nativespace-cdp sshd[3275]: Disconnected from 47.236.199.87 port 60576 [preauth]
Oct  1 22:58:25 nativespace-cdp sshd[3286]: Received disconnect from 103.172.205.30 port 52134:11: Bye Bye [preauth]
Oct  1 22:58:25 nativespace-cdp sshd[3286]: Disconnected from 103.172.205.30 port 52134 [preauth]
Oct  1 22:58:31 nativespace-cdp sshd[3310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.116.40  user=root
Oct  1 22:58:31 nativespace-cdp sshd[3310]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:33 nativespace-cdp sshd[3310]: Failed password for root from 101.36.116.40 port 50014 ssh2
Oct  1 22:58:37 nativespace-cdp sshd[3318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.150.124.201  user=root
Oct  1 22:58:37 nativespace-cdp sshd[3318]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:37 nativespace-cdp sshd[3316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.167.13.232  user=root
Oct  1 22:58:37 nativespace-cdp sshd[3316]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:38 nativespace-cdp sshd[3310]: Received disconnect from 101.36.116.40 port 50014:11: Bye Bye [preauth]
Oct  1 22:58:38 nativespace-cdp sshd[3310]: Disconnected from 101.36.116.40 port 50014 [preauth]
Oct  1 22:58:38 nativespace-cdp sshd[3336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.180.148  user=root
Oct  1 22:58:38 nativespace-cdp sshd[3336]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:39 nativespace-cdp sshd[3318]: Failed password for root from 103.150.124.201 port 45958 ssh2
Oct  1 22:58:39 nativespace-cdp sshd[3316]: Failed password for root from 223.167.13.232 port 59206 ssh2
Oct  1 22:58:39 nativespace-cdp sshd[3318]: Received disconnect from 103.150.124.201 port 45958:11: Bye Bye [preauth]
Oct  1 22:58:39 nativespace-cdp sshd[3318]: Disconnected from 103.150.124.201 port 45958 [preauth]
Oct  1 22:58:39 nativespace-cdp sshd[3316]: Received disconnect from 223.167.13.232 port 59206:11: Bye Bye [preauth]
Oct  1 22:58:39 nativespace-cdp sshd[3316]: Disconnected from 223.167.13.232 port 59206 [preauth]
Oct  1 22:58:39 nativespace-cdp sshd[3341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.199.87  user=root
Oct  1 22:58:39 nativespace-cdp sshd[3341]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:40 nativespace-cdp sshd[3336]: Failed password for root from 129.150.180.148 port 53638 ssh2
Oct  1 22:58:40 nativespace-cdp sshd[3336]: Received disconnect from 129.150.180.148 port 53638:11: Bye Bye [preauth]
Oct  1 22:58:40 nativespace-cdp sshd[3336]: Disconnected from 129.150.180.148 port 53638 [preauth]
Oct  1 22:58:40 nativespace-cdp sshd[3355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.212.238  user=root
Oct  1 22:58:40 nativespace-cdp sshd[3355]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:41 nativespace-cdp sshd[3363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.232  user=root
Oct  1 22:58:41 nativespace-cdp sshd[3363]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:42 nativespace-cdp sshd[3375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.26.47.38  user=root
Oct  1 22:58:42 nativespace-cdp sshd[3375]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:42 nativespace-cdp sshd[3355]: Failed password for root from 144.34.212.238 port 54536 ssh2
Oct  1 22:58:42 nativespace-cdp sshd[3341]: Failed password for root from 47.236.199.87 port 49498 ssh2
Oct  1 22:58:43 nativespace-cdp sshd[3363]: Failed password for root from 14.225.213.232 port 34246 ssh2
Oct  1 22:58:43 nativespace-cdp sshd[3375]: Failed password for root from 195.26.47.38 port 53204 ssh2
Oct  1 22:58:45 nativespace-cdp sshd[3375]: Received disconnect from 195.26.47.38 port 53204:11: Bye Bye [preauth]
Oct  1 22:58:45 nativespace-cdp sshd[3375]: Disconnected from 195.26.47.38 port 53204 [preauth]
Oct  1 22:58:46 nativespace-cdp sshd[3355]: Received disconnect from 144.34.212.238 port 54536:11: Bye Bye [preauth]
Oct  1 22:58:46 nativespace-cdp sshd[3355]: Disconnected from 144.34.212.238 port 54536 [preauth]
Oct  1 22:58:46 nativespace-cdp sshd[3363]: Received disconnect from 14.225.213.232 port 34246:11: Bye Bye [preauth]
Oct  1 22:58:46 nativespace-cdp sshd[3363]: Disconnected from 14.225.213.232 port 34246 [preauth]
Oct  1 22:58:47 nativespace-cdp sshd[3409]: Invalid user ubuntu from 179.33.186.151 port 39187
Oct  1 22:58:47 nativespace-cdp sshd[3409]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 22:58:47 nativespace-cdp sshd[3409]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 22:58:47 nativespace-cdp sshd[3409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151
Oct  1 22:58:49 nativespace-cdp sshd[3427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.190.159.34  user=root
Oct  1 22:58:49 nativespace-cdp sshd[3427]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:49 nativespace-cdp sshd[3413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.49.217  user=root
Oct  1 22:58:49 nativespace-cdp sshd[3413]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:58:49 nativespace-cdp sshd[3409]: Failed password for invalid user ubuntu from 179.33.186.151 port 39187 ssh2
Oct  1 22:58:49 nativespace-cdp sshd[3409]: Received disconnect from 179.33.186.151 port 39187:11: Bye Bye [preauth]
Oct  1 22:58:49 nativespace-cdp sshd[3409]: Disconnected from 179.33.186.151 port 39187 [preauth]
Oct  1 22:58:51 nativespace-cdp sshd[3427]: Failed password for root from 35.190.159.34 port 42896 ssh2
Oct  1 22:58:51 nativespace-cdp sshd[3427]: Received disconnect from 35.190.159.34 port 42896:11: Bye Bye [preauth]
Oct  1 22:58:51 nativespace-cdp sshd[3427]: Disconnected from 35.190.159.34 port 42896 [preauth]
Oct  1 22:58:51 nativespace-cdp sshd[3413]: Failed password for root from 103.186.49.217 port 40698 ssh2
Oct  1 22:58:51 nativespace-cdp sshd[3413]: Received disconnect from 103.186.49.217 port 40698:11: Bye Bye [preauth]
Oct  1 22:58:51 nativespace-cdp sshd[3413]: Disconnected from 103.186.49.217 port 40698 [preauth]
Oct  1 22:58:52 nativespace-cdp sshd[3341]: Received disconnect from 47.236.199.87 port 49498:11: Bye Bye [preauth]
Oct  1 22:58:52 nativespace-cdp sshd[3341]: Disconnected from 47.236.199.87 port 49498 [preauth]
Oct  1 22:58:58 nativespace-cdp sshd[3461]: Connection closed by 27.112.78.50 port 40220 [preauth]
Oct  1 22:58:59 nativespace-cdp sshd[3458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.236.199.87  user=root
Oct  1 22:58:59 nativespace-cdp sshd[3458]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:01 nativespace-cdp sshd[3458]: Failed password for root from 47.236.199.87 port 47422 ssh2
Oct  1 22:59:01 nativespace-cdp sshd[3458]: Received disconnect from 47.236.199.87 port 47422:11: Bye Bye [preauth]
Oct  1 22:59:01 nativespace-cdp sshd[3458]: Disconnected from 47.236.199.87 port 47422 [preauth]
Oct  1 22:59:11 nativespace-cdp sshd[3502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.116.40  user=root
Oct  1 22:59:11 nativespace-cdp sshd[3502]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:13 nativespace-cdp sshd[3510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.205.30  user=root
Oct  1 22:59:13 nativespace-cdp sshd[3510]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:13 nativespace-cdp sshd[3357]: Connection closed by 221.229.218.50 port 36581 [preauth]
Oct  1 22:59:14 nativespace-cdp sshd[3502]: Failed password for root from 101.36.116.40 port 50064 ssh2
Oct  1 22:59:15 nativespace-cdp sshd[3510]: Failed password for root from 103.172.205.30 port 50180 ssh2
Oct  1 22:59:17 nativespace-cdp sshd[3510]: Received disconnect from 103.172.205.30 port 50180:11: Bye Bye [preauth]
Oct  1 22:59:17 nativespace-cdp sshd[3510]: Disconnected from 103.172.205.30 port 50180 [preauth]
Oct  1 22:59:18 nativespace-cdp sshd[3502]: Received disconnect from 101.36.116.40 port 50064:11: Bye Bye [preauth]
Oct  1 22:59:18 nativespace-cdp sshd[3502]: Disconnected from 101.36.116.40 port 50064 [preauth]
Oct  1 22:59:22 nativespace-cdp sshd[3540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.180.148  user=root
Oct  1 22:59:22 nativespace-cdp sshd[3540]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:23 nativespace-cdp sshd[3549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.190.159.34  user=root
Oct  1 22:59:23 nativespace-cdp sshd[3549]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:23 nativespace-cdp sshd[3546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.150.124.201  user=root
Oct  1 22:59:23 nativespace-cdp sshd[3546]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:24 nativespace-cdp sshd[3540]: Failed password for root from 129.150.180.148 port 59988 ssh2
Oct  1 22:59:24 nativespace-cdp sshd[3540]: Received disconnect from 129.150.180.148 port 59988:11: Bye Bye [preauth]
Oct  1 22:59:24 nativespace-cdp sshd[3540]: Disconnected from 129.150.180.148 port 59988 [preauth]
Oct  1 22:59:24 nativespace-cdp sshd[3561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.26.47.38  user=root
Oct  1 22:59:24 nativespace-cdp sshd[3561]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:25 nativespace-cdp sshd[3549]: Failed password for root from 35.190.159.34 port 45754 ssh2
Oct  1 22:59:25 nativespace-cdp sshd[3549]: Received disconnect from 35.190.159.34 port 45754:11: Bye Bye [preauth]
Oct  1 22:59:25 nativespace-cdp sshd[3549]: Disconnected from 35.190.159.34 port 45754 [preauth]
Oct  1 22:59:25 nativespace-cdp sshd[3555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.232  user=root
Oct  1 22:59:25 nativespace-cdp sshd[3555]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:25 nativespace-cdp sshd[3546]: Failed password for root from 103.150.124.201 port 58494 ssh2
Oct  1 22:59:26 nativespace-cdp sshd[3546]: Received disconnect from 103.150.124.201 port 58494:11: Bye Bye [preauth]
Oct  1 22:59:26 nativespace-cdp sshd[3546]: Disconnected from 103.150.124.201 port 58494 [preauth]
Oct  1 22:59:26 nativespace-cdp sshd[3561]: Failed password for root from 195.26.47.38 port 54594 ssh2
Oct  1 22:59:26 nativespace-cdp sshd[3561]: Received disconnect from 195.26.47.38 port 54594:11: Bye Bye [preauth]
Oct  1 22:59:26 nativespace-cdp sshd[3561]: Disconnected from 195.26.47.38 port 54594 [preauth]
Oct  1 22:59:27 nativespace-cdp sshd[3564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.212.238  user=root
Oct  1 22:59:27 nativespace-cdp sshd[3564]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:27 nativespace-cdp sshd[3555]: Failed password for root from 14.225.213.232 port 46668 ssh2
Oct  1 22:59:27 nativespace-cdp sshd[3555]: Received disconnect from 14.225.213.232 port 46668:11: Bye Bye [preauth]
Oct  1 22:59:27 nativespace-cdp sshd[3555]: Disconnected from 14.225.213.232 port 46668 [preauth]
Oct  1 22:59:29 nativespace-cdp sshd[3564]: Failed password for root from 144.34.212.238 port 42056 ssh2
Oct  1 22:59:29 nativespace-cdp sshd[3564]: Received disconnect from 144.34.212.238 port 42056:11: Bye Bye [preauth]
Oct  1 22:59:29 nativespace-cdp sshd[3564]: Disconnected from 144.34.212.238 port 42056 [preauth]
Oct  1 22:59:34 nativespace-cdp sshd[3578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151  user=root
Oct  1 22:59:34 nativespace-cdp sshd[3578]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:36 nativespace-cdp sshd[3578]: Failed password for root from 179.33.186.151 port 36741 ssh2
Oct  1 22:59:36 nativespace-cdp sshd[3578]: Received disconnect from 179.33.186.151 port 36741:11: Bye Bye [preauth]
Oct  1 22:59:36 nativespace-cdp sshd[3578]: Disconnected from 179.33.186.151 port 36741 [preauth]
Oct  1 22:59:38 nativespace-cdp sshd[3597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.43.197  user=root
Oct  1 22:59:38 nativespace-cdp sshd[3597]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:40 nativespace-cdp sshd[3597]: Failed password for root from 209.141.43.197 port 44494 ssh2
Oct  1 22:59:44 nativespace-cdp sshd[3597]: Received disconnect from 209.141.43.197 port 44494:11: Bye Bye [preauth]
Oct  1 22:59:44 nativespace-cdp sshd[3597]: Disconnected from 209.141.43.197 port 44494 [preauth]
Oct  1 22:59:45 nativespace-cdp sshd[3644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.78.50  user=root
Oct  1 22:59:45 nativespace-cdp sshd[3644]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:45 nativespace-cdp sshd[3652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.152.75  user=root
Oct  1 22:59:45 nativespace-cdp sshd[3652]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 22:59:48 nativespace-cdp sshd[3644]: Failed password for root from 27.112.78.50 port 46938 ssh2
Oct  1 22:59:48 nativespace-cdp sshd[3652]: Failed password for root from 210.59.152.75 port 58042 ssh2
Oct  1 22:59:48 nativespace-cdp sshd[3644]: Received disconnect from 27.112.78.50 port 46938:11: Bye Bye [preauth]
Oct  1 22:59:48 nativespace-cdp sshd[3644]: Disconnected from 27.112.78.50 port 46938 [preauth]
Oct  1 22:59:48 nativespace-cdp sshd[3652]: Received disconnect from 210.59.152.75 port 58042:11: Bye Bye [preauth]
Oct  1 22:59:48 nativespace-cdp sshd[3652]: Disconnected from 210.59.152.75 port 58042 [preauth]
Oct  1 22:59:55 nativespace-cdp sshd[3727]: Connection closed by 101.36.116.40 port 50114 [preauth]
Oct  1 23:00:02 nativespace-cdp sshd[3860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.26.47.38  user=root
Oct  1 23:00:02 nativespace-cdp sshd[3860]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:04 nativespace-cdp sshd[3860]: Failed password for root from 195.26.47.38 port 58308 ssh2
Oct  1 23:00:04 nativespace-cdp sshd[3860]: Received disconnect from 195.26.47.38 port 58308:11: Bye Bye [preauth]
Oct  1 23:00:04 nativespace-cdp sshd[3860]: Disconnected from 195.26.47.38 port 58308 [preauth]
Oct  1 23:00:05 nativespace-cdp sshd[3906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.205.30  user=root
Oct  1 23:00:05 nativespace-cdp sshd[3906]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:06 nativespace-cdp sshd[3930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.180.148  user=root
Oct  1 23:00:06 nativespace-cdp sshd[3930]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:06 nativespace-cdp sshd[3906]: Failed password for root from 103.172.205.30 port 55060 ssh2
Oct  1 23:00:06 nativespace-cdp sshd[3906]: Received disconnect from 103.172.205.30 port 55060:11: Bye Bye [preauth]
Oct  1 23:00:06 nativespace-cdp sshd[3906]: Disconnected from 103.172.205.30 port 55060 [preauth]
Oct  1 23:00:08 nativespace-cdp sshd[3930]: Failed password for root from 129.150.180.148 port 9837 ssh2
Oct  1 23:00:08 nativespace-cdp sshd[3930]: Received disconnect from 129.150.180.148 port 9837:11: Bye Bye [preauth]
Oct  1 23:00:08 nativespace-cdp sshd[3930]: Disconnected from 129.150.180.148 port 9837 [preauth]
Oct  1 23:00:09 nativespace-cdp sshd[3732]: Connection reset by 125.88.239.33 port 51150 [preauth]
Oct  1 23:00:12 nativespace-cdp sshd[3948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.232  user=root
Oct  1 23:00:12 nativespace-cdp sshd[3948]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:13 nativespace-cdp sshd[3953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.150.124.201  user=root
Oct  1 23:00:13 nativespace-cdp sshd[3953]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:14 nativespace-cdp sshd[3959]: Invalid user ubuntu from 179.33.186.151 port 7683
Oct  1 23:00:14 nativespace-cdp sshd[3959]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 23:00:14 nativespace-cdp sshd[3959]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 23:00:14 nativespace-cdp sshd[3959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151
Oct  1 23:00:15 nativespace-cdp sshd[3948]: Failed password for root from 14.225.213.232 port 59098 ssh2
Oct  1 23:00:15 nativespace-cdp sshd[3948]: Received disconnect from 14.225.213.232 port 59098:11: Bye Bye [preauth]
Oct  1 23:00:15 nativespace-cdp sshd[3948]: Disconnected from 14.225.213.232 port 59098 [preauth]
Oct  1 23:00:16 nativespace-cdp sshd[3953]: Failed password for root from 103.150.124.201 port 42794 ssh2
Oct  1 23:00:16 nativespace-cdp sshd[3962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.212.238  user=root
Oct  1 23:00:16 nativespace-cdp sshd[3962]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:16 nativespace-cdp sshd[3953]: Received disconnect from 103.150.124.201 port 42794:11: Bye Bye [preauth]
Oct  1 23:00:16 nativespace-cdp sshd[3953]: Disconnected from 103.150.124.201 port 42794 [preauth]
Oct  1 23:00:16 nativespace-cdp sshd[3959]: Failed password for invalid user ubuntu from 179.33.186.151 port 7683 ssh2
Oct  1 23:00:16 nativespace-cdp sshd[3959]: Received disconnect from 179.33.186.151 port 7683:11: Bye Bye [preauth]
Oct  1 23:00:16 nativespace-cdp sshd[3959]: Disconnected from 179.33.186.151 port 7683 [preauth]
Oct  1 23:00:17 nativespace-cdp sshd[3967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.49.217  user=root
Oct  1 23:00:17 nativespace-cdp sshd[3967]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:17 nativespace-cdp sshd[3962]: Failed password for root from 144.34.212.238 port 53366 ssh2
Oct  1 23:00:18 nativespace-cdp sshd[3962]: Received disconnect from 144.34.212.238 port 53366:11: Bye Bye [preauth]
Oct  1 23:00:18 nativespace-cdp sshd[3962]: Disconnected from 144.34.212.238 port 53366 [preauth]
Oct  1 23:00:18 nativespace-cdp sshd[3967]: Failed password for root from 103.186.49.217 port 37852 ssh2
Oct  1 23:00:18 nativespace-cdp sshd[3967]: Received disconnect from 103.186.49.217 port 37852:11: Bye Bye [preauth]
Oct  1 23:00:18 nativespace-cdp sshd[3967]: Disconnected from 103.186.49.217 port 37852 [preauth]
Oct  1 23:00:24 nativespace-cdp sshd[3984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.88.239.33  user=root
Oct  1 23:00:24 nativespace-cdp sshd[3984]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:26 nativespace-cdp sshd[3984]: Failed password for root from 125.88.239.33 port 57444 ssh2
Oct  1 23:00:28 nativespace-cdp sshd[3984]: Received disconnect from 125.88.239.33 port 57444:11: Bye Bye [preauth]
Oct  1 23:00:28 nativespace-cdp sshd[3984]: Disconnected from 125.88.239.33 port 57444 [preauth]
Oct  1 23:00:32 nativespace-cdp sshd[3998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.116.40  user=root
Oct  1 23:00:32 nativespace-cdp sshd[3998]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:33 nativespace-cdp sshd[4003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.167.13.232  user=root
Oct  1 23:00:33 nativespace-cdp sshd[4003]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:34 nativespace-cdp sshd[4005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.78.50  user=root
Oct  1 23:00:34 nativespace-cdp sshd[4005]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:35 nativespace-cdp sshd[3998]: Failed password for root from 101.36.116.40 port 50166 ssh2
Oct  1 23:00:35 nativespace-cdp sshd[4003]: Failed password for root from 223.167.13.232 port 45026 ssh2
Oct  1 23:00:36 nativespace-cdp sshd[4005]: Failed password for root from 27.112.78.50 port 50946 ssh2
Oct  1 23:00:37 nativespace-cdp sshd[4005]: Received disconnect from 27.112.78.50 port 50946:11: Bye Bye [preauth]
Oct  1 23:00:37 nativespace-cdp sshd[4005]: Disconnected from 27.112.78.50 port 50946 [preauth]
Oct  1 23:00:37 nativespace-cdp sshd[3998]: Received disconnect from 101.36.116.40 port 50166:11: Bye Bye [preauth]
Oct  1 23:00:37 nativespace-cdp sshd[3998]: Disconnected from 101.36.116.40 port 50166 [preauth]
Oct  1 23:00:38 nativespace-cdp sshd[4003]: Received disconnect from 223.167.13.232 port 45026:11: Bye Bye [preauth]
Oct  1 23:00:38 nativespace-cdp sshd[4003]: Disconnected from 223.167.13.232 port 45026 [preauth]
Oct  1 23:00:41 nativespace-cdp sshd[4025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.26.47.38  user=root
Oct  1 23:00:41 nativespace-cdp sshd[4025]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:43 nativespace-cdp sshd[4025]: Failed password for root from 195.26.47.38 port 37768 ssh2
Oct  1 23:00:43 nativespace-cdp sshd[4025]: Received disconnect from 195.26.47.38 port 37768:11: Bye Bye [preauth]
Oct  1 23:00:43 nativespace-cdp sshd[4025]: Disconnected from 195.26.47.38 port 37768 [preauth]
Oct  1 23:00:50 nativespace-cdp sshd[4095]: Invalid user ubuntu from 129.150.180.148 port 16190
Oct  1 23:00:50 nativespace-cdp sshd[4095]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 23:00:50 nativespace-cdp sshd[4095]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 23:00:50 nativespace-cdp sshd[4095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.180.148
Oct  1 23:00:52 nativespace-cdp sshd[4095]: Failed password for invalid user ubuntu from 129.150.180.148 port 16190 ssh2
Oct  1 23:00:52 nativespace-cdp sshd[4095]: Received disconnect from 129.150.180.148 port 16190:11: Bye Bye [preauth]
Oct  1 23:00:52 nativespace-cdp sshd[4095]: Disconnected from 129.150.180.148 port 16190 [preauth]
Oct  1 23:00:54 nativespace-cdp sshd[4102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.172.205.30  user=root
Oct  1 23:00:54 nativespace-cdp sshd[4102]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:56 nativespace-cdp sshd[4112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.232  user=root
Oct  1 23:00:56 nativespace-cdp sshd[4112]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:56 nativespace-cdp sshd[4102]: Failed password for root from 103.172.205.30 port 54568 ssh2
Oct  1 23:00:56 nativespace-cdp sshd[4102]: Received disconnect from 103.172.205.30 port 54568:11: Bye Bye [preauth]
Oct  1 23:00:56 nativespace-cdp sshd[4102]: Disconnected from 103.172.205.30 port 54568 [preauth]
Oct  1 23:00:56 nativespace-cdp sshd[4115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.186.151  user=root
Oct  1 23:00:56 nativespace-cdp sshd[4115]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:57 nativespace-cdp sshd[4106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.43.197  user=root
Oct  1 23:00:57 nativespace-cdp sshd[4106]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:00:58 nativespace-cdp sshd[4112]: Failed password for root from 14.225.213.232 port 43284 ssh2
Oct  1 23:00:58 nativespace-cdp sshd[4115]: Failed password for root from 179.33.186.151 port 4961 ssh2
Oct  1 23:00:59 nativespace-cdp sshd[4106]: Failed password for root from 209.141.43.197 port 35762 ssh2
Oct  1 23:00:59 nativespace-cdp sshd[4106]: Failed password for root from 209.141.43.197 port 35762 ssh2
Oct  1 23:01:01 nativespace-cdp sshd[4112]: Received disconnect from 14.225.213.232 port 43284:11: Bye Bye [preauth]
Oct  1 23:01:01 nativespace-cdp sshd[4112]: Disconnected from 14.225.213.232 port 43284 [preauth]
Oct  1 23:01:01 nativespace-cdp sshd[4112]: Disconnected from 14.225.213.232 port 43284 [preauth]
Oct  1 23:01:05 nativespace-cdp sshd[4106]: Received disconnect from 209.141.43.197 port 35762:11: Bye Bye [preauth]
Oct  1 23:01:05 nativespace-cdp sshd[4106]: Disconnected from 209.141.43.197 port 35762 [preauth]
Oct  1 23:01:05 nativespace-cdp sshd[4152]: Connection closed by 103.150.124.201 port 55324 [preauth]
Oct  1 23:01:06 nativespace-cdp sshd[4115]: Received disconnect from 179.33.186.151 port 4961:11: Bye Bye [preauth]
Oct  1 23:01:06 nativespace-cdp sshd[4115]: Disconnected from 179.33.186.151 port 4961 [preauth]
Oct  1 23:01:07 nativespace-cdp sshd[4159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.68.226.136  user=root
Oct  1 23:01:07 nativespace-cdp sshd[4159]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:01:09 nativespace-cdp sshd[4159]: Failed password for root from 210.68.226.136 port 54662 ssh2
Oct  1 23:01:13 nativespace-cdp sshd[4159]: Received disconnect from 210.68.226.136 port 54662:11: Bye Bye [preauth]
Oct  1 23:01:13 nativespace-cdp sshd[4159]: Disconnected from 210.68.226.136 port 54662 [preauth]
Oct  1 23:01:14 nativespace-cdp sshd[4187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.152.75  user=root
Oct  1 23:01:14 nativespace-cdp sshd[4187]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:01:16 nativespace-cdp sshd[4187]: Failed password for root from 210.59.152.75 port 43466 ssh2
Oct  1 23:01:16 nativespace-cdp sshd[3946]: Connection closed by 221.229.218.50 port 45416 [preauth]
Oct  1 23:01:16 nativespace-cdp sshd[4187]: Received disconnect from 210.59.152.75 port 43466:11: Bye Bye [preauth]
Oct  1 23:01:16 nativespace-cdp sshd[4187]: Disconnected from 210.59.152.75 port 43466 [preauth]
Oct  1 23:01:18 nativespace-cdp sshd[4204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.26.47.38  user=root
Oct  1 23:01:18 nativespace-cdp sshd[4204]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:01:20 nativespace-cdp sshd[4204]: Failed password for root from 195.26.47.38 port 52866 ssh2
Oct  1 23:01:20 nativespace-cdp sshd[4204]: Received disconnect from 195.26.47.38 port 52866:11: Bye Bye [preauth]
Oct  1 23:01:20 nativespace-cdp sshd[4204]: Disconnected from 195.26.47.38 port 52866 [preauth]
Oct  1 23:01:27 nativespace-cdp sshd[4214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.78.50  user=root
Oct  1 23:01:27 nativespace-cdp sshd[4214]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:01:28 nativespace-cdp sshd[4109]: Connection closed by 221.229.218.50 port 49833 [preauth]
Oct  1 23:01:29 nativespace-cdp sshd[4214]: Failed password for root from 27.112.78.50 port 37820 ssh2
Oct  1 23:01:29 nativespace-cdp sshd[4214]: Received disconnect from 27.112.78.50 port 37820:11: Bye Bye [preauth]
Oct  1 23:01:29 nativespace-cdp sshd[4214]: Disconnected from 27.112.78.50 port 37820 [preauth]
Oct  1 23:01:36 nativespace-cdp sshd[4248]: Connection closed by 159.100.136.21 port 37652 [preauth]
Oct  1 23:01:36 nativespace-cdp sshd[4246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.180.148  user=root
Oct  1 23:01:36 nativespace-cdp sshd[4246]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:01:37 nativespace-cdp sshd[4253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.229.218.50  user=root
Oct  1 23:01:37 nativespace-cdp sshd[4253]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:01:38 nativespace-cdp sshd[4246]: Failed password for root from 129.150.180.148 port 22540 ssh2
Oct  1 23:01:38 nativespace-cdp sshd[4246]: Received disconnect from 129.150.180.148 port 22540:11: Bye Bye [preauth]
Oct  1 23:01:38 nativespace-cdp sshd[4246]: Disconnected from 129.150.180.148 port 22540 [preauth]
Oct  1 23:01:39 nativespace-cdp sshd[4253]: Failed password for root from 221.229.218.50 port 54253 ssh2
Oct  1 23:01:39 nativespace-cdp sshd[4253]: Received disconnect from 221.229.218.50 port 54253:11: Bye Bye [preauth]
Oct  1 23:01:39 nativespace-cdp sshd[4253]: Disconnected from 221.229.218.50 port 54253 [preauth]
Oct  1 23:01:41 nativespace-cdp sshd[4264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.213.232  user=root
Oct  1 23:01:41 nativespace-cdp sshd[4264]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:01:42 nativespace-cdp sshd[4264]: Failed password for root from 14.225.213.232 port 55704 ssh2
Oct  1 23:01:43 nativespace-cdp sshd[4264]: Received disconnect from 14.225.213.232 port 55704:11: Bye Bye [preauth]
Oct  1 23:01:43 nativespace-cdp sshd[4264]: Disconnected from 14.225.213.232 port 55704 [preauth]
Oct  1 23:01:49 nativespace-cdp sshd[4309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.150.124.201  user=root
Oct  1 23:01:49 nativespace-cdp sshd[4309]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:01:51 nativespace-cdp sshd[4309]: Failed password for root from 103.150.124.201 port 39624 ssh2
Oct  1 23:01:51 nativespace-cdp sshd[4309]: Received disconnect from 103.150.124.201 port 39624:11: Bye Bye [preauth]
Oct  1 23:01:51 nativespace-cdp sshd[4309]: Disconnected from 103.150.124.201 port 39624 [preauth]
Oct  1 23:01:56 nativespace-cdp sshd[4320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.26.47.38  user=root
Oct  1 23:01:56 nativespace-cdp sshd[4320]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:01:58 nativespace-cdp sshd[4320]: Failed password for root from 195.26.47.38 port 60050 ssh2
Oct  1 23:01:58 nativespace-cdp sshd[4320]: Received disconnect from 195.26.47.38 port 60050:11: Bye Bye [preauth]
Oct  1 23:01:58 nativespace-cdp sshd[4320]: Disconnected from 195.26.47.38 port 60050 [preauth]
Oct  1 23:02:10 nativespace-cdp sshd[4446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.78.50  user=root
Oct  1 23:02:10 nativespace-cdp sshd[4446]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:02:11 nativespace-cdp sshd[4446]: Failed password for root from 27.112.78.50 port 45952 ssh2
Oct  1 23:02:12 nativespace-cdp sshd[4446]: Received disconnect from 27.112.78.50 port 45952:11: Bye Bye [preauth]
Oct  1 23:02:12 nativespace-cdp sshd[4446]: Disconnected from 27.112.78.50 port 45952 [preauth]
Oct  1 23:02:17 nativespace-cdp sshd[4455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.43.197  user=root
Oct  1 23:02:17 nativespace-cdp sshd[4455]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:02:18 nativespace-cdp sshd[4455]: Failed password for root from 209.141.43.197 port 44946 ssh2
Oct  1 23:02:19 nativespace-cdp sshd[4455]: Received disconnect from 209.141.43.197 port 44946:11: Bye Bye [preauth]
Oct  1 23:02:19 nativespace-cdp sshd[4455]: Disconnected from 209.141.43.197 port 44946 [preauth]
Oct  1 23:02:39 nativespace-cdp sshd[4509]: Invalid user ubuntu from 210.59.152.75 port 57110
Oct  1 23:02:39 nativespace-cdp sshd[4509]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 23:02:39 nativespace-cdp sshd[4509]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 23:02:39 nativespace-cdp sshd[4509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.152.75
Oct  1 23:02:39 nativespace-cdp sshd[4506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.150.124.201  user=root
Oct  1 23:02:39 nativespace-cdp sshd[4506]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:02:41 nativespace-cdp sshd[4509]: Failed password for invalid user ubuntu from 210.59.152.75 port 57110 ssh2
Oct  1 23:02:41 nativespace-cdp sshd[4506]: Failed password for root from 103.150.124.201 port 52152 ssh2
Oct  1 23:02:41 nativespace-cdp sshd[4509]: Received disconnect from 210.59.152.75 port 57110:11: Bye Bye [preauth]
Oct  1 23:02:41 nativespace-cdp sshd[4509]: Disconnected from 210.59.152.75 port 57110 [preauth]
Oct  1 23:02:41 nativespace-cdp sshd[4506]: Received disconnect from 103.150.124.201 port 52152:11: Bye Bye [preauth]
Oct  1 23:02:41 nativespace-cdp sshd[4506]: Disconnected from 103.150.124.201 port 52152 [preauth]
Oct  1 23:03:01 nativespace-cdp sshd[4569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.78.50  user=root
Oct  1 23:03:01 nativespace-cdp sshd[4569]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:03:04 nativespace-cdp sshd[4569]: Failed password for root from 27.112.78.50 port 55194 ssh2
Oct  1 23:03:05 nativespace-cdp sshd[4569]: Received disconnect from 27.112.78.50 port 55194:11: Bye Bye [preauth]
Oct  1 23:03:05 nativespace-cdp sshd[4569]: Disconnected from 27.112.78.50 port 55194 [preauth]
Oct  1 23:03:33 nativespace-cdp sshd[4649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.43.197  user=root
Oct  1 23:03:33 nativespace-cdp sshd[4649]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:03:35 nativespace-cdp sshd[4649]: Failed password for root from 209.141.43.197 port 59078 ssh2
Oct  1 23:03:35 nativespace-cdp sshd[4649]: Received disconnect from 209.141.43.197 port 59078:11: Bye Bye [preauth]
Oct  1 23:03:35 nativespace-cdp sshd[4649]: Disconnected from 209.141.43.197 port 59078 [preauth]
Oct  1 23:04:27 nativespace-cdp sshd[4788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.68.226.136  user=root
Oct  1 23:04:27 nativespace-cdp sshd[4788]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:04:30 nativespace-cdp sshd[4788]: Failed password for root from 210.68.226.136 port 51440 ssh2
Oct  1 23:04:31 nativespace-cdp sshd[4788]: Received disconnect from 210.68.226.136 port 51440:11: Bye Bye [preauth]
Oct  1 23:04:31 nativespace-cdp sshd[4788]: Disconnected from 210.68.226.136 port 51440 [preauth]
Oct  1 23:04:44 nativespace-cdp sshd[4842]: Connection closed by 209.141.43.197 port 44690 [preauth]
Oct  1 23:05:30 nativespace-cdp sshd[5279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.152.75  user=root
Oct  1 23:05:30 nativespace-cdp sshd[5279]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:05:31 nativespace-cdp sshd[5279]: Failed password for root from 210.59.152.75 port 56056 ssh2
Oct  1 23:05:32 nativespace-cdp sshd[5279]: Received disconnect from 210.59.152.75 port 56056:11: Bye Bye [preauth]
Oct  1 23:05:32 nativespace-cdp sshd[5279]: Disconnected from 210.59.152.75 port 56056 [preauth]
Oct  1 23:05:53 nativespace-cdp sshd[5321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.43.197  user=root
Oct  1 23:05:53 nativespace-cdp sshd[5321]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:05:54 nativespace-cdp sshd[5321]: Failed password for root from 209.141.43.197 port 34170 ssh2
Oct  1 23:05:55 nativespace-cdp sshd[5321]: Received disconnect from 209.141.43.197 port 34170:11: Bye Bye [preauth]
Oct  1 23:05:55 nativespace-cdp sshd[5321]: Disconnected from 209.141.43.197 port 34170 [preauth]
Oct  1 23:06:11 nativespace-cdp sshd[5413]: Invalid user ubuntu from 210.68.226.136 port 35702
Oct  1 23:06:11 nativespace-cdp sshd[5413]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 23:06:11 nativespace-cdp sshd[5413]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 23:06:11 nativespace-cdp sshd[5413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.68.226.136
Oct  1 23:06:13 nativespace-cdp sshd[5413]: Failed password for invalid user ubuntu from 210.68.226.136 port 35702 ssh2
Oct  1 23:06:15 nativespace-cdp sshd[5413]: Received disconnect from 210.68.226.136 port 35702:11: Bye Bye [preauth]
Oct  1 23:06:15 nativespace-cdp sshd[5413]: Disconnected from 210.68.226.136 port 35702 [preauth]
Oct  1 23:06:36 nativespace-cdp sshd[5459]: Connection closed by 159.100.136.21 port 47366 [preauth]
Oct  1 23:06:53 nativespace-cdp sshd[5503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.152.75  user=root
Oct  1 23:06:53 nativespace-cdp sshd[5503]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:06:54 nativespace-cdp sshd[5503]: Failed password for root from 210.59.152.75 port 41402 ssh2
Oct  1 23:06:55 nativespace-cdp sshd[5503]: Received disconnect from 210.59.152.75 port 41402:11: Bye Bye [preauth]
Oct  1 23:06:55 nativespace-cdp sshd[5503]: Disconnected from 210.59.152.75 port 41402 [preauth]
Oct  1 23:07:04 nativespace-cdp sshd[5565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.43.197  user=root
Oct  1 23:07:04 nativespace-cdp sshd[5565]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:07:06 nativespace-cdp sshd[5565]: Failed password for root from 209.141.43.197 port 38714 ssh2
Oct  1 23:07:06 nativespace-cdp sshd[5565]: Received disconnect from 209.141.43.197 port 38714:11: Bye Bye [preauth]
Oct  1 23:07:06 nativespace-cdp sshd[5565]: Disconnected from 209.141.43.197 port 38714 [preauth]
Oct  1 23:08:02 nativespace-cdp sshd[5815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.68.226.136  user=root
Oct  1 23:08:02 nativespace-cdp sshd[5815]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:08:04 nativespace-cdp sshd[5815]: Failed password for root from 210.68.226.136 port 48194 ssh2
Oct  1 23:08:04 nativespace-cdp sshd[5815]: Received disconnect from 210.68.226.136 port 48194:11: Bye Bye [preauth]
Oct  1 23:08:04 nativespace-cdp sshd[5815]: Disconnected from 210.68.226.136 port 48194 [preauth]
Oct  1 23:08:08 nativespace-cdp sshd[5854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.43.197  user=root
Oct  1 23:08:08 nativespace-cdp sshd[5854]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:08:10 nativespace-cdp sshd[5854]: Failed password for root from 209.141.43.197 port 53388 ssh2
Oct  1 23:08:11 nativespace-cdp sshd[5854]: Received disconnect from 209.141.43.197 port 53388:11: Bye Bye [preauth]
Oct  1 23:08:11 nativespace-cdp sshd[5854]: Disconnected from 209.141.43.197 port 53388 [preauth]
Oct  1 23:08:14 nativespace-cdp sshd[5879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.152.75  user=root
Oct  1 23:08:14 nativespace-cdp sshd[5879]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:08:16 nativespace-cdp sshd[5879]: Failed password for root from 210.59.152.75 port 54980 ssh2
Oct  1 23:08:16 nativespace-cdp sshd[5879]: Received disconnect from 210.59.152.75 port 54980:11: Bye Bye [preauth]
Oct  1 23:08:16 nativespace-cdp sshd[5879]: Disconnected from 210.59.152.75 port 54980 [preauth]
Oct  1 23:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  1 23:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:29 nativespace-cdp sudo[6117]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  1 23:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:29 nativespace-cdp sudo[6120]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  1 23:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:30 nativespace-cdp sudo[6123]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  1 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:30 nativespace-cdp sudo[6132]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  1 23:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:32 nativespace-cdp sudo[6135]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  1 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:33 nativespace-cdp sudo[6144]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  1 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:33 nativespace-cdp sudo[6147]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  1 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:33 nativespace-cdp sudo[6150]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  1 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:33 nativespace-cdp sudo[6153]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  1 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:33 nativespace-cdp sudo[6157]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  1 23:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:33 nativespace-cdp sudo[6160]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:39 nativespace-cdp sshd[6177]: Invalid user ubuntu from 210.59.152.75 port 40334
Oct  1 23:09:39 nativespace-cdp sshd[6177]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 23:09:39 nativespace-cdp sshd[6177]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 23:09:39 nativespace-cdp sshd[6177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.59.152.75
Oct  1 23:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  1 23:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:40 nativespace-cdp sudo[6186]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  1 23:09:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:41 nativespace-cdp sudo[6190]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=southlon user-2=highlegh user-3=firstred user-4=costestimatorco user-5=firstrel user-6=clarkass user-7=opaiscyx user-8=coursemc user-9=firstres user-10=jonhartl user-11=seftvta user-12=ultbcrra user-13=thqkgnbz user-14=connectedshoppin user-15=ianrayne user-16=accooper user-17=carsinyo user-18=fetch user-19=hubmaster user-20=elecleis user-21=gilpin user-22=milloyco user-23=bemadonn user-24=ggaaorgu user-25=belle user-26=newstoda user-27=bedfords user-28=battlere user-29=oneoarco user-30=firstre2 user-31=vivienn1 user-32=brighto1 user-33=nstriton user-34=nativene user-35=askhform user-36=stuartge user-37=innovat1 user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=maflemin user-42=lbscrmod user-43=connect9 user-44=athenare user-45=vantagep user-46=foundation user-47=booff user-48=markward
Oct  1 23:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=leereyn1 user-50=stephani user-51=still user-52=agproduc user-53=theblack user-54=hodgesonweb user-55=spectrum user-56=jarvisin user-57=musorguk user-58=megacards user-59=wilsonsw user-60=sarafoundation user-61=atestord user-62=strathar user-63=lakesan1 user-64=brmrjxl user-65=magichat user-66=lbhyisi user-67=hhdugcor user-68=ptkxhsbt user-69=dickemery123 user-70=martsblo user-71=careers user-72=nbhavers user-73=david user-74=mcdermos user-75=chrisdal user-76=jennimil user-77=tomandle user-78=romaldki user-79=branko user-80=hodgsonmail user-81=ranxterc user-82=outdoorc user-83=onlycont user-84=attlebor user-85=lucy user-86=sosevalu user-87=crrtipdl user-88=bakery user-89=boldover user-90=nove user-91=design user-92=kategilpin user-93=ladburyp user-94=stagingerris user-95=dancinggardener user-96=nvihkvu user-97=sketchy user-98=cath user-99=havantho user-100=what user-101=oubpgvbx user-102=tstardom
Oct  1 23:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=steve user-104=zebrapho user-105=bwppodcast user-106=sibtoncc user-107=asandcoc user-108=dhyana user-109=eatspam user-110=darkstar user-111=beauty user-112=nsceres user-113=burydropin user-114=fawcettd user-115=barbersh user-116=tigerlet user-117=hidden user-118=nomistakes user-119=isleofwi user-120=smrszyqg user-121=ctedorgu user-122=philmcph user-123=steakbridieme user-124=firstre5 user-125=donnychicago user-126=lkpier user-127=health2045 user-128=fortunaz user-129=foods user-130=leftie user-131=nscdp user-132=courseme user-133=eugincou user-134=hirefootballgame user-135=paulmca1 user-136=howardon user-137=pugwash user-138=cwsocial user-139=ninejimm user-140=reliable user-141=cathski user-142=cambria1 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  1 23:09:41 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  1 23:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:41 nativespace-cdp sshd[6177]: Failed password for invalid user ubuntu from 210.59.152.75 port 40334 ssh2
Oct  1 23:09:42 nativespace-cdp sudo[6195]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 23:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:42 nativespace-cdp sudo[6201]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v5nlwvZlrWKSg4bq.~
Oct  1 23:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:42 nativespace-cdp sudo[6205]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v5nlwvZlrWKSg4bq.~'
Oct  1 23:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:42 nativespace-cdp sudo[6208]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-v5nlwvZlrWKSg4bq.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  1 23:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:42 nativespace-cdp sudo[6213]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  1 23:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:42 nativespace-cdp sudo[6216]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:43 nativespace-cdp sshd[6177]: Received disconnect from 210.59.152.75 port 40334:11: Bye Bye [preauth]
Oct  1 23:09:43 nativespace-cdp sshd[6177]: Disconnected from 210.59.152.75 port 40334 [preauth]
Oct  1 23:09:46 nativespace-cdp sshd[6227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.68.226.136  user=root
Oct  1 23:09:46 nativespace-cdp sshd[6227]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:09:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  1 23:09:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  1 23:09:47 nativespace-cdp sudo[6250]: pam_unix(sudo:session): session closed for user root
Oct  1 23:09:48 nativespace-cdp sshd[6227]: Failed password for root from 210.68.226.136 port 60680 ssh2
Oct  1 23:09:48 nativespace-cdp sshd[6227]: Received disconnect from 210.68.226.136 port 60680:11: Bye Bye [preauth]
Oct  1 23:09:48 nativespace-cdp sshd[6227]: Disconnected from 210.68.226.136 port 60680 [preauth]
Oct  1 23:11:31 nativespace-cdp sshd[6642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.68.226.136  user=root
Oct  1 23:11:31 nativespace-cdp sshd[6642]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:11:33 nativespace-cdp sshd[6642]: Failed password for root from 210.68.226.136 port 44922 ssh2
Oct  1 23:11:36 nativespace-cdp sshd[6653]: Connection closed by 159.100.136.21 port 56504 [preauth]
Oct  1 23:11:37 nativespace-cdp sshd[6642]: Received disconnect from 210.68.226.136 port 44922:11: Bye Bye [preauth]
Oct  1 23:11:37 nativespace-cdp sshd[6642]: Disconnected from 210.68.226.136 port 44922 [preauth]
Oct  1 23:13:17 nativespace-cdp sshd[7012]: Invalid user ubuntu from 210.68.226.136 port 57420
Oct  1 23:13:17 nativespace-cdp sshd[7012]: input_userauth_request: invalid user ubuntu [preauth]
Oct  1 23:13:17 nativespace-cdp sshd[7012]: pam_unix(sshd:auth): check pass; user unknown
Oct  1 23:13:17 nativespace-cdp sshd[7012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.68.226.136
Oct  1 23:13:19 nativespace-cdp sshd[7012]: Failed password for invalid user ubuntu from 210.68.226.136 port 57420 ssh2
Oct  1 23:13:19 nativespace-cdp sshd[7012]: Received disconnect from 210.68.226.136 port 57420:11: Bye Bye [preauth]
Oct  1 23:13:19 nativespace-cdp sshd[7012]: Disconnected from 210.68.226.136 port 57420 [preauth]
Oct  1 23:14:51 nativespace-cdp sshd[7271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.68.226.136  user=root
Oct  1 23:14:51 nativespace-cdp sshd[7271]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  1 23:14:53 nativespace-cdp sshd[7271]: Failed password for root from 210.68.226.136 port 41702 ssh2
Oct  1 23:14:54 nativespace-cdp sshd[7271]: Received disconnect from 210.68.226.136 port 41702:11: Bye Bye [preauth]
Oct  1 23:14:54 nativespace-cdp sshd[7271]: Disconnected from 210.68.226.136 port 41702 [preauth]
Oct  1 23:16:33 nativespace-cdp sshd[7700]: Connection closed by 159.100.136.21 port 37356 [preauth]
Oct  1 23:21:34 nativespace-cdp sshd[8972]: Connection closed by 159.100.136.21 port 47118 [preauth]
Oct  1 23:26:33 nativespace-cdp sshd[10023]: Connection closed by 159.100.136.21 port 57210 [preauth]
Oct  1 23:31:33 nativespace-cdp sshd[11120]: Connection closed by 159.100.136.21 port 39010 [preauth]
Oct  1 23:36:33 nativespace-cdp sshd[12322]: Connection closed by 159.100.136.21 port 49280 [preauth]
Oct  1 23:41:02 nativespace-cdp sshd[13295]: Accepted publickey for root from 185.67.178.249 port 45864 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Oct  1 23:41:02 nativespace-cdp sshd[13295]: pam_unix(sshd:session): session opened for user root by (uid=0)
Oct  1 23:41:33 nativespace-cdp sshd[13389]: Connection closed by 159.100.136.21 port 59262 [preauth]
Oct  1 23:46:33 nativespace-cdp sshd[28697]: Connection closed by 159.100.136.21 port 41232 [preauth]
Oct  1 23:51:33 nativespace-cdp sshd[5504]: Connection closed by 159.100.136.21 port 50232 [preauth]
Oct  1 23:56:33 nativespace-cdp sshd[11317]: Connection closed by 159.100.136.21 port 60520 [preauth]
Oct  2 00:01:33 nativespace-cdp sshd[12476]: Connection closed by 159.100.136.21 port 42236 [preauth]
Oct  2 00:06:33 nativespace-cdp sshd[13700]: Connection closed by 159.100.136.21 port 52580 [preauth]
Oct  2 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:28 nativespace-cdp sudo[14262]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:28 nativespace-cdp sudo[14265]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 00:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:29 nativespace-cdp sudo[14268]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 00:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:29 nativespace-cdp sudo[14274]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 00:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:31 nativespace-cdp sudo[14277]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:31 nativespace-cdp sudo[14289]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:31 nativespace-cdp sudo[14292]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:31 nativespace-cdp sudo[14296]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:31 nativespace-cdp sudo[14300]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:31 nativespace-cdp sudo[14304]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 00:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:31 nativespace-cdp sudo[14307]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:33 nativespace-cdp sudo[14318]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:33 nativespace-cdp sudo[14323]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=firstrel user-2=clarkass user-3=costestimatorco user-4=firstred user-5=highlegh user-6=southlon user-7=ultbcrra user-8=seftvta user-9=jonhartl user-10=firstres user-11=coursemc user-12=opaiscyx user-13=accooper user-14=ianrayne user-15=connectedshoppin user-16=thqkgnbz user-17=milloyco user-18=gilpin user-19=elecleis user-20=hubmaster user-21=fetch user-22=carsinyo user-23=bedfords user-24=newstoda user-25=ggaaorgu user-26=belle user-27=bemadonn user-28=nstriton user-29=brighto1 user-30=vivienn1 user-31=firstre2 user-32=oneoarco user-33=battlere user-34=innovat1 user-35=askhform user-36=stuartge user-37=nativene user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=booff user-42=foundation user-43=markward user-44=vantagep user-45=athenare user-46=connect9 user-47=lbscrmod user-48=maflemin
Oct  2 00:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=agproduc user-50=still user-51=stephani user-52=leereyn1 user-53=jarvisin user-54=spectrum user-55=hodgesonweb user-56=theblack user-57=wilsonsw user-58=megacards user-59=musorguk user-60=lakesan1 user-61=brmrjxl user-62=strathar user-63=atestord user-64=sarafoundation user-65=hhdugcor user-66=lbhyisi user-67=magichat user-68=martsblo user-69=dickemery123 user-70=ptkxhsbt user-71=chrisdal user-72=mcdermos user-73=david user-74=nbhavers user-75=careers user-76=tomandle user-77=jennimil user-78=hodgsonmail user-79=ranxterc user-80=outdoorc user-81=branko user-82=romaldki user-83=lucy user-84=attlebor user-85=onlycont user-86=bakery user-87=crrtipdl user-88=sosevalu user-89=nove user-90=boldover user-91=dancinggardener user-92=stagingerris user-93=ladburyp user-94=kategilpin user-95=design user-96=tstardom user-97=oubpgvbx user-98=what user-99=havantho user-100=sketchy user-101=cath user-102=nvihkvu
Oct  2 00:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=bwppodcast user-104=zebrapho user-105=steve user-106=asandcoc user-107=sibtoncc user-108=beauty user-109=darkstar user-110=eatspam user-111=dhyana user-112=fawcettd user-113=burydropin user-114=nsceres user-115=smrszyqg user-116=isleofwi user-117=nomistakes user-118=hidden user-119=barbersh user-120=tigerlet user-121=nscdp user-122=foods user-123=leftie user-124=health2045 user-125=fortunaz user-126=lkpier user-127=steakbridieme user-128=donnychicago user-129=firstre5 user-130=ctedorgu user-131=philmcph user-132=hirefootballgame user-133=eugincou user-134=courseme user-135=cambria1 user-136=cathski user-137=reliable user-138=ninejimm user-139=cwsocial user-140=paulmca1 user-141=pugwash user-142=howardon feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 00:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 00:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:34 nativespace-cdp sudo[14328]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:34 nativespace-cdp sudo[14334]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vG30mn7dnJvuliJ1.~
Oct  2 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:34 nativespace-cdp sudo[14337]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vG30mn7dnJvuliJ1.~'
Oct  2 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:34 nativespace-cdp sudo[14341]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-vG30mn7dnJvuliJ1.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:34 nativespace-cdp sudo[14345]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 00:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:34 nativespace-cdp sudo[14348]: pam_unix(sudo:session): session closed for user root
Oct  2 00:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 00:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 00:09:36 nativespace-cdp sudo[14368]: pam_unix(sudo:session): session closed for user root
Oct  2 00:11:33 nativespace-cdp sshd[14847]: Connection closed by 159.100.136.21 port 34288 [preauth]
Oct  2 00:16:33 nativespace-cdp sshd[15831]: Connection closed by 159.100.136.21 port 44526 [preauth]
Oct  2 00:21:33 nativespace-cdp sshd[16922]: Connection closed by 159.100.136.21 port 54490 [preauth]
Oct  2 00:26:33 nativespace-cdp sshd[18132]: Connection closed by 159.100.136.21 port 36498 [preauth]
Oct  2 00:29:42 nativespace-cdp sshd[13295]: pam_systemd(sshd:session): Failed to release session: Interrupted system call
Oct  2 00:29:42 nativespace-cdp sshd[13295]: pam_unix(sshd:session): session closed for user root
Oct  2 00:31:33 nativespace-cdp sshd[19201]: Connection closed by 159.100.136.21 port 46536 [preauth]
Oct  2 00:35:49 nativespace-cdp sshd[20308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.50.226  user=root
Oct  2 00:35:49 nativespace-cdp sshd[20308]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:35:51 nativespace-cdp sshd[20308]: Failed password for root from 146.190.50.226 port 51422 ssh2
Oct  2 00:35:51 nativespace-cdp sshd[20308]: Received disconnect from 146.190.50.226 port 51422:11: Bye Bye [preauth]
Oct  2 00:35:51 nativespace-cdp sshd[20308]: Disconnected from 146.190.50.226 port 51422 [preauth]
Oct  2 00:36:33 nativespace-cdp sshd[20401]: Connection closed by 159.100.136.21 port 56842 [preauth]
Oct  2 00:38:27 nativespace-cdp sshd[20787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.22.67.50  user=root
Oct  2 00:38:27 nativespace-cdp sshd[20787]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:38:29 nativespace-cdp sshd[20787]: Failed password for root from 185.22.67.50 port 46484 ssh2
Oct  2 00:38:29 nativespace-cdp sshd[20787]: Received disconnect from 185.22.67.50 port 46484:11: Bye Bye [preauth]
Oct  2 00:38:29 nativespace-cdp sshd[20787]: Disconnected from 185.22.67.50 port 46484 [preauth]
Oct  2 00:38:59 nativespace-cdp sshd[20860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.103.40  user=root
Oct  2 00:38:59 nativespace-cdp sshd[20860]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:39:01 nativespace-cdp sshd[20860]: Failed password for root from 24.199.103.40 port 39466 ssh2
Oct  2 00:39:01 nativespace-cdp sshd[20860]: Received disconnect from 24.199.103.40 port 39466:11: Bye Bye [preauth]
Oct  2 00:39:01 nativespace-cdp sshd[20860]: Disconnected from 24.199.103.40 port 39466 [preauth]
Oct  2 00:40:18 nativespace-cdp sshd[21232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.162.100  user=root
Oct  2 00:40:18 nativespace-cdp sshd[21232]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:40:20 nativespace-cdp sshd[21232]: Failed password for root from 133.242.162.100 port 53886 ssh2
Oct  2 00:40:20 nativespace-cdp sshd[21232]: Received disconnect from 133.242.162.100 port 53886:11: Bye Bye [preauth]
Oct  2 00:40:20 nativespace-cdp sshd[21232]: Disconnected from 133.242.162.100 port 53886 [preauth]
Oct  2 00:41:18 nativespace-cdp sshd[21388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.50.226  user=root
Oct  2 00:41:18 nativespace-cdp sshd[21388]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:41:20 nativespace-cdp sshd[21388]: Failed password for root from 146.190.50.226 port 50942 ssh2
Oct  2 00:41:20 nativespace-cdp sshd[21388]: Received disconnect from 146.190.50.226 port 50942:11: Bye Bye [preauth]
Oct  2 00:41:20 nativespace-cdp sshd[21388]: Disconnected from 146.190.50.226 port 50942 [preauth]
Oct  2 00:41:33 nativespace-cdp sshd[21438]: Connection closed by 159.100.136.21 port 38548 [preauth]
Oct  2 00:41:42 nativespace-cdp sshd[21481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.103.40  user=root
Oct  2 00:41:42 nativespace-cdp sshd[21481]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:41:43 nativespace-cdp sshd[21481]: Failed password for root from 24.199.103.40 port 55670 ssh2
Oct  2 00:41:43 nativespace-cdp sshd[21481]: Received disconnect from 24.199.103.40 port 55670:11: Bye Bye [preauth]
Oct  2 00:41:43 nativespace-cdp sshd[21481]: Disconnected from 24.199.103.40 port 55670 [preauth]
Oct  2 00:41:50 nativespace-cdp sshd[21500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.22.67.50  user=root
Oct  2 00:41:50 nativespace-cdp sshd[21500]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:41:51 nativespace-cdp sshd[21500]: Failed password for root from 185.22.67.50 port 36262 ssh2
Oct  2 00:41:51 nativespace-cdp sshd[21500]: Received disconnect from 185.22.67.50 port 36262:11: Bye Bye [preauth]
Oct  2 00:41:51 nativespace-cdp sshd[21500]: Disconnected from 185.22.67.50 port 36262 [preauth]
Oct  2 00:41:56 nativespace-cdp sshd[21510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.50.226  user=root
Oct  2 00:41:56 nativespace-cdp sshd[21510]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:41:58 nativespace-cdp sshd[21514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.162.100  user=root
Oct  2 00:41:58 nativespace-cdp sshd[21514]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:41:59 nativespace-cdp sshd[21510]: Failed password for root from 146.190.50.226 port 56078 ssh2
Oct  2 00:42:00 nativespace-cdp sshd[21514]: Failed password for root from 133.242.162.100 port 36782 ssh2
Oct  2 00:42:01 nativespace-cdp sshd[21514]: Received disconnect from 133.242.162.100 port 36782:11: Bye Bye [preauth]
Oct  2 00:42:01 nativespace-cdp sshd[21514]: Disconnected from 133.242.162.100 port 36782 [preauth]
Oct  2 00:42:20 nativespace-cdp sshd[21611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.199.103.40  user=root
Oct  2 00:42:20 nativespace-cdp sshd[21611]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:42:22 nativespace-cdp sshd[21611]: Failed password for root from 24.199.103.40 port 48080 ssh2
Oct  2 00:42:22 nativespace-cdp sshd[21611]: Received disconnect from 24.199.103.40 port 48080:11: Bye Bye [preauth]
Oct  2 00:42:22 nativespace-cdp sshd[21611]: Disconnected from 24.199.103.40 port 48080 [preauth]
Oct  2 00:42:34 nativespace-cdp sshd[21662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.22.67.50  user=root
Oct  2 00:42:34 nativespace-cdp sshd[21662]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:42:37 nativespace-cdp sshd[21662]: Failed password for root from 185.22.67.50 port 45352 ssh2
Oct  2 00:42:37 nativespace-cdp sshd[21662]: Received disconnect from 185.22.67.50 port 45352:11: Bye Bye [preauth]
Oct  2 00:42:37 nativespace-cdp sshd[21662]: Disconnected from 185.22.67.50 port 45352 [preauth]
Oct  2 00:42:44 nativespace-cdp sshd[21758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.162.100  user=root
Oct  2 00:42:44 nativespace-cdp sshd[21758]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 00:42:46 nativespace-cdp sshd[21758]: Failed password for root from 133.242.162.100 port 47158 ssh2
Oct  2 00:42:46 nativespace-cdp sshd[21758]: Received disconnect from 133.242.162.100 port 47158:11: Bye Bye [preauth]
Oct  2 00:42:46 nativespace-cdp sshd[21758]: Disconnected from 133.242.162.100 port 47158 [preauth]
Oct  2 00:46:33 nativespace-cdp sshd[22536]: Connection closed by 159.100.136.21 port 48768 [preauth]
Oct  2 00:51:33 nativespace-cdp sshd[23824]: Connection closed by 159.100.136.21 port 58778 [preauth]
Oct  2 00:56:33 nativespace-cdp sshd[24802]: Connection closed by 159.100.136.21 port 40796 [preauth]
Oct  2 01:01:33 nativespace-cdp sshd[26012]: Connection closed by 159.100.136.21 port 50778 [preauth]
Oct  2 01:06:33 nativespace-cdp sshd[27288]: Connection closed by 159.100.136.21 port 32882 [preauth]
Oct  2 01:07:30 nativespace-cdp sshd[27454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.164.54.77  user=root
Oct  2 01:07:30 nativespace-cdp sshd[27454]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:07:32 nativespace-cdp sshd[27454]: Failed password for root from 194.164.54.77 port 56772 ssh2
Oct  2 01:07:32 nativespace-cdp sshd[27454]: Received disconnect from 194.164.54.77 port 56772:11: Bye Bye [preauth]
Oct  2 01:07:32 nativespace-cdp sshd[27454]: Disconnected from 194.164.54.77 port 56772 [preauth]
Oct  2 01:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 01:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:29 nativespace-cdp sudo[27889]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 01:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:29 nativespace-cdp sudo[27894]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 01:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:30 nativespace-cdp sudo[27897]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 01:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:30 nativespace-cdp sudo[27902]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 01:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:31 nativespace-cdp sudo[27905]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:31 nativespace-cdp sudo[27914]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:31 nativespace-cdp sudo[27917]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:31 nativespace-cdp sudo[27920]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:31 nativespace-cdp sudo[27924]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:31 nativespace-cdp sudo[27927]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 01:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:31 nativespace-cdp sudo[27930]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:33 nativespace-cdp sudo[27941]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:33 nativespace-cdp sudo[27946]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=spectrum user-2=hodgesonweb user-3=theblack user-4=jarvisin user-5=stephani user-6=leereyn1 user-7=agproduc user-8=still user-9=vantagep user-10=connect9 user-11=athenare user-12=lbscrmod user-13=maflemin user-14=booff user-15=markward user-16=foundation user-17=ulsukarm user-18=dickemery123 user-19=ptkxhsbt user-20=martsblo user-21=magichat user-22=hhdugcor user-23=lbhyisi user-24=strathar user-25=atestord user-26=sarafoundation user-27=brmrjxl user-28=lakesan1 user-29=megacards user-30=musorguk user-31=wilsonsw user-32=hubmaster user-33=fetch user-34=carsinyo user-35=milloyco user-36=gilpin user-37=elecleis user-38=connectedshoppin user-39=thqkgnbz user-40=accooper user-41=ianrayne user-42=opaiscyx user-43=coursemc user-44=ultbcrra user-45=jonhartl user-46=seftvta user-47=firstres
Oct  2 01:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=firstred user-49=highlegh user-50=southlon user-51=firstrel user-52=clarkass user-53=costestimatorco user-54=alexadmin user-55=skyfirec user-56=nativene user-57=innovat1 user-58=askhform user-59=stuartge user-60=vivienn1 user-61=firstre2 user-62=oneoarco user-63=battlere user-64=nstriton user-65=brighto1 user-66=newstoda user-67=belle user-68=ggaaorgu user-69=bemadonn user-70=bedfords user-71=nsceres user-72=fawcettd user-73=burydropin user-74=dhyana user-75=beauty user-76=darkstar user-77=eatspam user-78=asandcoc user-79=sibtoncc user-80=steve user-81=bwppodcast user-82=zebrapho user-83=cwsocial user-84=paulmca1 user-85=pugwash user-86=howardon user-87=cambria1 user-88=cathski user-89=ninejimm user-90=reliable user-91=eugincou user-92=courseme user-93=hirefootballgame user-94=lkpier user-95=firstre5 user-96=donnychicago user-97=steakbridieme user-98=ctedorgu user-99=philmcph user-100=nscdp user-101=foods
Oct  2 01:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=leftie user-103=health2045 user-104=fortunaz user-105=nomistakes user-106=hidden user-107=barbersh user-108=tigerlet user-109=smrszyqg user-110=isleofwi user-111=onlycont user-112=lucy user-113=attlebor user-114=romaldki user-115=hodgsonmail user-116=outdoorc user-117=ranxterc user-118=branko user-119=jennimil user-120=tomandle user-121=david user-122=nbhavers user-123=careers user-124=chrisdal user-125=mcdermos user-126=havantho user-127=sketchy user-128=cath user-129=nvihkvu user-130=oubpgvbx user-131=tstardom user-132=what user-133=design user-134=stagingerris user-135=dancinggardener user-136=ladburyp user-137=kategilpin user-138=boldover user-139=nove user-140=bakery user-141=crrtipdl user-142=sosevalu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 01:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 01:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:34 nativespace-cdp sudo[27951]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 01:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:34 nativespace-cdp sudo[27955]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-G7xJt0It7ofX383x.~
Oct  2 01:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:34 nativespace-cdp sudo[27958]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-G7xJt0It7ofX383x.~'
Oct  2 01:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:34 nativespace-cdp sudo[27961]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-G7xJt0It7ofX383x.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 01:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:34 nativespace-cdp sudo[27965]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 01:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:34 nativespace-cdp sudo[27968]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 01:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 01:09:36 nativespace-cdp sudo[27988]: pam_unix(sudo:session): session closed for user root
Oct  2 01:09:37 nativespace-cdp sshd[27997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.139.107  user=root
Oct  2 01:09:37 nativespace-cdp sshd[27997]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:09:39 nativespace-cdp sshd[27997]: Failed password for root from 92.246.139.107 port 58526 ssh2
Oct  2 01:09:39 nativespace-cdp sshd[27997]: Received disconnect from 92.246.139.107 port 58526:11: Bye Bye [preauth]
Oct  2 01:09:39 nativespace-cdp sshd[27997]: Disconnected from 92.246.139.107 port 58526 [preauth]
Oct  2 01:10:28 nativespace-cdp sshd[28269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.106.104  user=root
Oct  2 01:10:28 nativespace-cdp sshd[28269]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:10:30 nativespace-cdp sshd[28269]: Failed password for root from 51.222.106.104 port 59740 ssh2
Oct  2 01:10:30 nativespace-cdp sshd[28269]: Received disconnect from 51.222.106.104 port 59740:11: Bye Bye [preauth]
Oct  2 01:10:30 nativespace-cdp sshd[28269]: Disconnected from 51.222.106.104 port 59740 [preauth]
Oct  2 01:11:10 nativespace-cdp sshd[28408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.84.72.164  user=root
Oct  2 01:11:10 nativespace-cdp sshd[28408]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:11:12 nativespace-cdp sshd[28408]: Failed password for root from 47.84.72.164 port 11946 ssh2
Oct  2 01:11:13 nativespace-cdp sshd[28408]: Received disconnect from 47.84.72.164 port 11946:11: Bye Bye [preauth]
Oct  2 01:11:13 nativespace-cdp sshd[28408]: Disconnected from 47.84.72.164 port 11946 [preauth]
Oct  2 01:11:33 nativespace-cdp sshd[28473]: Connection closed by 159.100.136.21 port 42826 [preauth]
Oct  2 01:11:34 nativespace-cdp sshd[28475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.12.33  user=root
Oct  2 01:11:34 nativespace-cdp sshd[28475]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:11:37 nativespace-cdp sshd[28475]: Failed password for root from 52.161.12.33 port 37110 ssh2
Oct  2 01:11:37 nativespace-cdp sshd[28475]: Received disconnect from 52.161.12.33 port 37110:11: Bye Bye [preauth]
Oct  2 01:11:37 nativespace-cdp sshd[28475]: Disconnected from 52.161.12.33 port 37110 [preauth]
Oct  2 01:11:47 nativespace-cdp sshd[28519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.84.72.164  user=root
Oct  2 01:11:47 nativespace-cdp sshd[28519]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:11:49 nativespace-cdp sshd[28519]: Failed password for root from 47.84.72.164 port 16544 ssh2
Oct  2 01:11:49 nativespace-cdp sshd[28519]: Received disconnect from 47.84.72.164 port 16544:11: Bye Bye [preauth]
Oct  2 01:11:49 nativespace-cdp sshd[28519]: Disconnected from 47.84.72.164 port 16544 [preauth]
Oct  2 01:11:58 nativespace-cdp sshd[28553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.196.67.214  user=root
Oct  2 01:11:58 nativespace-cdp sshd[28553]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:12:00 nativespace-cdp sshd[28553]: Failed password for root from 146.196.67.214 port 45384 ssh2
Oct  2 01:12:01 nativespace-cdp sshd[28553]: Received disconnect from 146.196.67.214 port 45384:11: Bye Bye [preauth]
Oct  2 01:12:01 nativespace-cdp sshd[28553]: Disconnected from 146.196.67.214 port 45384 [preauth]
Oct  2 01:12:03 nativespace-cdp sshd[28587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.84.72.164  user=root
Oct  2 01:12:03 nativespace-cdp sshd[28587]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:12:06 nativespace-cdp sshd[28587]: Failed password for root from 47.84.72.164 port 20654 ssh2
Oct  2 01:12:58 nativespace-cdp sshd[28842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.75.136.57  user=root
Oct  2 01:12:58 nativespace-cdp sshd[28842]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:13:00 nativespace-cdp sshd[28842]: Failed password for root from 211.75.136.57 port 38544 ssh2
Oct  2 01:13:00 nativespace-cdp sshd[28842]: Received disconnect from 211.75.136.57 port 38544:11: Bye Bye [preauth]
Oct  2 01:13:00 nativespace-cdp sshd[28842]: Disconnected from 211.75.136.57 port 38544 [preauth]
Oct  2 01:13:04 nativespace-cdp sshd[28878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.206.2  user=root
Oct  2 01:13:04 nativespace-cdp sshd[28878]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:13:07 nativespace-cdp sshd[28878]: Failed password for root from 161.35.206.2 port 56352 ssh2
Oct  2 01:13:07 nativespace-cdp sshd[28878]: Received disconnect from 161.35.206.2 port 56352:11: Bye Bye [preauth]
Oct  2 01:13:07 nativespace-cdp sshd[28878]: Disconnected from 161.35.206.2 port 56352 [preauth]
Oct  2 01:13:11 nativespace-cdp sshd[28901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.139.107  user=root
Oct  2 01:13:11 nativespace-cdp sshd[28901]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:13:12 nativespace-cdp sshd[28898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.69.62.66  user=root
Oct  2 01:13:12 nativespace-cdp sshd[28898]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:13:13 nativespace-cdp sshd[28901]: Failed password for root from 92.246.139.107 port 55628 ssh2
Oct  2 01:13:13 nativespace-cdp sshd[28901]: Received disconnect from 92.246.139.107 port 55628:11: Bye Bye [preauth]
Oct  2 01:13:13 nativespace-cdp sshd[28901]: Disconnected from 92.246.139.107 port 55628 [preauth]
Oct  2 01:13:14 nativespace-cdp sshd[28898]: Failed password for root from 36.69.62.66 port 52514 ssh2
Oct  2 01:13:14 nativespace-cdp sshd[28898]: Received disconnect from 36.69.62.66 port 52514:11: Bye Bye [preauth]
Oct  2 01:13:14 nativespace-cdp sshd[28898]: Disconnected from 36.69.62.66 port 52514 [preauth]
Oct  2 01:13:19 nativespace-cdp sshd[28918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.164.54.77  user=root
Oct  2 01:13:19 nativespace-cdp sshd[28918]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:13:20 nativespace-cdp sshd[28918]: Failed password for root from 194.164.54.77 port 38156 ssh2
Oct  2 01:13:20 nativespace-cdp sshd[28918]: Received disconnect from 194.164.54.77 port 38156:11: Bye Bye [preauth]
Oct  2 01:13:20 nativespace-cdp sshd[28918]: Disconnected from 194.164.54.77 port 38156 [preauth]
Oct  2 01:13:39 nativespace-cdp sshd[28964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.106.104  user=root
Oct  2 01:13:39 nativespace-cdp sshd[28964]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:13:41 nativespace-cdp sshd[28973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.12.33  user=root
Oct  2 01:13:41 nativespace-cdp sshd[28973]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:13:41 nativespace-cdp sshd[28964]: Failed password for root from 51.222.106.104 port 46236 ssh2
Oct  2 01:13:41 nativespace-cdp sshd[28964]: Received disconnect from 51.222.106.104 port 46236:11: Bye Bye [preauth]
Oct  2 01:13:41 nativespace-cdp sshd[28964]: Disconnected from 51.222.106.104 port 46236 [preauth]
Oct  2 01:13:43 nativespace-cdp sshd[28973]: Failed password for root from 52.161.12.33 port 44536 ssh2
Oct  2 01:13:43 nativespace-cdp sshd[28973]: Received disconnect from 52.161.12.33 port 44536:11: Bye Bye [preauth]
Oct  2 01:13:43 nativespace-cdp sshd[28973]: Disconnected from 52.161.12.33 port 44536 [preauth]
Oct  2 01:13:52 nativespace-cdp sshd[29005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.246.139.107  user=root
Oct  2 01:13:52 nativespace-cdp sshd[29005]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:13:54 nativespace-cdp sshd[29005]: Failed password for root from 92.246.139.107 port 51114 ssh2
Oct  2 01:13:54 nativespace-cdp sshd[29005]: Received disconnect from 92.246.139.107 port 51114:11: Bye Bye [preauth]
Oct  2 01:13:54 nativespace-cdp sshd[29005]: Disconnected from 92.246.139.107 port 51114 [preauth]
Oct  2 01:14:01 nativespace-cdp sshd[29061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.206.2  user=root
Oct  2 01:14:01 nativespace-cdp sshd[29061]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:14:03 nativespace-cdp sshd[29061]: Failed password for root from 161.35.206.2 port 47688 ssh2
Oct  2 01:14:03 nativespace-cdp sshd[29061]: Received disconnect from 161.35.206.2 port 47688:11: Bye Bye [preauth]
Oct  2 01:14:03 nativespace-cdp sshd[29061]: Disconnected from 161.35.206.2 port 47688 [preauth]
Oct  2 01:14:08 nativespace-cdp sshd[29102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.164.54.77  user=root
Oct  2 01:14:08 nativespace-cdp sshd[29102]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:14:10 nativespace-cdp sshd[29102]: Failed password for root from 194.164.54.77 port 49414 ssh2
Oct  2 01:14:16 nativespace-cdp sshd[29147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.196.67.214  user=root
Oct  2 01:14:16 nativespace-cdp sshd[29147]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:14:17 nativespace-cdp sshd[29151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.222.106.104  user=root
Oct  2 01:14:17 nativespace-cdp sshd[29151]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:14:17 nativespace-cdp sshd[29147]: Failed password for root from 146.196.67.214 port 59068 ssh2
Oct  2 01:14:18 nativespace-cdp sshd[29147]: Received disconnect from 146.196.67.214 port 59068:11: Bye Bye [preauth]
Oct  2 01:14:18 nativespace-cdp sshd[29147]: Disconnected from 146.196.67.214 port 59068 [preauth]
Oct  2 01:14:19 nativespace-cdp sshd[29151]: Failed password for root from 51.222.106.104 port 47882 ssh2
Oct  2 01:14:19 nativespace-cdp sshd[29151]: Received disconnect from 51.222.106.104 port 47882:11: Bye Bye [preauth]
Oct  2 01:14:19 nativespace-cdp sshd[29151]: Disconnected from 51.222.106.104 port 47882 [preauth]
Oct  2 01:14:20 nativespace-cdp sshd[29175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.161.12.33  user=root
Oct  2 01:14:20 nativespace-cdp sshd[29175]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:14:22 nativespace-cdp sshd[29175]: Failed password for root from 52.161.12.33 port 54916 ssh2
Oct  2 01:14:22 nativespace-cdp sshd[29175]: Received disconnect from 52.161.12.33 port 54916:11: Bye Bye [preauth]
Oct  2 01:14:22 nativespace-cdp sshd[29175]: Disconnected from 52.161.12.33 port 54916 [preauth]
Oct  2 01:15:04 nativespace-cdp sshd[29432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.196.67.214  user=root
Oct  2 01:15:04 nativespace-cdp sshd[29432]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:15:06 nativespace-cdp sshd[29432]: Failed password for root from 146.196.67.214 port 39884 ssh2
Oct  2 01:15:51 nativespace-cdp sshd[29587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.206.2  user=root
Oct  2 01:15:51 nativespace-cdp sshd[29587]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:15:53 nativespace-cdp sshd[29587]: Failed password for root from 161.35.206.2 port 49086 ssh2
Oct  2 01:15:53 nativespace-cdp sshd[29587]: Received disconnect from 161.35.206.2 port 49086:11: Bye Bye [preauth]
Oct  2 01:15:53 nativespace-cdp sshd[29587]: Disconnected from 161.35.206.2 port 49086 [preauth]
Oct  2 01:16:08 nativespace-cdp sshd[29701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.69.62.66  user=root
Oct  2 01:16:08 nativespace-cdp sshd[29701]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:16:10 nativespace-cdp sshd[29701]: Failed password for root from 36.69.62.66 port 40722 ssh2
Oct  2 01:16:11 nativespace-cdp sshd[29701]: Received disconnect from 36.69.62.66 port 40722:11: Bye Bye [preauth]
Oct  2 01:16:11 nativespace-cdp sshd[29701]: Disconnected from 36.69.62.66 port 40722 [preauth]
Oct  2 01:16:33 nativespace-cdp sshd[29774]: Connection closed by 159.100.136.21 port 53024 [preauth]
Oct  2 01:16:59 nativespace-cdp sshd[29817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.69.62.66  user=root
Oct  2 01:16:59 nativespace-cdp sshd[29817]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:17:01 nativespace-cdp sshd[29817]: Failed password for root from 36.69.62.66 port 60374 ssh2
Oct  2 01:17:02 nativespace-cdp sshd[29817]: Received disconnect from 36.69.62.66 port 60374:11: Bye Bye [preauth]
Oct  2 01:17:02 nativespace-cdp sshd[29817]: Disconnected from 36.69.62.66 port 60374 [preauth]
Oct  2 01:20:06 nativespace-cdp sshd[30735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.75.136.57  user=root
Oct  2 01:20:06 nativespace-cdp sshd[30735]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:20:08 nativespace-cdp sshd[30735]: Failed password for root from 211.75.136.57 port 48512 ssh2
Oct  2 01:20:08 nativespace-cdp sshd[30735]: Received disconnect from 211.75.136.57 port 48512:11: Bye Bye [preauth]
Oct  2 01:20:08 nativespace-cdp sshd[30735]: Disconnected from 211.75.136.57 port 48512 [preauth]
Oct  2 01:21:32 nativespace-cdp sshd[30971]: Invalid user ubuntu from 211.75.136.57 port 32832
Oct  2 01:21:32 nativespace-cdp sshd[30971]: input_userauth_request: invalid user ubuntu [preauth]
Oct  2 01:21:32 nativespace-cdp sshd[30971]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 01:21:32 nativespace-cdp sshd[30971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.75.136.57
Oct  2 01:21:33 nativespace-cdp sshd[30976]: Connection closed by 159.100.136.21 port 34768 [preauth]
Oct  2 01:21:34 nativespace-cdp sshd[30971]: Failed password for invalid user ubuntu from 211.75.136.57 port 32832 ssh2
Oct  2 01:21:34 nativespace-cdp sshd[30971]: Received disconnect from 211.75.136.57 port 32832:11: Bye Bye [preauth]
Oct  2 01:21:34 nativespace-cdp sshd[30971]: Disconnected from 211.75.136.57 port 32832 [preauth]
Oct  2 01:26:33 nativespace-cdp sshd[32045]: Connection closed by 159.100.136.21 port 45028 [preauth]
Oct  2 01:31:33 nativespace-cdp sshd[720]: Connection closed by 159.100.136.21 port 55082 [preauth]
Oct  2 01:36:33 nativespace-cdp sshd[1995]: Connection closed by 159.100.136.21 port 37112 [preauth]
Oct  2 01:41:33 nativespace-cdp sshd[3027]: Connection closed by 159.100.136.21 port 47084 [preauth]
Oct  2 01:46:33 nativespace-cdp sshd[4069]: Connection closed by 159.100.136.21 port 57296 [preauth]
Oct  2 01:51:35 nativespace-cdp sshd[5388]: Connection closed by 159.100.136.21 port 39052 [preauth]
Oct  2 01:52:30 nativespace-cdp sshd[5534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.59.230.1  user=root
Oct  2 01:52:30 nativespace-cdp sshd[5534]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:52:31 nativespace-cdp sshd[5534]: Failed password for root from 146.59.230.1 port 48382 ssh2
Oct  2 01:52:31 nativespace-cdp sshd[5534]: Received disconnect from 146.59.230.1 port 48382:11: Bye Bye [preauth]
Oct  2 01:52:31 nativespace-cdp sshd[5534]: Disconnected from 146.59.230.1 port 48382 [preauth]
Oct  2 01:53:03 nativespace-cdp sshd[5617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.94.26.113  user=root
Oct  2 01:53:03 nativespace-cdp sshd[5617]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:53:05 nativespace-cdp sshd[5617]: Failed password for root from 141.94.26.113 port 54846 ssh2
Oct  2 01:53:05 nativespace-cdp sshd[5617]: Received disconnect from 141.94.26.113 port 54846:11: Bye Bye [preauth]
Oct  2 01:53:05 nativespace-cdp sshd[5617]: Disconnected from 141.94.26.113 port 54846 [preauth]
Oct  2 01:53:09 nativespace-cdp sshd[5630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.31.95.163  user=root
Oct  2 01:53:09 nativespace-cdp sshd[5630]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:53:11 nativespace-cdp sshd[5630]: Failed password for root from 186.31.95.163 port 49014 ssh2
Oct  2 01:53:11 nativespace-cdp sshd[5630]: Received disconnect from 186.31.95.163 port 49014:11: Bye Bye [preauth]
Oct  2 01:53:11 nativespace-cdp sshd[5630]: Disconnected from 186.31.95.163 port 49014 [preauth]
Oct  2 01:54:52 nativespace-cdp sshd[5977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.30.112.17  user=root
Oct  2 01:54:52 nativespace-cdp sshd[5977]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:54:54 nativespace-cdp sshd[5977]: Failed password for root from 160.30.112.17 port 45758 ssh2
Oct  2 01:54:54 nativespace-cdp sshd[5977]: Received disconnect from 160.30.112.17 port 45758:11: Bye Bye [preauth]
Oct  2 01:54:54 nativespace-cdp sshd[5977]: Disconnected from 160.30.112.17 port 45758 [preauth]
Oct  2 01:56:11 nativespace-cdp sshd[6310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.199  user=root
Oct  2 01:56:11 nativespace-cdp sshd[6310]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:56:13 nativespace-cdp sshd[6310]: Failed password for root from 171.22.31.199 port 57830 ssh2
Oct  2 01:56:14 nativespace-cdp sshd[6310]: Received disconnect from 171.22.31.199 port 57830:11: Bye Bye [preauth]
Oct  2 01:56:14 nativespace-cdp sshd[6310]: Disconnected from 171.22.31.199 port 57830 [preauth]
Oct  2 01:56:33 nativespace-cdp sshd[6388]: Connection closed by 159.100.136.21 port 49342 [preauth]
Oct  2 01:57:18 nativespace-cdp sshd[6509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.157.140  user=root
Oct  2 01:57:18 nativespace-cdp sshd[6509]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:57:20 nativespace-cdp sshd[6509]: Failed password for root from 167.172.157.140 port 52078 ssh2
Oct  2 01:57:20 nativespace-cdp sshd[6509]: Received disconnect from 167.172.157.140 port 52078:11: Bye Bye [preauth]
Oct  2 01:57:20 nativespace-cdp sshd[6509]: Disconnected from 167.172.157.140 port 52078 [preauth]
Oct  2 01:57:53 nativespace-cdp sshd[6600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.244.187.245  user=root
Oct  2 01:57:53 nativespace-cdp sshd[6600]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:57:56 nativespace-cdp sshd[6600]: Failed password for root from 143.244.187.245 port 51338 ssh2
Oct  2 01:57:56 nativespace-cdp sshd[6600]: Received disconnect from 143.244.187.245 port 51338:11: Bye Bye [preauth]
Oct  2 01:57:56 nativespace-cdp sshd[6600]: Disconnected from 143.244.187.245 port 51338 [preauth]
Oct  2 01:58:27 nativespace-cdp sshd[6818]: Invalid user shania from 141.94.26.113 port 51310
Oct  2 01:58:27 nativespace-cdp sshd[6818]: input_userauth_request: invalid user shania [preauth]
Oct  2 01:58:27 nativespace-cdp sshd[6818]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 01:58:27 nativespace-cdp sshd[6818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.94.26.113
Oct  2 01:58:29 nativespace-cdp sshd[6818]: Failed password for invalid user shania from 141.94.26.113 port 51310 ssh2
Oct  2 01:58:29 nativespace-cdp sshd[6818]: Received disconnect from 141.94.26.113 port 51310:11: Bye Bye [preauth]
Oct  2 01:58:29 nativespace-cdp sshd[6818]: Disconnected from 141.94.26.113 port 51310 [preauth]
Oct  2 01:58:39 nativespace-cdp sshd[6843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.59.230.1  user=root
Oct  2 01:58:39 nativespace-cdp sshd[6843]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:58:41 nativespace-cdp sshd[6843]: Failed password for root from 146.59.230.1 port 48860 ssh2
Oct  2 01:58:41 nativespace-cdp sshd[6843]: Received disconnect from 146.59.230.1 port 48860:11: Bye Bye [preauth]
Oct  2 01:58:41 nativespace-cdp sshd[6843]: Disconnected from 146.59.230.1 port 48860 [preauth]
Oct  2 01:58:43 nativespace-cdp sshd[6858]: Invalid user shania from 171.22.31.199 port 53146
Oct  2 01:58:43 nativespace-cdp sshd[6858]: input_userauth_request: invalid user shania [preauth]
Oct  2 01:58:43 nativespace-cdp sshd[6858]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 01:58:43 nativespace-cdp sshd[6858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.199
Oct  2 01:58:45 nativespace-cdp sshd[6858]: Failed password for invalid user shania from 171.22.31.199 port 53146 ssh2
Oct  2 01:58:45 nativespace-cdp sshd[6858]: Received disconnect from 171.22.31.199 port 53146:11: Bye Bye [preauth]
Oct  2 01:58:45 nativespace-cdp sshd[6858]: Disconnected from 171.22.31.199 port 53146 [preauth]
Oct  2 01:58:56 nativespace-cdp sshd[6883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.31.95.163  user=root
Oct  2 01:58:56 nativespace-cdp sshd[6883]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:58:58 nativespace-cdp sshd[6883]: Failed password for root from 186.31.95.163 port 42134 ssh2
Oct  2 01:58:58 nativespace-cdp sshd[6883]: Received disconnect from 186.31.95.163 port 42134:11: Bye Bye [preauth]
Oct  2 01:58:58 nativespace-cdp sshd[6883]: Disconnected from 186.31.95.163 port 42134 [preauth]
Oct  2 01:59:08 nativespace-cdp sshd[6921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.94.26.113  user=root
Oct  2 01:59:08 nativespace-cdp sshd[6921]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:59:09 nativespace-cdp sshd[6923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.157.140  user=root
Oct  2 01:59:09 nativespace-cdp sshd[6923]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:59:09 nativespace-cdp sshd[6921]: Failed password for root from 141.94.26.113 port 36224 ssh2
Oct  2 01:59:09 nativespace-cdp sshd[6921]: Received disconnect from 141.94.26.113 port 36224:11: Bye Bye [preauth]
Oct  2 01:59:09 nativespace-cdp sshd[6921]: Disconnected from 141.94.26.113 port 36224 [preauth]
Oct  2 01:59:11 nativespace-cdp sshd[6923]: Failed password for root from 167.172.157.140 port 46428 ssh2
Oct  2 01:59:11 nativespace-cdp sshd[6923]: Received disconnect from 167.172.157.140 port 46428:11: Bye Bye [preauth]
Oct  2 01:59:11 nativespace-cdp sshd[6923]: Disconnected from 167.172.157.140 port 46428 [preauth]
Oct  2 01:59:20 nativespace-cdp sshd[6979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.59.230.1  user=root
Oct  2 01:59:20 nativespace-cdp sshd[6979]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:59:20 nativespace-cdp sshd[6981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.199  user=root
Oct  2 01:59:20 nativespace-cdp sshd[6981]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:59:20 nativespace-cdp sshd[6977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.30.112.17  user=root
Oct  2 01:59:20 nativespace-cdp sshd[6977]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:59:21 nativespace-cdp sshd[6979]: Failed password for root from 146.59.230.1 port 48994 ssh2
Oct  2 01:59:21 nativespace-cdp sshd[6979]: Received disconnect from 146.59.230.1 port 48994:11: Bye Bye [preauth]
Oct  2 01:59:21 nativespace-cdp sshd[6979]: Disconnected from 146.59.230.1 port 48994 [preauth]
Oct  2 01:59:22 nativespace-cdp sshd[6981]: Failed password for root from 171.22.31.199 port 44700 ssh2
Oct  2 01:59:22 nativespace-cdp sshd[6981]: Received disconnect from 171.22.31.199 port 44700:11: Bye Bye [preauth]
Oct  2 01:59:22 nativespace-cdp sshd[6981]: Disconnected from 171.22.31.199 port 44700 [preauth]
Oct  2 01:59:22 nativespace-cdp sshd[6977]: Failed password for root from 160.30.112.17 port 60236 ssh2
Oct  2 01:59:22 nativespace-cdp sshd[6977]: Received disconnect from 160.30.112.17 port 60236:11: Bye Bye [preauth]
Oct  2 01:59:22 nativespace-cdp sshd[6977]: Disconnected from 160.30.112.17 port 60236 [preauth]
Oct  2 01:59:39 nativespace-cdp sshd[7072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.31.95.163  user=root
Oct  2 01:59:39 nativespace-cdp sshd[7072]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:59:41 nativespace-cdp sshd[7072]: Failed password for root from 186.31.95.163 port 49178 ssh2
Oct  2 01:59:41 nativespace-cdp sshd[7072]: Received disconnect from 186.31.95.163 port 49178:11: Bye Bye [preauth]
Oct  2 01:59:41 nativespace-cdp sshd[7072]: Disconnected from 186.31.95.163 port 49178 [preauth]
Oct  2 01:59:47 nativespace-cdp sshd[7115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.157.140  user=root
Oct  2 01:59:47 nativespace-cdp sshd[7115]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 01:59:49 nativespace-cdp sshd[7115]: Failed password for root from 167.172.157.140 port 59072 ssh2
Oct  2 01:59:49 nativespace-cdp sshd[7115]: Received disconnect from 167.172.157.140 port 59072:11: Bye Bye [preauth]
Oct  2 01:59:49 nativespace-cdp sshd[7115]: Disconnected from 167.172.157.140 port 59072 [preauth]
Oct  2 02:00:13 nativespace-cdp sshd[7418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.30.112.17  user=root
Oct  2 02:00:13 nativespace-cdp sshd[7418]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:00:15 nativespace-cdp sshd[7418]: Failed password for root from 160.30.112.17 port 44532 ssh2
Oct  2 02:00:15 nativespace-cdp sshd[7418]: Received disconnect from 160.30.112.17 port 44532:11: Bye Bye [preauth]
Oct  2 02:00:15 nativespace-cdp sshd[7418]: Disconnected from 160.30.112.17 port 44532 [preauth]
Oct  2 02:01:33 nativespace-cdp sshd[7670]: Connection closed by 159.100.136.21 port 59292 [preauth]
Oct  2 02:03:28 nativespace-cdp sshd[8028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.143.214.175  user=root
Oct  2 02:03:28 nativespace-cdp sshd[8028]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:03:30 nativespace-cdp sshd[8028]: Failed password for root from 157.143.214.175 port 53535 ssh2
Oct  2 02:03:30 nativespace-cdp sshd[8028]: Received disconnect from 157.143.214.175 port 53535:11: Bye Bye [preauth]
Oct  2 02:03:30 nativespace-cdp sshd[8028]: Disconnected from 157.143.214.175 port 53535 [preauth]
Oct  2 02:04:58 nativespace-cdp sshd[8399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.143.214.175  user=root
Oct  2 02:04:58 nativespace-cdp sshd[8399]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:05:00 nativespace-cdp sshd[8399]: Failed password for root from 157.143.214.175 port 45355 ssh2
Oct  2 02:05:00 nativespace-cdp sshd[8399]: Received disconnect from 157.143.214.175 port 45355:11: Bye Bye [preauth]
Oct  2 02:05:00 nativespace-cdp sshd[8399]: Disconnected from 157.143.214.175 port 45355 [preauth]
Oct  2 02:06:03 nativespace-cdp sshd[8776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.143.214.175  user=root
Oct  2 02:06:03 nativespace-cdp sshd[8776]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:06:05 nativespace-cdp sshd[8776]: Failed password for root from 157.143.214.175 port 51629 ssh2
Oct  2 02:06:05 nativespace-cdp sshd[8776]: Received disconnect from 157.143.214.175 port 51629:11: Bye Bye [preauth]
Oct  2 02:06:05 nativespace-cdp sshd[8776]: Disconnected from 157.143.214.175 port 51629 [preauth]
Oct  2 02:06:33 nativespace-cdp sshd[8865]: Connection closed by 159.100.136.21 port 41122 [preauth]
Oct  2 02:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 02:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:28 nativespace-cdp sudo[9426]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 02:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:28 nativespace-cdp sudo[9430]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 02:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:29 nativespace-cdp sudo[9433]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 02:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:29 nativespace-cdp sudo[9439]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 02:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:30 nativespace-cdp sudo[9442]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 02:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:31 nativespace-cdp sudo[9453]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 02:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:31 nativespace-cdp sudo[9457]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 02:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:31 nativespace-cdp sudo[9460]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 02:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:31 nativespace-cdp sudo[9463]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 02:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:31 nativespace-cdp sudo[9466]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 02:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:31 nativespace-cdp sudo[9470]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 02:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:33 nativespace-cdp sudo[9482]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:33 nativespace-cdp sudo[9486]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=wilsonsw user-2=megacards user-3=musorguk user-4=brmrjxl user-5=lakesan1 user-6=strathar user-7=atestord user-8=sarafoundation user-9=hhdugcor user-10=lbhyisi user-11=magichat user-12=martsblo user-13=dickemery123 user-14=ptkxhsbt user-15=ulsukarm user-16=booff user-17=foundation user-18=markward user-19=vantagep user-20=athenare user-21=connect9 user-22=lbscrmod user-23=maflemin user-24=agproduc user-25=still user-26=stephani user-27=leereyn1 user-28=jarvisin user-29=spectrum user-30=hodgesonweb user-31=theblack user-32=bedfords user-33=newstoda user-34=ggaaorgu user-35=belle user-36=bemadonn user-37=nstriton user-38=brighto1 user-39=vivienn1 user-40=firstre2 user-41=oneoarco user-42=battlere user-43=innovat1 user-44=askhform user-45=stuartge user-46=nativene user-47=alexadmin user-48=skyfirec
Oct  2 02:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=clarkass user-50=firstrel user-51=costestimatorco user-52=firstred user-53=highlegh user-54=southlon user-55=ultbcrra user-56=jonhartl user-57=seftvta user-58=firstres user-59=coursemc user-60=opaiscyx user-61=accooper user-62=ianrayne user-63=connectedshoppin user-64=thqkgnbz user-65=milloyco user-66=gilpin user-67=elecleis user-68=hubmaster user-69=fetch user-70=carsinyo user-71=isleofwi user-72=smrszyqg user-73=nomistakes user-74=hidden user-75=tigerlet user-76=barbersh user-77=nscdp user-78=leftie user-79=foods user-80=health2045 user-81=fortunaz user-82=lkpier user-83=firstre5 user-84=steakbridieme user-85=donnychicago user-86=ctedorgu user-87=philmcph user-88=hirefootballgame user-89=eugincou user-90=courseme user-91=cathski user-92=cambria1 user-93=reliable user-94=ninejimm user-95=cwsocial user-96=howardon user-97=pugwash user-98=paulmca1 user-99=bwppodcast user-100=zebrapho user-101=steve
Oct  2 02:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=asandcoc user-103=sibtoncc user-104=beauty user-105=darkstar user-106=eatspam user-107=dhyana user-108=fawcettd user-109=burydropin user-110=nsceres user-111=bakery user-112=crrtipdl user-113=sosevalu user-114=nove user-115=boldover user-116=dancinggardener user-117=stagingerris user-118=ladburyp user-119=kategilpin user-120=design user-121=oubpgvbx user-122=tstardom user-123=what user-124=havantho user-125=cath user-126=sketchy user-127=nvihkvu user-128=chrisdal user-129=mcdermos user-130=david user-131=careers user-132=nbhavers user-133=tomandle user-134=jennimil user-135=hodgsonmail user-136=ranxterc user-137=outdoorc user-138=branko user-139=romaldki user-140=lucy user-141=attlebor user-142=onlycont feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 02:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:33 nativespace-cdp sudo[9491]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:33 nativespace-cdp sudo[9496]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-p1Zw7t36DUWblkAV.~
Oct  2 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:33 nativespace-cdp sudo[9499]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-p1Zw7t36DUWblkAV.~'
Oct  2 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:33 nativespace-cdp sudo[9502]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-p1Zw7t36DUWblkAV.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:33 nativespace-cdp sudo[9506]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 02:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:33 nativespace-cdp sudo[9509]: pam_unix(sudo:session): session closed for user root
Oct  2 02:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 02:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 02:09:38 nativespace-cdp sudo[9538]: pam_unix(sudo:session): session closed for user root
Oct  2 02:11:33 nativespace-cdp sshd[9979]: Connection closed by 159.100.136.21 port 51088 [preauth]
Oct  2 02:16:33 nativespace-cdp sshd[11027]: Connection closed by 159.100.136.21 port 33082 [preauth]
Oct  2 02:18:08 nativespace-cdp sshd[11255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.213.245.127  user=root
Oct  2 02:18:08 nativespace-cdp sshd[11255]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:18:08 nativespace-cdp sshd[11258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.133.49  user=root
Oct  2 02:18:08 nativespace-cdp sshd[11258]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:18:09 nativespace-cdp sshd[11255]: Failed password for root from 103.213.245.127 port 41952 ssh2
Oct  2 02:18:09 nativespace-cdp sshd[11255]: Received disconnect from 103.213.245.127 port 41952:11: Bye Bye [preauth]
Oct  2 02:18:09 nativespace-cdp sshd[11255]: Disconnected from 103.213.245.127 port 41952 [preauth]
Oct  2 02:18:10 nativespace-cdp sshd[11258]: Failed password for root from 103.161.133.49 port 45654 ssh2
Oct  2 02:18:10 nativespace-cdp sshd[11258]: Received disconnect from 103.161.133.49 port 45654:11: Bye Bye [preauth]
Oct  2 02:18:10 nativespace-cdp sshd[11258]: Disconnected from 103.161.133.49 port 45654 [preauth]
Oct  2 02:18:22 nativespace-cdp sshd[11315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.239.138  user=root
Oct  2 02:18:22 nativespace-cdp sshd[11315]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:18:24 nativespace-cdp sshd[11315]: Failed password for root from 192.3.239.138 port 5012 ssh2
Oct  2 02:18:24 nativespace-cdp sshd[11315]: Received disconnect from 192.3.239.138 port 5012:11: Bye Bye [preauth]
Oct  2 02:18:24 nativespace-cdp sshd[11315]: Disconnected from 192.3.239.138 port 5012 [preauth]
Oct  2 02:18:36 nativespace-cdp sshd[11479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.45  user=root
Oct  2 02:18:36 nativespace-cdp sshd[11479]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:18:38 nativespace-cdp sshd[11479]: Failed password for root from 186.235.70.45 port 42910 ssh2
Oct  2 02:18:38 nativespace-cdp sshd[11479]: Received disconnect from 186.235.70.45 port 42910:11: Bye Bye [preauth]
Oct  2 02:18:38 nativespace-cdp sshd[11479]: Disconnected from 186.235.70.45 port 42910 [preauth]
Oct  2 02:20:46 nativespace-cdp sshd[12091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.239.138  user=root
Oct  2 02:20:46 nativespace-cdp sshd[12091]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:20:48 nativespace-cdp sshd[12091]: Failed password for root from 192.3.239.138 port 64334 ssh2
Oct  2 02:20:48 nativespace-cdp sshd[12091]: Received disconnect from 192.3.239.138 port 64334:11: Bye Bye [preauth]
Oct  2 02:20:48 nativespace-cdp sshd[12091]: Disconnected from 192.3.239.138 port 64334 [preauth]
Oct  2 02:20:55 nativespace-cdp sshd[12113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.163.1  user=root
Oct  2 02:20:55 nativespace-cdp sshd[12113]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:20:57 nativespace-cdp sshd[12113]: Failed password for root from 54.36.163.1 port 33718 ssh2
Oct  2 02:20:57 nativespace-cdp sshd[12113]: Received disconnect from 54.36.163.1 port 33718:11: Bye Bye [preauth]
Oct  2 02:20:57 nativespace-cdp sshd[12113]: Disconnected from 54.36.163.1 port 33718 [preauth]
Oct  2 02:21:20 nativespace-cdp sshd[12264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.228.25.92  user=root
Oct  2 02:21:20 nativespace-cdp sshd[12264]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:21:21 nativespace-cdp sshd[12264]: Failed password for root from 2.228.25.92 port 41996 ssh2
Oct  2 02:21:21 nativespace-cdp sshd[12264]: Received disconnect from 2.228.25.92 port 41996:11: Bye Bye [preauth]
Oct  2 02:21:21 nativespace-cdp sshd[12264]: Disconnected from 2.228.25.92 port 41996 [preauth]
Oct  2 02:21:33 nativespace-cdp sshd[12287]: Connection closed by 159.100.136.21 port 43030 [preauth]
Oct  2 02:22:23 nativespace-cdp sshd[12499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.178.191.4  user=root
Oct  2 02:22:23 nativespace-cdp sshd[12499]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:22:25 nativespace-cdp sshd[12499]: Failed password for root from 195.178.191.4 port 45894 ssh2
Oct  2 02:22:25 nativespace-cdp sshd[12499]: Received disconnect from 195.178.191.4 port 45894:11: Bye Bye [preauth]
Oct  2 02:22:25 nativespace-cdp sshd[12499]: Disconnected from 195.178.191.4 port 45894 [preauth]
Oct  2 02:23:07 nativespace-cdp sshd[12608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.254.80  user=root
Oct  2 02:23:07 nativespace-cdp sshd[12608]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:23:09 nativespace-cdp sshd[12608]: Failed password for root from 178.128.254.80 port 51856 ssh2
Oct  2 02:23:09 nativespace-cdp sshd[12608]: Received disconnect from 178.128.254.80 port 51856:11: Bye Bye [preauth]
Oct  2 02:23:09 nativespace-cdp sshd[12608]: Disconnected from 178.128.254.80 port 51856 [preauth]
Oct  2 02:23:29 nativespace-cdp sshd[12745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.239.138  user=root
Oct  2 02:23:29 nativespace-cdp sshd[12745]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:23:31 nativespace-cdp sshd[12745]: Failed password for root from 192.3.239.138 port 45170 ssh2
Oct  2 02:23:31 nativespace-cdp sshd[12745]: Received disconnect from 192.3.239.138 port 45170:11: Bye Bye [preauth]
Oct  2 02:23:31 nativespace-cdp sshd[12745]: Disconnected from 192.3.239.138 port 45170 [preauth]
Oct  2 02:23:46 nativespace-cdp sshd[12810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.126.192.64  user=root
Oct  2 02:23:46 nativespace-cdp sshd[12810]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:23:47 nativespace-cdp sshd[12810]: Failed password for root from 144.126.192.64 port 38462 ssh2
Oct  2 02:23:47 nativespace-cdp sshd[12810]: Received disconnect from 144.126.192.64 port 38462:11: Bye Bye [preauth]
Oct  2 02:23:47 nativespace-cdp sshd[12810]: Disconnected from 144.126.192.64 port 38462 [preauth]
Oct  2 02:24:00 nativespace-cdp sshd[12840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.133.49  user=root
Oct  2 02:24:00 nativespace-cdp sshd[12840]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:01 nativespace-cdp sshd[12845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.45  user=root
Oct  2 02:24:01 nativespace-cdp sshd[12845]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:02 nativespace-cdp sshd[12840]: Failed password for root from 103.161.133.49 port 58322 ssh2
Oct  2 02:24:02 nativespace-cdp sshd[12840]: Received disconnect from 103.161.133.49 port 58322:11: Bye Bye [preauth]
Oct  2 02:24:02 nativespace-cdp sshd[12840]: Disconnected from 103.161.133.49 port 58322 [preauth]
Oct  2 02:24:03 nativespace-cdp sshd[12845]: Failed password for root from 186.235.70.45 port 40248 ssh2
Oct  2 02:24:03 nativespace-cdp sshd[12845]: Received disconnect from 186.235.70.45 port 40248:11: Bye Bye [preauth]
Oct  2 02:24:03 nativespace-cdp sshd[12845]: Disconnected from 186.235.70.45 port 40248 [preauth]
Oct  2 02:24:12 nativespace-cdp sshd[12880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.213.245.127  user=root
Oct  2 02:24:12 nativespace-cdp sshd[12880]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:14 nativespace-cdp sshd[12880]: Failed password for root from 103.213.245.127 port 36592 ssh2
Oct  2 02:24:14 nativespace-cdp sshd[12880]: Received disconnect from 103.213.245.127 port 36592:11: Bye Bye [preauth]
Oct  2 02:24:14 nativespace-cdp sshd[12880]: Disconnected from 103.213.245.127 port 36592 [preauth]
Oct  2 02:24:21 nativespace-cdp sshd[12915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.228.25.92  user=root
Oct  2 02:24:21 nativespace-cdp sshd[12915]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:23 nativespace-cdp sshd[12915]: Failed password for root from 2.228.25.92 port 45710 ssh2
Oct  2 02:24:23 nativespace-cdp sshd[12915]: Received disconnect from 2.228.25.92 port 45710:11: Bye Bye [preauth]
Oct  2 02:24:23 nativespace-cdp sshd[12915]: Disconnected from 2.228.25.92 port 45710 [preauth]
Oct  2 02:24:24 nativespace-cdp sshd[12930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.178.191.4  user=root
Oct  2 02:24:24 nativespace-cdp sshd[12930]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:26 nativespace-cdp sshd[12930]: Failed password for root from 195.178.191.4 port 60662 ssh2
Oct  2 02:24:26 nativespace-cdp sshd[12930]: Received disconnect from 195.178.191.4 port 60662:11: Bye Bye [preauth]
Oct  2 02:24:26 nativespace-cdp sshd[12930]: Disconnected from 195.178.191.4 port 60662 [preauth]
Oct  2 02:24:27 nativespace-cdp sshd[12938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.254.80  user=root
Oct  2 02:24:27 nativespace-cdp sshd[12938]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:28 nativespace-cdp sshd[12938]: Failed password for root from 178.128.254.80 port 34910 ssh2
Oct  2 02:24:28 nativespace-cdp sshd[12938]: Received disconnect from 178.128.254.80 port 34910:11: Bye Bye [preauth]
Oct  2 02:24:28 nativespace-cdp sshd[12938]: Disconnected from 178.128.254.80 port 34910 [preauth]
Oct  2 02:24:32 nativespace-cdp sshd[12949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.163.1  user=root
Oct  2 02:24:32 nativespace-cdp sshd[12949]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:34 nativespace-cdp sshd[12949]: Failed password for root from 54.36.163.1 port 45012 ssh2
Oct  2 02:24:34 nativespace-cdp sshd[12949]: Received disconnect from 54.36.163.1 port 45012:11: Bye Bye [preauth]
Oct  2 02:24:34 nativespace-cdp sshd[12949]: Disconnected from 54.36.163.1 port 45012 [preauth]
Oct  2 02:24:38 nativespace-cdp sshd[12961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.126.192.64  user=root
Oct  2 02:24:38 nativespace-cdp sshd[12961]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:39 nativespace-cdp sshd[12961]: Failed password for root from 144.126.192.64 port 60068 ssh2
Oct  2 02:24:39 nativespace-cdp sshd[12961]: Received disconnect from 144.126.192.64 port 60068:11: Bye Bye [preauth]
Oct  2 02:24:39 nativespace-cdp sshd[12961]: Disconnected from 144.126.192.64 port 60068 [preauth]
Oct  2 02:24:49 nativespace-cdp sshd[12979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.161.133.49  user=root
Oct  2 02:24:49 nativespace-cdp sshd[12979]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:51 nativespace-cdp sshd[12979]: Failed password for root from 103.161.133.49 port 33882 ssh2
Oct  2 02:24:51 nativespace-cdp sshd[12979]: Received disconnect from 103.161.133.49 port 33882:11: Bye Bye [preauth]
Oct  2 02:24:51 nativespace-cdp sshd[12979]: Disconnected from 103.161.133.49 port 33882 [preauth]
Oct  2 02:24:54 nativespace-cdp sshd[12992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.235.70.45  user=root
Oct  2 02:24:54 nativespace-cdp sshd[12992]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:55 nativespace-cdp sshd[13000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.213.245.127  user=root
Oct  2 02:24:55 nativespace-cdp sshd[13000]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:24:57 nativespace-cdp sshd[13000]: Failed password for root from 103.213.245.127 port 50824 ssh2
Oct  2 02:24:57 nativespace-cdp sshd[12992]: Failed password for root from 186.235.70.45 port 54672 ssh2
Oct  2 02:24:57 nativespace-cdp sshd[13000]: Received disconnect from 103.213.245.127 port 50824:11: Bye Bye [preauth]
Oct  2 02:24:57 nativespace-cdp sshd[13000]: Disconnected from 103.213.245.127 port 50824 [preauth]
Oct  2 02:24:57 nativespace-cdp sshd[12992]: Received disconnect from 186.235.70.45 port 54672:11: Bye Bye [preauth]
Oct  2 02:24:57 nativespace-cdp sshd[12992]: Disconnected from 186.235.70.45 port 54672 [preauth]
Oct  2 02:25:01 nativespace-cdp sshd[13085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.228.25.92  user=root
Oct  2 02:25:01 nativespace-cdp sshd[13085]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:25:01 nativespace-cdp sshd[13164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.178.191.4  user=root
Oct  2 02:25:01 nativespace-cdp sshd[13164]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:25:02 nativespace-cdp sshd[13231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.254.80  user=root
Oct  2 02:25:02 nativespace-cdp sshd[13231]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:25:03 nativespace-cdp sshd[13085]: Failed password for root from 2.228.25.92 port 58028 ssh2
Oct  2 02:25:03 nativespace-cdp sshd[13085]: Received disconnect from 2.228.25.92 port 58028:11: Bye Bye [preauth]
Oct  2 02:25:03 nativespace-cdp sshd[13085]: Disconnected from 2.228.25.92 port 58028 [preauth]
Oct  2 02:25:04 nativespace-cdp sshd[13164]: Failed password for root from 195.178.191.4 port 43804 ssh2
Oct  2 02:25:04 nativespace-cdp sshd[13231]: Failed password for root from 178.128.254.80 port 35404 ssh2
Oct  2 02:25:04 nativespace-cdp sshd[13164]: Received disconnect from 195.178.191.4 port 43804:11: Bye Bye [preauth]
Oct  2 02:25:04 nativespace-cdp sshd[13164]: Disconnected from 195.178.191.4 port 43804 [preauth]
Oct  2 02:25:04 nativespace-cdp sshd[13231]: Received disconnect from 178.128.254.80 port 35404:11: Bye Bye [preauth]
Oct  2 02:25:04 nativespace-cdp sshd[13231]: Disconnected from 178.128.254.80 port 35404 [preauth]
Oct  2 02:25:09 nativespace-cdp sshd[13318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.163.1  user=root
Oct  2 02:25:09 nativespace-cdp sshd[13318]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:25:11 nativespace-cdp sshd[13318]: Failed password for root from 54.36.163.1 port 43410 ssh2
Oct  2 02:25:11 nativespace-cdp sshd[13318]: Received disconnect from 54.36.163.1 port 43410:11: Bye Bye [preauth]
Oct  2 02:25:11 nativespace-cdp sshd[13318]: Disconnected from 54.36.163.1 port 43410 [preauth]
Oct  2 02:25:40 nativespace-cdp sshd[13429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.126.192.64  user=root
Oct  2 02:25:40 nativespace-cdp sshd[13429]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 02:25:42 nativespace-cdp sshd[13429]: Failed password for root from 144.126.192.64 port 35638 ssh2
Oct  2 02:25:42 nativespace-cdp sshd[13429]: Received disconnect from 144.126.192.64 port 35638:11: Bye Bye [preauth]
Oct  2 02:25:42 nativespace-cdp sshd[13429]: Disconnected from 144.126.192.64 port 35638 [preauth]
Oct  2 02:26:33 nativespace-cdp sshd[13626]: Connection closed by 159.100.136.21 port 53292 [preauth]
Oct  2 02:31:33 nativespace-cdp sshd[14701]: Connection closed by 159.100.136.21 port 34406 [preauth]
Oct  2 02:36:33 nativespace-cdp sshd[15885]: Connection closed by 159.100.136.21 port 44712 [preauth]
Oct  2 02:41:33 nativespace-cdp sshd[16930]: Connection closed by 159.100.136.21 port 54644 [preauth]
Oct  2 02:46:33 nativespace-cdp sshd[18011]: Connection closed by 159.100.136.21 port 36654 [preauth]
Oct  2 02:51:33 nativespace-cdp sshd[19185]: Connection closed by 159.100.136.21 port 46622 [preauth]
Oct  2 02:56:34 nativespace-cdp sshd[20325]: Connection closed by 159.100.136.21 port 56902 [preauth]
Oct  2 03:01:33 nativespace-cdp sshd[21566]: Connection closed by 159.100.136.21 port 38628 [preauth]
Oct  2 03:06:33 nativespace-cdp sshd[22704]: Connection closed by 159.100.136.21 port 48954 [preauth]
Oct  2 03:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 03:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:28 nativespace-cdp sudo[23282]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 03:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:28 nativespace-cdp sudo[23285]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 03:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:29 nativespace-cdp sudo[23288]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 03:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:29 nativespace-cdp sudo[23293]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 03:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:30 nativespace-cdp sudo[23296]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 03:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:30 nativespace-cdp sudo[23308]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 03:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:30 nativespace-cdp sudo[23311]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 03:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:30 nativespace-cdp sudo[23314]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 03:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:30 nativespace-cdp sudo[23317]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 03:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:30 nativespace-cdp sudo[23320]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 03:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:30 nativespace-cdp sudo[23323]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 03:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:32 nativespace-cdp sudo[23333]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 03:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:33 nativespace-cdp sudo[23339]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=philmcph user-2=ctedorgu user-3=donnychicago user-4=firstre5 user-5=steakbridieme user-6=lkpier user-7=fortunaz user-8=health2045 user-9=leftie user-10=foods user-11=nscdp user-12=barbersh user-13=tigerlet user-14=hidden user-15=nomistakes user-16=isleofwi user-17=smrszyqg user-18=howardon user-19=pugwash user-20=paulmca1 user-21=cwsocial user-22=reliable user-23=ninejimm user-24=cathski user-25=cambria1 user-26=courseme user-27=eugincou user-28=hirefootballgame user-29=asandcoc user-30=sibtoncc user-31=steve user-32=zebrapho user-33=bwppodcast user-34=nsceres user-35=burydropin user-36=fawcettd user-37=dhyana user-38=eatspam user-39=darkstar user-40=beauty user-41=boldover user-42=nove user-43=sosevalu user-44=crrtipdl user-45=bakery user-46=nvihkvu user-47=cath user-48=sketchy user-49=havantho
Oct  2 03:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=what user-51=tstardom user-52=oubpgvbx user-53=design user-54=kategilpin user-55=ladburyp user-56=stagingerris user-57=dancinggardener user-58=jennimil user-59=tomandle user-60=nbhavers user-61=careers user-62=david user-63=mcdermos user-64=chrisdal user-65=onlycont user-66=attlebor user-67=lucy user-68=romaldki user-69=branko user-70=ranxterc user-71=hodgsonmail user-72=outdoorc user-73=sarafoundation user-74=atestord user-75=strathar user-76=brmrjxl user-77=lakesan1 user-78=musorguk user-79=megacards user-80=wilsonsw user-81=ptkxhsbt user-82=dickemery123 user-83=martsblo user-84=magichat user-85=lbhyisi user-86=hhdugcor user-87=maflemin user-88=lbscrmod user-89=connect9 user-90=athenare user-91=vantagep user-92=booff user-93=markward user-94=foundation user-95=ulsukarm user-96=hodgesonweb user-97=theblack user-98=spectrum user-99=jarvisin user-100=leereyn1 user-101=stephani user-102=still
Oct  2 03:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=agproduc user-104=battlere user-105=oneoarco user-106=firstre2 user-107=vivienn1 user-108=brighto1 user-109=nstriton user-110=bemadonn user-111=belle user-112=ggaaorgu user-113=newstoda user-114=bedfords user-115=alexadmin user-116=skyfirec user-117=nativene user-118=askhform user-119=stuartge user-120=innovat1 user-121=opaiscyx user-122=coursemc user-123=firstres user-124=jonhartl user-125=seftvta user-126=ultbcrra user-127=southlon user-128=highlegh user-129=firstred user-130=costestimatorco user-131=clarkass user-132=firstrel user-133=carsinyo user-134=fetch user-135=hubmaster user-136=elecleis user-137=milloyco user-138=gilpin user-139=thqkgnbz user-140=connectedshoppin user-141=ianrayne user-142=accooper feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 03:09:33 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:33 nativespace-cdp sudo[23343]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:33 nativespace-cdp sudo[23349]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2W4VhunjvW4lczsg.~
Oct  2 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:33 nativespace-cdp sudo[23352]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2W4VhunjvW4lczsg.~'
Oct  2 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:33 nativespace-cdp sudo[23355]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-2W4VhunjvW4lczsg.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:33 nativespace-cdp sudo[23359]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 03:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:33 nativespace-cdp sudo[23363]: pam_unix(sudo:session): session closed for user root
Oct  2 03:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 03:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 03:09:38 nativespace-cdp sudo[23389]: pam_unix(sudo:session): session closed for user root
Oct  2 03:11:33 nativespace-cdp sshd[23858]: Connection closed by 159.100.136.21 port 58938 [preauth]
Oct  2 03:16:33 nativespace-cdp sshd[24894]: Connection closed by 159.100.136.21 port 40896 [preauth]
Oct  2 03:21:33 nativespace-cdp sshd[26447]: Connection closed by 159.100.136.21 port 50876 [preauth]
Oct  2 03:26:33 nativespace-cdp sshd[27571]: Connection closed by 159.100.136.21 port 32888 [preauth]
Oct  2 03:31:33 nativespace-cdp sshd[28753]: Connection closed by 159.100.136.21 port 42942 [preauth]
Oct  2 03:36:33 nativespace-cdp sshd[29870]: Connection closed by 159.100.136.21 port 53240 [preauth]
Oct  2 03:41:33 nativespace-cdp sshd[31069]: Connection closed by 159.100.136.21 port 34930 [preauth]
Oct  2 03:46:33 nativespace-cdp sshd[32184]: Connection closed by 159.100.136.21 port 45164 [preauth]
Oct  2 03:51:33 nativespace-cdp sshd[1028]: Connection closed by 159.100.136.21 port 55154 [preauth]
Oct  2 03:56:33 nativespace-cdp sshd[2195]: Connection closed by 159.100.136.21 port 37188 [preauth]
Oct  2 04:01:33 nativespace-cdp sshd[3468]: Connection closed by 159.100.136.21 port 47156 [preauth]
Oct  2 04:06:33 nativespace-cdp sshd[4579]: Connection closed by 159.100.136.21 port 57502 [preauth]
Oct  2 04:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 04:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:35 nativespace-cdp sudo[5202]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 04:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:35 nativespace-cdp sudo[5205]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 04:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:35 nativespace-cdp sudo[5208]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 04:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:35 nativespace-cdp sudo[5213]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 04:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:39 nativespace-cdp sudo[5216]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:39 nativespace-cdp sudo[5234]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:39 nativespace-cdp sudo[5237]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:39 nativespace-cdp sudo[5240]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:39 nativespace-cdp sudo[5243]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:39 nativespace-cdp sudo[5247]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 04:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:39 nativespace-cdp sudo[5250]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 04:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:41 nativespace-cdp sudo[5263]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 04:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:42 nativespace-cdp sudo[5269]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ianrayne user-2=accooper user-3=thqkgnbz user-4=connectedshoppin user-5=elecleis user-6=milloyco user-7=gilpin user-8=carsinyo user-9=fetch user-10=hubmaster user-11=costestimatorco user-12=clarkass user-13=firstrel user-14=southlon user-15=highlegh user-16=firstred user-17=firstres user-18=jonhartl user-19=seftvta user-20=ultbcrra user-21=opaiscyx user-22=coursemc user-23=askhform user-24=stuartge user-25=innovat1 user-26=nativene user-27=alexadmin user-28=skyfirec user-29=bedfords user-30=bemadonn user-31=belle user-32=ggaaorgu user-33=newstoda user-34=brighto1 user-35=nstriton user-36=battlere user-37=oneoarco user-38=firstre2 user-39=vivienn1 user-40=still user-41=agproduc user-42=leereyn1 user-43=stephani user-44=jarvisin user-45=hodgesonweb user-46=theblack user-47=spectrum
Oct  2 04:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=booff user-50=markward user-51=foundation user-52=maflemin user-53=lbscrmod user-54=athenare user-55=connect9 user-56=vantagep user-57=lbhyisi user-58=hhdugcor user-59=magichat user-60=martsblo user-61=ptkxhsbt user-62=dickemery123 user-63=wilsonsw user-64=musorguk user-65=megacards user-66=lakesan1 user-67=brmrjxl user-68=sarafoundation user-69=atestord user-70=strathar user-71=branko user-72=ranxterc user-73=outdoorc user-74=hodgsonmail user-75=romaldki user-76=attlebor user-77=lucy user-78=onlycont user-79=mcdermos user-80=chrisdal user-81=careers user-82=nbhavers user-83=david user-84=tomandle user-85=jennimil user-86=kategilpin user-87=ladburyp user-88=stagingerris user-89=dancinggardener user-90=design user-91=what user-92=tstardom user-93=oubpgvbx user-94=nvihkvu user-95=cath user-96=sketchy user-97=havantho user-98=sosevalu user-99=crrtipdl user-100=bakery user-101=nove
Oct  2 04:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=boldover user-103=eatspam user-104=darkstar user-105=beauty user-106=dhyana user-107=burydropin user-108=fawcettd user-109=nsceres user-110=zebrapho user-111=bwppodcast user-112=steve user-113=sibtoncc user-114=asandcoc user-115=hirefootballgame user-116=courseme user-117=eugincou user-118=ninejimm user-119=reliable user-120=cathski user-121=cambria1 user-122=howardon user-123=pugwash user-124=paulmca1 user-125=cwsocial user-126=isleofwi user-127=smrszyqg user-128=tigerlet user-129=barbersh user-130=hidden user-131=nomistakes user-132=fortunaz user-133=health2045 user-134=leftie user-135=foods user-136=nscdp user-137=ctedorgu user-138=philmcph user-139=donnychicago user-140=steakbridieme user-141=firstre5 user-142=lkpier feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  2 04:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 04:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:43 nativespace-cdp sudo[5273]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 04:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:43 nativespace-cdp sudo[5280]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8RBLPHcCq8AsSrUS.~
Oct  2 04:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:43 nativespace-cdp sudo[5284]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8RBLPHcCq8AsSrUS.~'
Oct  2 04:09:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:43 nativespace-cdp sudo[5287]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-8RBLPHcCq8AsSrUS.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 04:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:44 nativespace-cdp sudo[5291]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 04:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:44 nativespace-cdp sudo[5294]: pam_unix(sudo:session): session closed for user root
Oct  2 04:09:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 04:09:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:09:45 nativespace-cdp sudo[5312]: pam_unix(sudo:session): session closed for user root
Oct  2 04:11:33 nativespace-cdp sshd[5854]: Connection closed by 159.100.136.21 port 39210 [preauth]
Oct  2 04:16:33 nativespace-cdp sshd[6951]: Connection closed by 159.100.136.21 port 49444 [preauth]
Oct  2 04:16:58 nativespace-cdp sshd[7020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.30.102  user=root
Oct  2 04:16:58 nativespace-cdp sshd[7020]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:17:00 nativespace-cdp sshd[7020]: Failed password for root from 104.168.30.102 port 45102 ssh2
Oct  2 04:17:00 nativespace-cdp sshd[7020]: Received disconnect from 104.168.30.102 port 45102:11: Bye Bye [preauth]
Oct  2 04:17:00 nativespace-cdp sshd[7020]: Disconnected from 104.168.30.102 port 45102 [preauth]
Oct  2 04:17:10 nativespace-cdp sshd[7207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.179.107.98  user=root
Oct  2 04:17:10 nativespace-cdp sshd[7207]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:17:12 nativespace-cdp sshd[7207]: Failed password for root from 94.179.107.98 port 30886 ssh2
Oct  2 04:17:12 nativespace-cdp sshd[7207]: Received disconnect from 94.179.107.98 port 30886:11: Bye Bye [preauth]
Oct  2 04:17:12 nativespace-cdp sshd[7207]: Disconnected from 94.179.107.98 port 30886 [preauth]
Oct  2 04:17:49 nativespace-cdp sshd[7312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.240.238.27  user=root
Oct  2 04:17:49 nativespace-cdp sshd[7312]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:17:51 nativespace-cdp sshd[7312]: Failed password for root from 162.240.238.27 port 44764 ssh2
Oct  2 04:17:51 nativespace-cdp sshd[7312]: Received disconnect from 162.240.238.27 port 44764:11: Bye Bye [preauth]
Oct  2 04:17:51 nativespace-cdp sshd[7312]: Disconnected from 162.240.238.27 port 44764 [preauth]
Oct  2 04:18:05 nativespace-cdp sshd[7360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.236.75.85  user=root
Oct  2 04:18:05 nativespace-cdp sshd[7360]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:18:08 nativespace-cdp sshd[7360]: Failed password for root from 156.236.75.85 port 38212 ssh2
Oct  2 04:18:08 nativespace-cdp sshd[7360]: Received disconnect from 156.236.75.85 port 38212:11: Bye Bye [preauth]
Oct  2 04:18:08 nativespace-cdp sshd[7360]: Disconnected from 156.236.75.85 port 38212 [preauth]
Oct  2 04:18:12 nativespace-cdp sshd[7375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.28.242.198  user=root
Oct  2 04:18:12 nativespace-cdp sshd[7375]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:18:15 nativespace-cdp sshd[7375]: Failed password for root from 196.28.242.198 port 33056 ssh2
Oct  2 04:18:15 nativespace-cdp sshd[7375]: Received disconnect from 196.28.242.198 port 33056:11: Bye Bye [preauth]
Oct  2 04:18:15 nativespace-cdp sshd[7375]: Disconnected from 196.28.242.198 port 33056 [preauth]
Oct  2 04:18:21 nativespace-cdp sshd[7397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.192.87.130  user=root
Oct  2 04:18:21 nativespace-cdp sshd[7397]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:18:22 nativespace-cdp sshd[7406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.53.175.36  user=root
Oct  2 04:18:22 nativespace-cdp sshd[7406]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:18:23 nativespace-cdp sshd[7397]: Failed password for root from 81.192.87.130 port 59784 ssh2
Oct  2 04:18:23 nativespace-cdp sshd[7397]: Received disconnect from 81.192.87.130 port 59784:11: Bye Bye [preauth]
Oct  2 04:18:23 nativespace-cdp sshd[7397]: Disconnected from 81.192.87.130 port 59784 [preauth]
Oct  2 04:18:23 nativespace-cdp sshd[7406]: Failed password for root from 202.53.175.36 port 39200 ssh2
Oct  2 04:18:24 nativespace-cdp sshd[7406]: Received disconnect from 202.53.175.36 port 39200:11: Bye Bye [preauth]
Oct  2 04:18:24 nativespace-cdp sshd[7406]: Disconnected from 202.53.175.36 port 39200 [preauth]
Oct  2 04:19:52 nativespace-cdp sshd[7850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.201.142  user=root
Oct  2 04:19:52 nativespace-cdp sshd[7850]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:19:53 nativespace-cdp sshd[7850]: Failed password for root from 152.32.201.142 port 44922 ssh2
Oct  2 04:19:54 nativespace-cdp sshd[7850]: Received disconnect from 152.32.201.142 port 44922:11: Bye Bye [preauth]
Oct  2 04:19:54 nativespace-cdp sshd[7850]: Disconnected from 152.32.201.142 port 44922 [preauth]
Oct  2 04:20:18 nativespace-cdp sshd[8028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.183.128.237  user=root
Oct  2 04:20:18 nativespace-cdp sshd[8028]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:20:19 nativespace-cdp sshd[8028]: Failed password for root from 52.183.128.237 port 46126 ssh2
Oct  2 04:20:20 nativespace-cdp sshd[8028]: Received disconnect from 52.183.128.237 port 46126:11: Bye Bye [preauth]
Oct  2 04:20:20 nativespace-cdp sshd[8028]: Disconnected from 52.183.128.237 port 46126 [preauth]
Oct  2 04:20:20 nativespace-cdp sshd[8037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.107.126.78  user=root
Oct  2 04:20:20 nativespace-cdp sshd[8037]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:20:22 nativespace-cdp sshd[8037]: Failed password for root from 194.107.126.78 port 51922 ssh2
Oct  2 04:20:22 nativespace-cdp sshd[8037]: Received disconnect from 194.107.126.78 port 51922:11: Bye Bye [preauth]
Oct  2 04:20:22 nativespace-cdp sshd[8037]: Disconnected from 194.107.126.78 port 51922 [preauth]
Oct  2 04:21:33 nativespace-cdp sshd[8319]: Connection closed by 159.100.136.21 port 59406 [preauth]
Oct  2 04:21:54 nativespace-cdp sshd[8385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.154.87  user=root
Oct  2 04:21:54 nativespace-cdp sshd[8385]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:21:56 nativespace-cdp sshd[8385]: Failed password for root from 54.37.154.87 port 56784 ssh2
Oct  2 04:21:56 nativespace-cdp sshd[8385]: Received disconnect from 54.37.154.87 port 56784:11: Bye Bye [preauth]
Oct  2 04:21:56 nativespace-cdp sshd[8385]: Disconnected from 54.37.154.87 port 56784 [preauth]
Oct  2 04:22:35 nativespace-cdp sshd[8509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.192.87.130  user=root
Oct  2 04:22:35 nativespace-cdp sshd[8509]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:22:37 nativespace-cdp sshd[8509]: Failed password for root from 81.192.87.130 port 25068 ssh2
Oct  2 04:22:37 nativespace-cdp sshd[8509]: Received disconnect from 81.192.87.130 port 25068:11: Bye Bye [preauth]
Oct  2 04:22:37 nativespace-cdp sshd[8509]: Disconnected from 81.192.87.130 port 25068 [preauth]
Oct  2 04:23:03 nativespace-cdp sshd[8634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.179.107.98  user=root
Oct  2 04:23:03 nativespace-cdp sshd[8634]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:05 nativespace-cdp sshd[8634]: Failed password for root from 94.179.107.98 port 58585 ssh2
Oct  2 04:23:05 nativespace-cdp sshd[8634]: Received disconnect from 94.179.107.98 port 58585:11: Bye Bye [preauth]
Oct  2 04:23:05 nativespace-cdp sshd[8634]: Disconnected from 94.179.107.98 port 58585 [preauth]
Oct  2 04:23:06 nativespace-cdp sshd[8641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.240.238.27  user=root
Oct  2 04:23:06 nativespace-cdp sshd[8641]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:09 nativespace-cdp sshd[8641]: Failed password for root from 162.240.238.27 port 37452 ssh2
Oct  2 04:23:09 nativespace-cdp sshd[8641]: Received disconnect from 162.240.238.27 port 37452:11: Bye Bye [preauth]
Oct  2 04:23:09 nativespace-cdp sshd[8641]: Disconnected from 162.240.238.27 port 37452 [preauth]
Oct  2 04:23:10 nativespace-cdp sshd[8652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.30.102  user=root
Oct  2 04:23:10 nativespace-cdp sshd[8652]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:11 nativespace-cdp sshd[8655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.107.126.78  user=root
Oct  2 04:23:11 nativespace-cdp sshd[8655]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:12 nativespace-cdp sshd[8652]: Failed password for root from 104.168.30.102 port 45322 ssh2
Oct  2 04:23:12 nativespace-cdp sshd[8652]: Received disconnect from 104.168.30.102 port 45322:11: Bye Bye [preauth]
Oct  2 04:23:12 nativespace-cdp sshd[8652]: Disconnected from 104.168.30.102 port 45322 [preauth]
Oct  2 04:23:14 nativespace-cdp sshd[8655]: Failed password for root from 194.107.126.78 port 44712 ssh2
Oct  2 04:23:14 nativespace-cdp sshd[8655]: Received disconnect from 194.107.126.78 port 44712:11: Bye Bye [preauth]
Oct  2 04:23:14 nativespace-cdp sshd[8655]: Disconnected from 194.107.126.78 port 44712 [preauth]
Oct  2 04:23:17 nativespace-cdp sshd[8698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.192.87.130  user=root
Oct  2 04:23:17 nativespace-cdp sshd[8698]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:20 nativespace-cdp sshd[8698]: Failed password for root from 81.192.87.130 port 31182 ssh2
Oct  2 04:23:20 nativespace-cdp sshd[8698]: Received disconnect from 81.192.87.130 port 31182:11: Bye Bye [preauth]
Oct  2 04:23:20 nativespace-cdp sshd[8698]: Disconnected from 81.192.87.130 port 31182 [preauth]
Oct  2 04:23:22 nativespace-cdp sshd[8728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.28.242.198  user=root
Oct  2 04:23:22 nativespace-cdp sshd[8728]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:24 nativespace-cdp sshd[8728]: Failed password for root from 196.28.242.198 port 47614 ssh2
Oct  2 04:23:24 nativespace-cdp sshd[8728]: Received disconnect from 196.28.242.198 port 47614:11: Bye Bye [preauth]
Oct  2 04:23:24 nativespace-cdp sshd[8728]: Disconnected from 196.28.242.198 port 47614 [preauth]
Oct  2 04:23:26 nativespace-cdp sshd[8769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.236.75.85  user=root
Oct  2 04:23:26 nativespace-cdp sshd[8769]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:27 nativespace-cdp sshd[8769]: Failed password for root from 156.236.75.85 port 32974 ssh2
Oct  2 04:23:27 nativespace-cdp sshd[8769]: Received disconnect from 156.236.75.85 port 32974:11: Bye Bye [preauth]
Oct  2 04:23:27 nativespace-cdp sshd[8769]: Disconnected from 156.236.75.85 port 32974 [preauth]
Oct  2 04:23:34 nativespace-cdp sshd[8798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.154.87  user=root
Oct  2 04:23:34 nativespace-cdp sshd[8798]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:36 nativespace-cdp sshd[8798]: Failed password for root from 54.37.154.87 port 34816 ssh2
Oct  2 04:23:36 nativespace-cdp sshd[8798]: Received disconnect from 54.37.154.87 port 34816:11: Bye Bye [preauth]
Oct  2 04:23:36 nativespace-cdp sshd[8798]: Disconnected from 54.37.154.87 port 34816 [preauth]
Oct  2 04:23:39 nativespace-cdp sshd[8826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.201.142  user=root
Oct  2 04:23:39 nativespace-cdp sshd[8826]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:40 nativespace-cdp sshd[8826]: Failed password for root from 152.32.201.142 port 54318 ssh2
Oct  2 04:23:40 nativespace-cdp sshd[8826]: Received disconnect from 152.32.201.142 port 54318:11: Bye Bye [preauth]
Oct  2 04:23:40 nativespace-cdp sshd[8826]: Disconnected from 152.32.201.142 port 54318 [preauth]
Oct  2 04:23:43 nativespace-cdp sshd[8853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.183.128.237  user=root
Oct  2 04:23:43 nativespace-cdp sshd[8853]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:44 nativespace-cdp sshd[8861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.53.175.36  user=root
Oct  2 04:23:44 nativespace-cdp sshd[8861]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:45 nativespace-cdp sshd[8871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.179.107.98  user=root
Oct  2 04:23:45 nativespace-cdp sshd[8871]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:46 nativespace-cdp sshd[8853]: Failed password for root from 52.183.128.237 port 52596 ssh2
Oct  2 04:23:46 nativespace-cdp sshd[8853]: Received disconnect from 52.183.128.237 port 52596:11: Bye Bye [preauth]
Oct  2 04:23:46 nativespace-cdp sshd[8853]: Disconnected from 52.183.128.237 port 52596 [preauth]
Oct  2 04:23:46 nativespace-cdp sshd[8861]: Failed password for root from 202.53.175.36 port 33436 ssh2
Oct  2 04:23:47 nativespace-cdp sshd[8861]: Received disconnect from 202.53.175.36 port 33436:11: Bye Bye [preauth]
Oct  2 04:23:47 nativespace-cdp sshd[8861]: Disconnected from 202.53.175.36 port 33436 [preauth]
Oct  2 04:23:47 nativespace-cdp sshd[8871]: Failed password for root from 94.179.107.98 port 64553 ssh2
Oct  2 04:23:47 nativespace-cdp sshd[8871]: Received disconnect from 94.179.107.98 port 64553:11: Bye Bye [preauth]
Oct  2 04:23:47 nativespace-cdp sshd[8871]: Disconnected from 94.179.107.98 port 64553 [preauth]
Oct  2 04:23:48 nativespace-cdp sshd[8913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.240.238.27  user=root
Oct  2 04:23:48 nativespace-cdp sshd[8913]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:50 nativespace-cdp sshd[8913]: Failed password for root from 162.240.238.27 port 41864 ssh2
Oct  2 04:23:51 nativespace-cdp sshd[8913]: Received disconnect from 162.240.238.27 port 41864:11: Bye Bye [preauth]
Oct  2 04:23:51 nativespace-cdp sshd[8913]: Disconnected from 162.240.238.27 port 41864 [preauth]
Oct  2 04:23:54 nativespace-cdp sshd[8958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.107.126.78  user=root
Oct  2 04:23:54 nativespace-cdp sshd[8958]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:55 nativespace-cdp sshd[8960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.30.102  user=root
Oct  2 04:23:55 nativespace-cdp sshd[8960]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:23:56 nativespace-cdp sshd[8958]: Failed password for root from 194.107.126.78 port 58822 ssh2
Oct  2 04:23:56 nativespace-cdp sshd[8958]: Received disconnect from 194.107.126.78 port 58822:11: Bye Bye [preauth]
Oct  2 04:23:56 nativespace-cdp sshd[8958]: Disconnected from 194.107.126.78 port 58822 [preauth]
Oct  2 04:23:57 nativespace-cdp sshd[8960]: Failed password for root from 104.168.30.102 port 45382 ssh2
Oct  2 04:24:12 nativespace-cdp sshd[9122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.236.75.85  user=root
Oct  2 04:24:12 nativespace-cdp sshd[9122]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:24:13 nativespace-cdp sshd[9122]: Failed password for root from 156.236.75.85 port 45494 ssh2
Oct  2 04:24:14 nativespace-cdp sshd[9122]: Received disconnect from 156.236.75.85 port 45494:11: Bye Bye [preauth]
Oct  2 04:24:14 nativespace-cdp sshd[9122]: Disconnected from 156.236.75.85 port 45494 [preauth]
Oct  2 04:24:14 nativespace-cdp sshd[9162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.28.242.198  user=root
Oct  2 04:24:14 nativespace-cdp sshd[9162]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:24:14 nativespace-cdp sshd[9166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.154.87  user=root
Oct  2 04:24:14 nativespace-cdp sshd[9166]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:24:16 nativespace-cdp sshd[9162]: Failed password for root from 196.28.242.198 port 33742 ssh2
Oct  2 04:24:16 nativespace-cdp sshd[9162]: Received disconnect from 196.28.242.198 port 33742:11: Bye Bye [preauth]
Oct  2 04:24:16 nativespace-cdp sshd[9162]: Disconnected from 196.28.242.198 port 33742 [preauth]
Oct  2 04:24:16 nativespace-cdp sshd[9166]: Failed password for root from 54.37.154.87 port 45226 ssh2
Oct  2 04:24:16 nativespace-cdp sshd[9166]: Received disconnect from 54.37.154.87 port 45226:11: Bye Bye [preauth]
Oct  2 04:24:16 nativespace-cdp sshd[9166]: Disconnected from 54.37.154.87 port 45226 [preauth]
Oct  2 04:24:25 nativespace-cdp sshd[9257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.201.142  user=root
Oct  2 04:24:25 nativespace-cdp sshd[9257]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:24:27 nativespace-cdp sshd[9257]: Failed password for root from 152.32.201.142 port 38552 ssh2
Oct  2 04:24:27 nativespace-cdp sshd[9257]: Received disconnect from 152.32.201.142 port 38552:11: Bye Bye [preauth]
Oct  2 04:24:27 nativespace-cdp sshd[9257]: Disconnected from 152.32.201.142 port 38552 [preauth]
Oct  2 04:24:28 nativespace-cdp sshd[9289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.183.128.237  user=root
Oct  2 04:24:28 nativespace-cdp sshd[9289]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:24:30 nativespace-cdp sshd[9289]: Failed password for root from 52.183.128.237 port 37090 ssh2
Oct  2 04:24:30 nativespace-cdp sshd[9289]: Received disconnect from 52.183.128.237 port 37090:11: Bye Bye [preauth]
Oct  2 04:24:30 nativespace-cdp sshd[9289]: Disconnected from 52.183.128.237 port 37090 [preauth]
Oct  2 04:24:34 nativespace-cdp sshd[9327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.53.175.36  user=root
Oct  2 04:24:34 nativespace-cdp sshd[9327]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:24:36 nativespace-cdp sshd[9327]: Failed password for root from 202.53.175.36 port 46000 ssh2
Oct  2 04:24:36 nativespace-cdp sshd[9327]: Received disconnect from 202.53.175.36 port 46000:11: Bye Bye [preauth]
Oct  2 04:24:36 nativespace-cdp sshd[9327]: Disconnected from 202.53.175.36 port 46000 [preauth]
Oct  2 04:26:33 nativespace-cdp sshd[9873]: Connection closed by 159.100.136.21 port 41454 [preauth]
Oct  2 04:27:08 nativespace-cdp sshd[9973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.204.219.17  user=root
Oct  2 04:27:08 nativespace-cdp sshd[9973]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:27:10 nativespace-cdp sshd[9973]: Failed password for root from 203.204.219.17 port 34394 ssh2
Oct  2 04:27:10 nativespace-cdp sshd[9973]: Received disconnect from 203.204.219.17 port 34394:11: Bye Bye [preauth]
Oct  2 04:27:10 nativespace-cdp sshd[9973]: Disconnected from 203.204.219.17 port 34394 [preauth]
Oct  2 04:30:47 nativespace-cdp sshd[10877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.204.219.17  user=root
Oct  2 04:30:47 nativespace-cdp sshd[10877]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:30:49 nativespace-cdp sshd[10877]: Failed password for root from 203.204.219.17 port 55990 ssh2
Oct  2 04:30:49 nativespace-cdp sshd[10877]: Received disconnect from 203.204.219.17 port 55990:11: Bye Bye [preauth]
Oct  2 04:30:49 nativespace-cdp sshd[10877]: Disconnected from 203.204.219.17 port 55990 [preauth]
Oct  2 04:31:33 nativespace-cdp sshd[11103]: Connection closed by 159.100.136.21 port 51460 [preauth]
Oct  2 04:32:33 nativespace-cdp sshd[11289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.204.219.17  user=root
Oct  2 04:32:33 nativespace-cdp sshd[11289]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 04:32:35 nativespace-cdp sshd[11289]: Failed password for root from 203.204.219.17 port 40340 ssh2
Oct  2 04:32:35 nativespace-cdp sshd[11289]: Received disconnect from 203.204.219.17 port 40340:11: Bye Bye [preauth]
Oct  2 04:32:35 nativespace-cdp sshd[11289]: Disconnected from 203.204.219.17 port 40340 [preauth]
Oct  2 04:35:20 nativespace-cdp sshd[11543]: Received signal 15; terminating.
Oct  2 04:35:20 nativespace-cdp sshd[12443]: Server listening on 0.0.0.0 port 8078.
Oct  2 04:35:20 nativespace-cdp sshd[12443]: Server listening on :: port 8078.
Oct  2 04:36:33 nativespace-cdp sshd[13605]: Connection closed by 159.100.136.21 port 33524 [preauth]
Oct  2 04:41:33 nativespace-cdp sshd[15777]: Connection closed by 159.100.136.21 port 43490 [preauth]
Oct  2 04:46:33 nativespace-cdp sshd[16878]: Connection closed by 159.100.136.21 port 53690 [preauth]
Oct  2 04:51:33 nativespace-cdp sshd[18123]: Connection closed by 159.100.136.21 port 35468 [preauth]
Oct  2 04:56:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 04:56:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:14 nativespace-cdp sudo[19231]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 04:56:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:14 nativespace-cdp sudo[19246]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 04:56:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:19 nativespace-cdp sudo[19258]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jennimil user-2=tomandle user-3=careers user-4=nbhavers user-5=david user-6=chrisdal user-7=mcdermos user-8=onlycont user-9=attlebor user-10=lucy user-11=romaldki user-12=hodgsonmail user-13=ranxterc user-14=outdoorc user-15=branko user-16=boldover user-17=nove user-18=bakery user-19=sosevalu user-20=crrtipdl user-21=sketchy user-22=cath user-23=havantho user-24=nvihkvu user-25=oubpgvbx user-26=tstardom user-27=what user-28=design user-29=ladburyp user-30=stagingerris user-31=dancinggardener user-32=kategilpin user-33=asandcoc user-34=sibtoncc user-35=steve user-36=bwppodcast user-37=zebrapho user-38=nsceres user-39=burydropin user-40=fawcettd user-41=dhyana user-42=beauty user-43=eatspam user-44=darkstar user-45=lkpier user-46=ctedorgu user-47=philmcph user-48=firstre5 user-49=steakbridieme
Oct  2 04:56:19 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=donnychicago user-51=nscdp user-52=health2045 user-53=fortunaz user-54=foods user-55=leftie user-56=hidden user-57=nomistakes user-58=barbersh user-59=tigerlet user-60=smrszyqg user-61=isleofwi user-62=paulmca1 user-63=howardon user-64=pugwash user-65=cwsocial user-66=cathski user-67=cambria1 user-68=reliable user-69=ninejimm user-70=eugincou user-71=courseme user-72=hirefootballgame user-73=coursemc user-74=opaiscyx user-75=seftvta user-76=jonhartl user-77=ultbcrra user-78=firstres user-79=firstred user-80=southlon user-81=highlegh user-82=firstrel user-83=clarkass user-84=costestimatorco user-85=hubmaster user-86=carsinyo user-87=fetch user-88=milloyco user-89=gilpin user-90=elecleis user-91=connectedshoppin user-92=thqkgnbz user-93=accooper user-94=ianrayne user-95=firstre2 user-96=vivienn1 user-97=battlere user-98=oneoarco user-99=brighto1 user-100=nstriton user-101=belle user-102=ggaaorgu
Oct  2 04:56:19 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=newstoda user-104=bemadonn user-105=bedfords user-106=skyfirec user-107=alexadmin user-108=nativene user-109=innovat1 user-110=askhform user-111=stuartge user-112=connect9 user-113=athenare user-114=vantagep user-115=maflemin user-116=lbscrmod user-117=markward user-118=booff user-119=foundation user-120=ulsukarm user-121=spectrum user-122=theblack user-123=hodgesonweb user-124=jarvisin user-125=stephani user-126=leereyn1 user-127=still user-128=agproduc user-129=strathar user-130=sarafoundation user-131=atestord user-132=brmrjxl user-133=lakesan1 user-134=musorguk user-135=megacards user-136=wilsonsw user-137=dickemery123 user-138=ptkxhsbt user-139=martsblo user-140=magichat user-141=lbhyisi user-142=hhdugcor feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 04:56:19 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 04:56:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:20 nativespace-cdp sudo[19269]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Oct  2 04:56:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:21 nativespace-cdp sudo[19284]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=onlycont --output=json
Oct  2 04:56:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:22 nativespace-cdp sudo[19289]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:33 nativespace-cdp sshd[19331]: Connection closed by 159.100.136.21 port 45714 [preauth]
Oct  2 04:56:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  2 04:56:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  2 04:56:44 nativespace-cdp sudo[19391]: pam_unix(sudo:session): session closed for user onlycont
Oct  2 04:56:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user onlycont --user-current --json
Oct  2 04:56:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:45 nativespace-cdp sudo[19398]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont LangPHP php_get_vhost_versions --output=json
Oct  2 04:56:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:47 nativespace-cdp sudo[19403]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php82 --output=json
Oct  2 04:56:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:48 nativespace-cdp sudo[19414]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  2 04:56:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:48 nativespace-cdp sudo[19434]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:49 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DomainInfo single_domain_data domain=apexred.com return_https_redirect_status=1 --output=json
Oct  2 04:56:49 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:50 nativespace-cdp sudo[19447]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_vhost_ssl_components --output=json
Oct  2 04:56:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:55 nativespace-cdp sudo[19455]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 fetch_ssl_vhosts --output=json
Oct  2 04:56:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:55 nativespace-cdp sudo[19466]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont Mime list_redirects --output=json
Oct  2 04:56:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:55 nativespace-cdp sudo[19470]: pam_unix(sudo:session): session closed for user root
Oct  2 04:56:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=onlycont DirectoryPrivacy is_directory_protected dir=/home/onlycont/public_html/wp --output=json
Oct  2 04:56:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:56:59 nativespace-cdp sudo[19535]: pam_unix(sudo:session): session closed for user root
Oct  2 04:57:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  2 04:57:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  2 04:57:03 nativespace-cdp sudo[19613]: pam_unix(sudo:session): session closed for user onlycont
Oct  2 04:57:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Oct  2 04:57:03 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Oct  2 04:57:03 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Oct  2 04:57:03 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 04:57:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  2 04:57:03 nativespace-cdp sudo[19619]: pam_unix(sudo:session): session closed for user onlycont
Oct  2 04:57:03 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Oct  2 04:57:03 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Oct  2 04:57:03 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Oct  2 04:57:03 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 04:57:03 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  2 04:57:05 nativespace-cdp sudo[19627]: pam_unix(sudo:session): session closed for user onlycont
Oct  2 04:57:05 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Oct  2 04:57:05 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Oct  2 04:57:05 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Oct  2 04:57:05 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 04:57:05 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  2 04:57:06 nativespace-cdp sudo[19637]: pam_unix(sudo:session): session closed for user onlycont
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp -maxdepth 1 '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  2 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  2 04:57:16 nativespace-cdp sudo[19824]: pam_unix(sudo:session): session closed for user onlycont
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-admin '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  2 04:57:16 nativespace-cdp sudo[19830]: pam_unix(sudo:session): session closed for user onlycont
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-content '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  2 04:57:16 nativespace-cdp sudo[19836]: pam_unix(sudo:session): session closed for user onlycont
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/onlycont/public_html/wp && find /home/onlycont/public_html/wp/wp-includes '(' '(' '(' '(' -type f ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user onlycont ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm
Oct  2 04:57:16 nativespace-cdp sudo: wp-toolkit : (command continued) 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 04:57:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  2 04:57:16 nativespace-cdp sudo[19842]: pam_unix(sudo:session): session closed for user onlycont
Oct  2 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Oct  2 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:57:18 nativespace-cdp sudo[19878]: pam_unix(sudo:session): session closed for user root
Oct  2 04:57:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=oneoarco --output=json
Oct  2 04:57:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:57:18 nativespace-cdp sudo[19884]: pam_unix(sudo:session): session closed for user root
Oct  2 04:58:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  2 04:58:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 04:58:26 nativespace-cdp sudo[20089]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 04:58:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Oct  2 04:58:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:58:27 nativespace-cdp sudo[20095]: pam_unix(sudo:session): session closed for user root
Oct  2 04:58:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco LangPHP php_get_vhost_versions --output=json
Oct  2 04:58:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:58:27 nativespace-cdp sudo[20100]: pam_unix(sudo:session): session closed for user root
Oct  2 04:58:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=ea-php80 --output=json
Oct  2 04:58:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:58:28 nativespace-cdp sudo[20104]: pam_unix(sudo:session): session closed for user root
Oct  2 04:58:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  2 04:58:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:58:28 nativespace-cdp sudo[20118]: pam_unix(sudo:session): session closed for user root
Oct  2 04:58:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=oneoar.co.uk return_https_redirect_status=1 --output=json
Oct  2 04:58:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:58:31 nativespace-cdp sudo[20134]: pam_unix(sudo:session): session closed for user root
Oct  2 04:58:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco Mime list_redirects --output=json
Oct  2 04:58:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:58:32 nativespace-cdp sudo[20141]: pam_unix(sudo:session): session closed for user root
Oct  2 04:58:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html --output=json
Oct  2 04:58:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:58:39 nativespace-cdp sudo[20211]: pam_unix(sudo:session): session closed for user root
Oct  2 04:58:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  2 04:58:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 04:58:43 nativespace-cdp sudo[20266]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 04:58:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Oct  2 04:58:43 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Oct  2 04:58:43 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Oct  2 04:58:43 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 04:58:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 04:58:43 nativespace-cdp sudo[20272]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 04:58:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Oct  2 04:58:43 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Oct  2 04:58:43 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Oct  2 04:58:43 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 04:58:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 04:59:02 nativespace-cdp sudo[20280]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 04:59:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  2 04:59:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 04:59:10 nativespace-cdp sudo[20434]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 04:59:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Oct  2 04:59:10 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Oct  2 04:59:10 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Oct  2 04:59:10 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 04:59:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 04:59:10 nativespace-cdp sudo[20440]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 04:59:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html && find /home/oneoarco/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')'
Oct  2 04:59:10 nativespace-cdp sudo: wp-toolkit : (command continued) -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o
Oct  2 04:59:10 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o
Oct  2 04:59:10 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 04:59:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 04:59:11 nativespace-cdp sudo[20446]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 04:59:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Oct  2 04:59:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:59:13 nativespace-cdp sudo[20482]: pam_unix(sudo:session): session closed for user root
Oct  2 04:59:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=lkpier --output=json
Oct  2 04:59:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:59:13 nativespace-cdp sudo[20488]: pam_unix(sudo:session): session closed for user root
Oct  2 04:59:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  2 04:59:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  2 04:59:50 nativespace-cdp sudo[20725]: pam_unix(sudo:session): session closed for user lkpier
Oct  2 04:59:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user lkpier --user-current --json
Oct  2 04:59:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:59:51 nativespace-cdp sudo[20731]: pam_unix(sudo:session): session closed for user root
Oct  2 04:59:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier LangPHP php_get_vhost_versions --output=json
Oct  2 04:59:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:59:51 nativespace-cdp sudo[20736]: pam_unix(sudo:session): session closed for user root
Oct  2 04:59:51 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  2 04:59:51 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:59:51 nativespace-cdp sudo[20742]: pam_unix(sudo:session): session closed for user root
Oct  2 04:59:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DomainInfo single_domain_data domain=limekilnspier.org.uk return_https_redirect_status=1 --output=json
Oct  2 04:59:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:59:52 nativespace-cdp sudo[20764]: pam_unix(sudo:session): session closed for user root
Oct  2 04:59:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier Mime list_redirects --output=json
Oct  2 04:59:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:59:52 nativespace-cdp sudo[20772]: pam_unix(sudo:session): session closed for user root
Oct  2 04:59:59 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=lkpier DirectoryPrivacy is_directory_protected dir=/home/lkpier/public_html --output=json
Oct  2 04:59:59 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 04:59:59 nativespace-cdp sudo[20846]: pam_unix(sudo:session): session closed for user root
Oct  2 05:00:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  2 05:00:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  2 05:00:07 nativespace-cdp sudo[21127]: pam_unix(sudo:session): session closed for user lkpier
Oct  2 05:00:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  2 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  2 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  2 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 05:00:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  2 05:00:07 nativespace-cdp sudo[21136]: pam_unix(sudo:session): session closed for user lkpier
Oct  2 05:00:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  2 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  2 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  2 05:00:07 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 05:00:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  2 05:00:21 nativespace-cdp sudo[21144]: pam_unix(sudo:session): session closed for user lkpier
Oct  2 05:00:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  2 05:00:21 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  2 05:00:21 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  2 05:00:21 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 05:00:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  2 05:00:22 nativespace-cdp sudo[21209]: pam_unix(sudo:session): session closed for user lkpier
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html -maxdepth 1 '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  2 05:00:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  2 05:00:35 nativespace-cdp sudo[21347]: pam_unix(sudo:session): session closed for user lkpier
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-admin '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 05:00:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  2 05:00:35 nativespace-cdp sudo[21353]: pam_unix(sudo:session): session closed for user lkpier
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-content '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 05:00:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  2 05:00:35 nativespace-cdp sudo[21359]: pam_unix(sudo:session): session closed for user lkpier
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/lkpier/public_html && find /home/lkpier/public_html/wp-includes '(' '(' '(' '(' -type f ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user lkpier ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o '(' -perm 045 ')' -o '(' -perm 050 ')' -o '('
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o '(' -perm 315 ')' -o '(' -perm 340 ')' -o '('
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o '(' -perm 605 ')' -o '(' -perm 610 ')' -o '('
Oct  2 05:00:35 nativespace-cdp sudo: wp-toolkit : (command continued) -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 05:00:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  2 05:00:35 nativespace-cdp sudo[21366]: pam_unix(sudo:session): session closed for user lkpier
Oct  2 05:00:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Oct  2 05:00:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:00:38 nativespace-cdp sudo[21403]: pam_unix(sudo:session): session closed for user root
Oct  2 05:00:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=bwppodcast --output=json
Oct  2 05:00:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:00:39 nativespace-cdp sudo[21409]: pam_unix(sudo:session): session closed for user root
Oct  2 05:00:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast DomainInfo single_domain_data domain=bakewithpassion.com return_https_redirect_status=1 --output=json
Oct  2 05:00:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:00:41 nativespace-cdp sudo[21424]: pam_unix(sudo:session): session closed for user root
Oct  2 05:00:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast Mime list_redirects --output=json
Oct  2 05:00:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:00:41 nativespace-cdp sudo[21430]: pam_unix(sudo:session): session closed for user root
Oct  2 05:00:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/bwppodcast/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  2 05:00:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Oct  2 05:00:42 nativespace-cdp sudo[21443]: pam_unix(sudo:session): session closed for user bwppodcast
Oct  2 05:00:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user bwppodcast --user-current --json
Oct  2 05:00:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:00:43 nativespace-cdp sudo[21449]: pam_unix(sudo:session): session closed for user root
Oct  2 05:00:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=bwppodcast LangPHP php_get_vhost_versions --output=json
Oct  2 05:00:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:00:43 nativespace-cdp sudo[21455]: pam_unix(sudo:session): session closed for user root
Oct  2 05:00:43 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  2 05:00:43 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:00:43 nativespace-cdp sudo[21460]: pam_unix(sudo:session): session closed for user root
Oct  2 05:01:08 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  2 05:01:08 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 05:01:09 nativespace-cdp sudo[21604]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 05:01:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user oneoarco --user-current --json
Oct  2 05:01:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:01:09 nativespace-cdp sudo[21610]: pam_unix(sudo:session): session closed for user root
Oct  2 05:01:09 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  2 05:01:09 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:01:09 nativespace-cdp sudo[21615]: pam_unix(sudo:session): session closed for user root
Oct  2 05:01:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DomainInfo single_domain_data domain=pinstripe.services return_https_redirect_status=1 --output=json
Oct  2 05:01:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:01:11 nativespace-cdp sudo[21631]: pam_unix(sudo:session): session closed for user root
Oct  2 05:01:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=oneoarco DirectoryPrivacy is_directory_protected dir=/home/oneoarco/public_html/pinstripe.services --output=json
Oct  2 05:01:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:01:16 nativespace-cdp sudo[21700]: pam_unix(sudo:session): session closed for user root
Oct  2 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  2 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 05:01:19 nativespace-cdp sudo[21759]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 05:01:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Oct  2 05:01:19 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Oct  2 05:01:19 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Oct  2 05:01:19 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 05:01:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 05:01:21 nativespace-cdp sudo[21766]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 05:01:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Oct  2 05:01:21 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Oct  2 05:01:21 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Oct  2 05:01:21 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 05:01:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 05:01:33 nativespace-cdp sshd[21806]: Connection closed by 159.100.136.21 port 55706 [preauth]
Oct  2 05:01:39 nativespace-cdp sudo[21775]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services -maxdepth 1 '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' -print -quit
Oct  2 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 05:01:45 nativespace-cdp sudo[21926]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-admin '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Oct  2 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Oct  2 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Oct  2 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 05:01:45 nativespace-cdp sudo[21932]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 05:01:45 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/oneoarco/public_html/pinstripe.services && find /home/oneoarco/public_html/pinstripe.services/wp-content '(' '(' '(' '(' -type f ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 004 ')' -o '(' -perm 040 ')' -o '(' -perm 044 ')' -o '(' -perm 200 ')' -o '(' -perm 204 ')' -o '(' -perm 240 ')' -o '(' -perm 244 ')' -o '(' -perm 400 ')' -o '(' -perm 404 ')' -o '(' -perm 440 ')' -o '(' -perm 444 ')' -o '(' -perm 600 ')' -o '(' -perm 604 ')' -o '(' -perm 640 ')' -o '(' -perm 644 ')' ')' ')' ')' ')' -o '(' '(' '(' -type d ')' '(' -user oneoarco ')' '(' '!' '(' '(' -perm 000 ')' -o '(' -perm 001 ')' -o '(' -perm 004 ')' -o '(' -perm 005 ')' -o '(' -perm 010 ')' -o '(' -perm 011 ')' -o '(' -perm 014 ')' -o '(' -perm 015 ')' -o '(' -perm 040 ')' -o '(' -perm 041 ')' -o '(' -perm 044 ')' -o
Oct  2 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 045 ')' -o '(' -perm 050 ')' -o '(' -perm 051 ')' -o '(' -perm 054 ')' -o '(' -perm 055 ')' -o '(' -perm 100 ')' -o '(' -perm 101 ')' -o '(' -perm 104 ')' -o '(' -perm 105 ')' -o '(' -perm 110 ')' -o '(' -perm 111 ')' -o '(' -perm 114 ')' -o '(' -perm 115 ')' -o '(' -perm 140 ')' -o '(' -perm 141 ')' -o '(' -perm 144 ')' -o '(' -perm 145 ')' -o '(' -perm 150 ')' -o '(' -perm 151 ')' -o '(' -perm 154 ')' -o '(' -perm 155 ')' -o '(' -perm 200 ')' -o '(' -perm 201 ')' -o '(' -perm 204 ')' -o '(' -perm 205 ')' -o '(' -perm 210 ')' -o '(' -perm 211 ')' -o '(' -perm 214 ')' -o '(' -perm 215 ')' -o '(' -perm 240 ')' -o '(' -perm 241 ')' -o '(' -perm 244 ')' -o '(' -perm 245 ')' -o '(' -perm 250 ')' -o '(' -perm 251 ')' -o '(' -perm 254 ')' -o '(' -perm 255 ')' -o '(' -perm 300 ')' -o '(' -perm 301 ')' -o '(' -perm 304 ')' -o '(' -perm 305 ')' -o '(' -perm 310 ')' -o '(' -perm 311 ')' -o '(' -perm 314 ')' -o
Oct  2 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 315 ')' -o '(' -perm 340 ')' -o '(' -perm 341 ')' -o '(' -perm 344 ')' -o '(' -perm 345 ')' -o '(' -perm 350 ')' -o '(' -perm 351 ')' -o '(' -perm 354 ')' -o '(' -perm 355 ')' -o '(' -perm 400 ')' -o '(' -perm 401 ')' -o '(' -perm 404 ')' -o '(' -perm 405 ')' -o '(' -perm 410 ')' -o '(' -perm 411 ')' -o '(' -perm 414 ')' -o '(' -perm 415 ')' -o '(' -perm 440 ')' -o '(' -perm 441 ')' -o '(' -perm 444 ')' -o '(' -perm 445 ')' -o '(' -perm 450 ')' -o '(' -perm 451 ')' -o '(' -perm 454 ')' -o '(' -perm 455 ')' -o '(' -perm 500 ')' -o '(' -perm 501 ')' -o '(' -perm 504 ')' -o '(' -perm 505 ')' -o '(' -perm 510 ')' -o '(' -perm 511 ')' -o '(' -perm 514 ')' -o '(' -perm 515 ')' -o '(' -perm 540 ')' -o '(' -perm 541 ')' -o '(' -perm 544 ')' -o '(' -perm 545 ')' -o '(' -perm 550 ')' -o '(' -perm 551 ')' -o '(' -perm 554 ')' -o '(' -perm 555 ')' -o '(' -perm 600 ')' -o '(' -perm 601 ')' -o '(' -perm 604 ')' -o
Oct  2 05:01:45 nativespace-cdp sudo: wp-toolkit : (command continued) '(' -perm 605 ')' -o '(' -perm 610 ')' -o '(' -perm 611 ')' -o '(' -perm 614 ')' -o '(' -perm 615 ')' -o '(' -perm 640 ')' -o '(' -perm 641 ')' -o '(' -perm 644 ')' -o '(' -perm 645 ')' -o '(' -perm 650 ')' -o '(' -perm 651 ')' -o '(' -perm 654 ')' -o '(' -perm 655 ')' -o '(' -perm 700 ')' -o '(' -perm 701 ')' -o '(' -perm 704 ')' -o '(' -perm 705 ')' -o '(' -perm 710 ')' -o '(' -perm 711 ')' -o '(' -perm 714 ')' -o '(' -perm 715 ')' -o '(' -perm 740 ')' -o '(' -perm 741 ')' -o '(' -perm 744 ')' -o '(' -perm 745 ')' -o '(' -perm 750 ')' -o '(' -perm 751 ')' -o '(' -perm 754 ')' -o '(' -perm 755 ')' ')' ')' ')' ')' ')' -print -quit
Oct  2 05:01:45 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 05:01:45 nativespace-cdp sudo[21939]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 05:01:47 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Oct  2 05:01:47 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:01:48 nativespace-cdp sudo[21980]: pam_unix(sudo:session): session closed for user root
Oct  2 05:01:48 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_links user=fortunaz --output=json
Oct  2 05:01:48 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:01:49 nativespace-cdp sudo[21987]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied /bin/sh -c cd /home/fortunaz/public_html && /usr/local/bin/php -d display_errors=0 -r 'echo PHP_MAJOR_VERSION.'"'"'.'"'"'.PHP_MINOR_VERSION.'"'"'.'"'"'.PHP_RELEASE_VERSION;'
Oct  2 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Oct  2 05:02:06 nativespace-cdp sudo[22118]: pam_unix(sudo:session): session closed for user fortunaz
Oct  2 05:02:06 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c selectorctl --user fortunaz --user-current --json
Oct  2 05:02:06 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:07 nativespace-cdp sudo[22124]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz LangPHP php_get_vhost_versions --output=json
Oct  2 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:07 nativespace-cdp sudo[22129]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:07 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /var/cpanel/cpnat
Oct  2 05:02:07 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:07 nativespace-cdp sudo[22133]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DomainInfo single_domain_data domain=fortunazingara.com return_https_redirect_status=1 --output=json
Oct  2 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:10 nativespace-cdp sudo[22150]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:10 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz Mime list_redirects --output=json
Oct  2 05:02:10 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:10 nativespace-cdp sudo[22155]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=fortunaz DirectoryPrivacy is_directory_protected dir=/home/fortunaz/public_html --output=json
Oct  2 05:02:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:15 nativespace-cdp sudo[22219]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c uapi --user=jennimil WpToolkitNotification send_admin_auto_updates_notification 'available_updates_text=<br/><br/>Updates are available for the following items:<br/><br/>' 'available_updates_list=1. Plugin "Fluent Forms" on ONE | OAR (https://oneoar.co.uk). Installed version: 4.3.22. Available version: 5.2.4.<br/><br/>2. Plugin "Jetpack" on Limekilns Heritage Trust (https://limekilnspier.org.uk). Installed version: 13.1.1. Available version: 13.9.<br/><br/>3. Plugin "Jetpack" on Pinstripe Inventories (https://pinstripe.services). Installed version: 12.8.1. Available version: 13.9.<br/><br/>' installed_updates_text= installed_updates_list= 'failure_updates_text=Updates were not installed for the following items:<br/><br/>' 'failure_updates_list=1. Website "/home/bwppodcast/public_html" (http://bakewithpassion.com): Failed to reset cache
Oct  2 05:02:26 nativespace-cdp sudo: wp-toolkit : (command continued) for the instance #12: Error: This does not seem to be a WordPress installation.#012The used path is: /home/bwppodcast/public_html/#012Pass --path=`path/to/wordpress` or run `wp core download`.#012[error]FailedToExecuteWpCliCommand: exit status 1[/error]#012<br/><br/>' --output=json
Oct  2 05:02:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:26 nativespace-cdp sudo[22400]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c httpd -v
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22521]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22524]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/onlycont/apexred.com/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22528]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22531]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/onlycont/apexred.com/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22534]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22537]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/onlycont/apexred.com/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22540]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22543]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22546]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22549]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22552]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22555]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22558]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22561]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22564]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22567]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22571]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22575]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22578]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22581]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:33 nativespace-cdp sudo[22584]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22587]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22590]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22593]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22596]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22600]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22603]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22606]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22609]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22613]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22616]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22619]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22623]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22626]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22629]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22632]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22635]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22638]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22641]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22644]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22647]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22650]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22653]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22657]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22660]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22663]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22666]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:34 nativespace-cdp sudo[22669]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22672]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22675]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22678]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22681]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22684]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22687]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22690]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22693]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22697]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22700]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22703]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22706]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22709]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22712]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22715]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22718]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22721]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22724]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22727]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22730]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22733]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22736]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22740]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22743]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22746]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22749]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:35 nativespace-cdp sudo[22752]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22755]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22758]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22761]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22764]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22767]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22770]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22773]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22776]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22780]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22784]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22788]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22791]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22794]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22797]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22800]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22803]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22806]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22809]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22812]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22815]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22818]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22821]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22824]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22827]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22830]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22833]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:36 nativespace-cdp sudo[22836]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22839]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22842]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22845]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22848]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22851]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22854]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/lkpier/limekilnspier.org.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22857]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22860]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22864]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22867]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22870]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22873]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesdurham.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22876]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22879]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22882]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22885]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22888]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22891]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriesnorthumberland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22895]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22898]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22901]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22904]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22907]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22910]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/inventoriessunderland.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22913]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22916]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22919]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22922]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:37 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:37 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:37 nativespace-cdp sudo[22925]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22928]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/iphone-news.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22931]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22934]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22937]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22940]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22943]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22946]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22949]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22952]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22956]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22959]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22962]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22965]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.co.uk/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22968]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22971]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22974]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22977]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22980]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22983]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.com/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22986]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22989]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22992]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22995]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[22998]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[23002]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-inventories.info/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[23006]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[23009]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[23012]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[23015]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:38 nativespace-cdp sudo[23019]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23022]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.com/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23025]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23028]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23031]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23034]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23037]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23040]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe-services.info/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23043]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23046]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23050]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23053]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23056]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23059]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23062]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23065]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23068]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23071]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23074]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23077]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripe.services.oneoar.co.uk/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23080]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23083]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23086]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23089]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23092]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23095]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.com/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23098]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:39 nativespace-cdp sudo[23101]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23104]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23107]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23110]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23113]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripeinventories.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23116]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23119]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23122]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23125]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23128]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23131]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23135]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23138]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23141]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23144]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23147]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23150]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.com/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23153]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23156]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23159]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23162]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23165]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23168]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/pinstripepropertyservices.info/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23171]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23174]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/ssl/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23177]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23180]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/apache2/conf.d/userdata/std/2_4/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23183]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23186]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:40 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/oneoarco/tdsnews.co.uk/wp-toolkit.conf
Oct  2 05:02:40 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:40 nativespace-cdp sudo[23189]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Oct  2 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:41 nativespace-cdp sudo[23192]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Oct  2 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:41 nativespace-cdp sudo[23195]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Oct  2 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:41 nativespace-cdp sudo[23198]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.co.uk/wp-toolkit.conf
Oct  2 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:41 nativespace-cdp sudo[23201]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/ssl/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Oct  2 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:41 nativespace-cdp sudo[23204]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/apache2/conf.d/userdata/std/2_4/fortunaz/fortunazingara.com/wp-toolkit.conf
Oct  2 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:41 nativespace-cdp sudo[23207]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Oct  2 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:41 nativespace-cdp sudo[23210]: pam_unix(sudo:session): session closed for user root
Oct  2 05:02:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/nginx/conf.d/users/fortunaz/fortunazingara.com/wp-toolkit.conf
Oct  2 05:02:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:02:41 nativespace-cdp sudo[23214]: pam_unix(sudo:session): session closed for user root
Oct  2 05:06:33 nativespace-cdp sshd[24126]: Connection closed by 159.100.136.21 port 37784 [preauth]
Oct  2 05:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 05:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:14 nativespace-cdp sudo[24584]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 05:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:14 nativespace-cdp sudo[24587]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 05:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:15 nativespace-cdp sudo[24590]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 05:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:15 nativespace-cdp sudo[24598]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 05:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:17 nativespace-cdp sudo[24601]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 05:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:17 nativespace-cdp sudo[24610]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 05:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:17 nativespace-cdp sudo[24613]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 05:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:17 nativespace-cdp sudo[24616]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 05:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:17 nativespace-cdp sudo[24619]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 05:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:17 nativespace-cdp sudo[24622]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 05:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:17 nativespace-cdp sudo[24626]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 05:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:20 nativespace-cdp sudo[24640]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 05:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:20 nativespace-cdp sudo[24644]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=onlycont user-2=lucy user-3=attlebor user-4=romaldki user-5=hodgsonmail user-6=ranxterc user-7=outdoorc user-8=branko user-9=jennimil user-10=tomandle user-11=david user-12=nbhavers user-13=careers user-14=chrisdal user-15=mcdermos user-16=havantho user-17=cath user-18=sketchy user-19=nvihkvu user-20=tstardom user-21=oubpgvbx user-22=what user-23=design user-24=dancinggardener user-25=stagingerris user-26=ladburyp user-27=kategilpin user-28=boldover user-29=nove user-30=bakery user-31=crrtipdl user-32=sosevalu user-33=nsceres user-34=fawcettd user-35=burydropin user-36=dhyana user-37=beauty user-38=darkstar user-39=eatspam user-40=sibtoncc user-41=asandcoc user-42=steve user-43=bwppodcast user-44=zebrapho user-45=cwsocial user-46=howardon user-47=paulmca1 user-48=pugwash user-49=cambria1
Oct  2 05:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=cathski user-51=reliable user-52=ninejimm user-53=eugincou user-54=courseme user-55=hirefootballgame user-56=lkpier user-57=firstre5 user-58=steakbridieme user-59=donnychicago user-60=ctedorgu user-61=philmcph user-62=nscdp user-63=leftie user-64=foods user-65=health2045 user-66=fortunaz user-67=nomistakes user-68=hidden user-69=barbersh user-70=tigerlet user-71=smrszyqg user-72=isleofwi user-73=hubmaster user-74=fetch user-75=carsinyo user-76=milloyco user-77=gilpin user-78=elecleis user-79=connectedshoppin user-80=thqkgnbz user-81=accooper user-82=ianrayne user-83=coursemc user-84=opaiscyx user-85=ultbcrra user-86=seftvta user-87=jonhartl user-88=firstres user-89=firstred user-90=highlegh user-91=southlon user-92=firstrel user-93=clarkass user-94=costestimatorco user-95=skyfirec user-96=alexadmin user-97=nativene user-98=innovat1 user-99=stuartge user-100=askhform user-101=vivienn1 user-102=firstre2
Oct  2 05:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=oneoarco user-104=battlere user-105=nstriton user-106=brighto1 user-107=newstoda user-108=ggaaorgu user-109=belle user-110=bemadonn user-111=bedfords user-112=spectrum user-113=hodgesonweb user-114=theblack user-115=jarvisin user-116=stephani user-117=leereyn1 user-118=agproduc user-119=still user-120=vantagep user-121=athenare user-122=connect9 user-123=lbscrmod user-124=maflemin user-125=markward user-126=booff user-127=foundation user-128=ulsukarm user-129=dickemery123 user-130=ptkxhsbt user-131=martsblo user-132=magichat user-133=hhdugcor user-134=lbhyisi user-135=strathar user-136=atestord user-137=sarafoundation user-138=brmrjxl user-139=lakesan1 user-140=megacards user-141=musorguk user-142=wilsonsw feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 05:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 05:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:21 nativespace-cdp sudo[24648]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 05:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:21 nativespace-cdp sudo[24654]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CKFGZOOfIDSxlURL.~
Oct  2 05:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:21 nativespace-cdp sudo[24657]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CKFGZOOfIDSxlURL.~'
Oct  2 05:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:21 nativespace-cdp sudo[24660]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-CKFGZOOfIDSxlURL.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 05:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:21 nativespace-cdp sudo[24665]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 05:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:21 nativespace-cdp sudo[24668]: pam_unix(sudo:session): session closed for user root
Oct  2 05:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 05:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 05:09:23 nativespace-cdp sudo[24687]: pam_unix(sudo:session): session closed for user root
Oct  2 05:11:33 nativespace-cdp sshd[25266]: Connection closed by 159.100.136.21 port 47772 [preauth]
Oct  2 05:16:33 nativespace-cdp sshd[26221]: Connection closed by 159.100.136.21 port 57984 [preauth]
Oct  2 05:21:33 nativespace-cdp sshd[27531]: Connection closed by 159.100.136.21 port 39696 [preauth]
Oct  2 05:26:33 nativespace-cdp sshd[28643]: Connection closed by 159.100.136.21 port 49980 [preauth]
Oct  2 05:31:33 nativespace-cdp sshd[29874]: Connection closed by 159.100.136.21 port 59990 [preauth]
Oct  2 05:35:08 nativespace-cdp su: pam_unix(su:session): session opened for user sketchy by (uid=0)
Oct  2 05:35:09 nativespace-cdp su[30662]: pam_unix(su:session): session closed for user sketchy
Oct  2 05:36:33 nativespace-cdp sshd[31083]: Connection closed by 159.100.136.21 port 41968 [preauth]
Oct  2 05:41:33 nativespace-cdp sshd[32166]: Connection closed by 159.100.136.21 port 51922 [preauth]
Oct  2 05:46:33 nativespace-cdp sshd[710]: Connection closed by 159.100.136.21 port 33880 [preauth]
Oct  2 05:51:33 nativespace-cdp sshd[1960]: Connection closed by 159.100.136.21 port 43880 [preauth]
Oct  2 05:56:33 nativespace-cdp sshd[3009]: Connection closed by 159.100.136.21 port 54158 [preauth]
Oct  2 06:01:33 nativespace-cdp sshd[4116]: Connection closed by 159.100.136.21 port 35884 [preauth]
Oct  2 06:06:33 nativespace-cdp sshd[5302]: Connection closed by 159.100.136.21 port 46198 [preauth]
Oct  2 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:12 nativespace-cdp sudo[5714]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:12 nativespace-cdp sudo[5717]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:12 nativespace-cdp sudo[5720]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:12 nativespace-cdp sudo[5728]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 06:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:14 nativespace-cdp sudo[5731]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 06:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:14 nativespace-cdp sudo[5745]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 06:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:14 nativespace-cdp sudo[5748]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 06:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:14 nativespace-cdp sudo[5751]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 06:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:14 nativespace-cdp sudo[5754]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 06:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:14 nativespace-cdp sudo[5757]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 06:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:15 nativespace-cdp sudo[5761]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 06:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:20 nativespace-cdp sudo[5781]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 06:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:20 nativespace-cdp sudo[5786]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=burydropin user-2=fawcettd user-3=nsceres user-4=eatspam user-5=darkstar user-6=beauty user-7=dhyana user-8=sibtoncc user-9=asandcoc user-10=zebrapho user-11=bwppodcast user-12=steve user-13=ninejimm user-14=reliable user-15=cambria1 user-16=cathski user-17=pugwash user-18=paulmca1 user-19=howardon user-20=cwsocial user-21=hirefootballgame user-22=courseme user-23=eugincou user-24=health2045 user-25=fortunaz user-26=foods user-27=leftie user-28=nscdp user-29=philmcph user-30=ctedorgu user-31=donnychicago user-32=firstre5 user-33=steakbridieme user-34=lkpier user-35=smrszyqg user-36=isleofwi user-37=barbersh user-38=tigerlet user-39=hidden user-40=nomistakes user-41=attlebor user-42=lucy user-43=onlycont user-44=branko user-45=ranxterc user-46=hodgsonmail user-47=outdoorc user-48=romaldki
Oct  2 06:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=tomandle user-50=jennimil user-51=mcdermos user-52=chrisdal user-53=careers user-54=nbhavers user-55=david user-56=what user-57=oubpgvbx user-58=tstardom user-59=nvihkvu user-60=cath user-61=sketchy user-62=havantho user-63=kategilpin user-64=ladburyp user-65=dancinggardener user-66=stagingerris user-67=design user-68=nove user-69=boldover user-70=sosevalu user-71=crrtipdl user-72=bakery user-73=jarvisin user-74=theblack user-75=hodgesonweb user-76=spectrum user-77=still user-78=agproduc user-79=leereyn1 user-80=stephani user-81=foundation user-82=booff user-83=markward user-84=maflemin user-85=lbscrmod user-86=connect9 user-87=athenare user-88=vantagep user-89=ulsukarm user-90=martsblo user-91=ptkxhsbt user-92=dickemery123 user-93=lbhyisi user-94=hhdugcor user-95=magichat user-96=lakesan1 user-97=brmrjxl user-98=sarafoundation user-99=atestord user-100=strathar user-101=wilsonsw user-102=musorguk
Oct  2 06:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=megacards user-104=elecleis user-105=gilpin user-106=milloyco user-107=carsinyo user-108=fetch user-109=hubmaster user-110=ianrayne user-111=accooper user-112=thqkgnbz user-113=connectedshoppin user-114=firstres user-115=jonhartl user-116=seftvta user-117=ultbcrra user-118=coursemc user-119=opaiscyx user-120=costestimatorco user-121=clarkass user-122=firstrel user-123=southlon user-124=highlegh user-125=firstred user-126=skyfirec user-127=alexadmin user-128=askhform user-129=stuartge user-130=innovat1 user-131=nativene user-132=brighto1 user-133=nstriton user-134=battlere user-135=oneoarco user-136=firstre2 user-137=vivienn1 user-138=bedfords user-139=bemadonn user-140=belle user-141=ggaaorgu user-142=newstoda feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 06:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 06:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:21 nativespace-cdp sudo[5791]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:21 nativespace-cdp sudo[5798]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-My63sDbDucV2uXOn.~
Oct  2 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:21 nativespace-cdp sudo[5801]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-My63sDbDucV2uXOn.~'
Oct  2 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:21 nativespace-cdp sudo[5804]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-My63sDbDucV2uXOn.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:21 nativespace-cdp sudo[5808]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 06:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:21 nativespace-cdp sudo[5811]: pam_unix(sudo:session): session closed for user root
Oct  2 06:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 06:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:09:22 nativespace-cdp sudo[5833]: pam_unix(sudo:session): session closed for user root
Oct  2 06:11:33 nativespace-cdp sshd[6445]: Connection closed by 159.100.136.21 port 56192 [preauth]
Oct  2 06:16:33 nativespace-cdp sshd[7490]: Connection closed by 159.100.136.21 port 38146 [preauth]
Oct  2 06:21:33 nativespace-cdp sshd[8679]: Connection closed by 159.100.136.21 port 48142 [preauth]
Oct  2 06:25:23 nativespace-cdp sshd[9512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.114.40.84  user=root
Oct  2 06:25:23 nativespace-cdp sshd[9512]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:25:25 nativespace-cdp sshd[9515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.168.72.118  user=root
Oct  2 06:25:25 nativespace-cdp sshd[9515]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:25:26 nativespace-cdp sshd[9512]: Failed password for root from 50.114.40.84 port 50440 ssh2
Oct  2 06:25:26 nativespace-cdp sshd[9512]: Received disconnect from 50.114.40.84 port 50440:11: Bye Bye [preauth]
Oct  2 06:25:26 nativespace-cdp sshd[9512]: Disconnected from 50.114.40.84 port 50440 [preauth]
Oct  2 06:25:27 nativespace-cdp sshd[9515]: Failed password for root from 202.168.72.118 port 53560 ssh2
Oct  2 06:25:28 nativespace-cdp sshd[9515]: Received disconnect from 202.168.72.118 port 53560:11: Bye Bye [preauth]
Oct  2 06:25:28 nativespace-cdp sshd[9515]: Disconnected from 202.168.72.118 port 53560 [preauth]
Oct  2 06:26:33 nativespace-cdp sshd[9782]: Connection closed by 159.100.136.21 port 58382 [preauth]
Oct  2 06:26:33 nativespace-cdp sshd[9778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.119.247  user=root
Oct  2 06:26:33 nativespace-cdp sshd[9778]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:26:35 nativespace-cdp sshd[9778]: Failed password for root from 137.184.119.247 port 37296 ssh2
Oct  2 06:26:35 nativespace-cdp sshd[9778]: Received disconnect from 137.184.119.247 port 37296:11: Bye Bye [preauth]
Oct  2 06:26:35 nativespace-cdp sshd[9778]: Disconnected from 137.184.119.247 port 37296 [preauth]
Oct  2 06:28:03 nativespace-cdp sshd[10065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.150.58  user=root
Oct  2 06:28:03 nativespace-cdp sshd[10065]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:28:04 nativespace-cdp sshd[10065]: Failed password for root from 128.199.150.58 port 34954 ssh2
Oct  2 06:28:04 nativespace-cdp sshd[10065]: Received disconnect from 128.199.150.58 port 34954:11: Bye Bye [preauth]
Oct  2 06:28:04 nativespace-cdp sshd[10065]: Disconnected from 128.199.150.58 port 34954 [preauth]
Oct  2 06:28:34 nativespace-cdp sshd[10114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.101.91.154  user=root
Oct  2 06:28:34 nativespace-cdp sshd[10114]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:28:36 nativespace-cdp sshd[10114]: Failed password for root from 210.101.91.154 port 52909 ssh2
Oct  2 06:28:36 nativespace-cdp sshd[10114]: Received disconnect from 210.101.91.154 port 52909:11: Bye Bye [preauth]
Oct  2 06:28:36 nativespace-cdp sshd[10114]: Disconnected from 210.101.91.154 port 52909 [preauth]
Oct  2 06:29:25 nativespace-cdp sshd[10258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.116.200  user=root
Oct  2 06:29:25 nativespace-cdp sshd[10258]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:29:27 nativespace-cdp sshd[10258]: Failed password for root from 103.186.116.200 port 38224 ssh2
Oct  2 06:29:27 nativespace-cdp sshd[10258]: Received disconnect from 103.186.116.200 port 38224:11: Bye Bye [preauth]
Oct  2 06:29:27 nativespace-cdp sshd[10258]: Disconnected from 103.186.116.200 port 38224 [preauth]
Oct  2 06:30:03 nativespace-cdp sshd[10523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.114.40.84  user=root
Oct  2 06:30:03 nativespace-cdp sshd[10523]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:30:05 nativespace-cdp sshd[10523]: Failed password for root from 50.114.40.84 port 40744 ssh2
Oct  2 06:30:06 nativespace-cdp sshd[10523]: Received disconnect from 50.114.40.84 port 40744:11: Bye Bye [preauth]
Oct  2 06:30:06 nativespace-cdp sshd[10523]: Disconnected from 50.114.40.84 port 40744 [preauth]
Oct  2 06:30:20 nativespace-cdp sshd[10655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.119.247  user=root
Oct  2 06:30:20 nativespace-cdp sshd[10655]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:30:23 nativespace-cdp sshd[10655]: Failed password for root from 137.184.119.247 port 42044 ssh2
Oct  2 06:30:23 nativespace-cdp sshd[10655]: Received disconnect from 137.184.119.247 port 42044:11: Bye Bye [preauth]
Oct  2 06:30:23 nativespace-cdp sshd[10655]: Disconnected from 137.184.119.247 port 42044 [preauth]
Oct  2 06:30:29 nativespace-cdp sshd[10713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.116.200  user=root
Oct  2 06:30:29 nativespace-cdp sshd[10713]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:30:30 nativespace-cdp sshd[10713]: Failed password for root from 103.186.116.200 port 53240 ssh2
Oct  2 06:30:31 nativespace-cdp sshd[10713]: Received disconnect from 103.186.116.200 port 53240:11: Bye Bye [preauth]
Oct  2 06:30:31 nativespace-cdp sshd[10713]: Disconnected from 103.186.116.200 port 53240 [preauth]
Oct  2 06:30:37 nativespace-cdp sshd[10739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.168.72.118  user=root
Oct  2 06:30:37 nativespace-cdp sshd[10739]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:30:39 nativespace-cdp sshd[10743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.101.91.154  user=root
Oct  2 06:30:39 nativespace-cdp sshd[10743]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:30:39 nativespace-cdp sshd[10739]: Failed password for root from 202.168.72.118 port 43612 ssh2
Oct  2 06:30:39 nativespace-cdp sshd[10739]: Received disconnect from 202.168.72.118 port 43612:11: Bye Bye [preauth]
Oct  2 06:30:39 nativespace-cdp sshd[10739]: Disconnected from 202.168.72.118 port 43612 [preauth]
Oct  2 06:30:41 nativespace-cdp sshd[10743]: Failed password for root from 210.101.91.154 port 60808 ssh2
Oct  2 06:30:41 nativespace-cdp sshd[10743]: Received disconnect from 210.101.91.154 port 60808:11: Bye Bye [preauth]
Oct  2 06:30:41 nativespace-cdp sshd[10743]: Disconnected from 210.101.91.154 port 60808 [preauth]
Oct  2 06:30:44 nativespace-cdp sshd[10768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.114.40.84  user=root
Oct  2 06:30:44 nativespace-cdp sshd[10768]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:30:46 nativespace-cdp sshd[10768]: Failed password for root from 50.114.40.84 port 53400 ssh2
Oct  2 06:30:54 nativespace-cdp sshd[10821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.150.58  user=root
Oct  2 06:30:54 nativespace-cdp sshd[10821]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:30:57 nativespace-cdp sshd[10821]: Failed password for root from 128.199.150.58 port 54078 ssh2
Oct  2 06:30:57 nativespace-cdp sshd[10821]: Received disconnect from 128.199.150.58 port 54078:11: Bye Bye [preauth]
Oct  2 06:30:57 nativespace-cdp sshd[10821]: Disconnected from 128.199.150.58 port 54078 [preauth]
Oct  2 06:31:01 nativespace-cdp sshd[10841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.119.247  user=root
Oct  2 06:31:01 nativespace-cdp sshd[10841]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:31:03 nativespace-cdp sshd[10841]: Failed password for root from 137.184.119.247 port 52698 ssh2
Oct  2 06:31:04 nativespace-cdp sshd[10841]: Received disconnect from 137.184.119.247 port 52698:11: Bye Bye [preauth]
Oct  2 06:31:04 nativespace-cdp sshd[10841]: Disconnected from 137.184.119.247 port 52698 [preauth]
Oct  2 06:31:16 nativespace-cdp sshd[10916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.116.200  user=root
Oct  2 06:31:16 nativespace-cdp sshd[10916]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:31:18 nativespace-cdp sshd[10916]: Failed password for root from 103.186.116.200 port 56354 ssh2
Oct  2 06:31:18 nativespace-cdp sshd[10916]: Received disconnect from 103.186.116.200 port 56354:11: Bye Bye [preauth]
Oct  2 06:31:18 nativespace-cdp sshd[10916]: Disconnected from 103.186.116.200 port 56354 [preauth]
Oct  2 06:31:25 nativespace-cdp sshd[10967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.168.72.118  user=root
Oct  2 06:31:25 nativespace-cdp sshd[10967]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:31:27 nativespace-cdp sshd[10975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.101.91.154  user=root
Oct  2 06:31:27 nativespace-cdp sshd[10975]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:31:27 nativespace-cdp sshd[10967]: Failed password for root from 202.168.72.118 port 40872 ssh2
Oct  2 06:31:28 nativespace-cdp sshd[10967]: Received disconnect from 202.168.72.118 port 40872:11: Bye Bye [preauth]
Oct  2 06:31:28 nativespace-cdp sshd[10967]: Disconnected from 202.168.72.118 port 40872 [preauth]
Oct  2 06:31:29 nativespace-cdp sshd[10975]: Failed password for root from 210.101.91.154 port 57853 ssh2
Oct  2 06:31:29 nativespace-cdp sshd[10975]: Received disconnect from 210.101.91.154 port 57853:11: Bye Bye [preauth]
Oct  2 06:31:29 nativespace-cdp sshd[10975]: Disconnected from 210.101.91.154 port 57853 [preauth]
Oct  2 06:31:33 nativespace-cdp sshd[11048]: Connection closed by 159.100.136.21 port 40192 [preauth]
Oct  2 06:31:44 nativespace-cdp sshd[11144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.150.58  user=root
Oct  2 06:31:44 nativespace-cdp sshd[11144]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 06:31:46 nativespace-cdp sshd[11144]: Failed password for root from 128.199.150.58 port 46320 ssh2
Oct  2 06:36:33 nativespace-cdp sshd[12385]: Connection closed by 159.100.136.21 port 50486 [preauth]
Oct  2 06:41:02 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 06:41:02 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 06:41:02 nativespace-cdp sudo[13409]: pam_unix(sudo:session): session closed for user root
Oct  2 06:41:33 nativespace-cdp sshd[13569]: Connection closed by 159.100.136.21 port 60452 [preauth]
Oct  2 06:46:33 nativespace-cdp sshd[14538]: Connection closed by 159.100.136.21 port 42438 [preauth]
Oct  2 06:51:33 nativespace-cdp sshd[15856]: Connection closed by 159.100.136.21 port 52404 [preauth]
Oct  2 06:56:33 nativespace-cdp sshd[16863]: Connection closed by 159.100.136.21 port 34470 [preauth]
Oct  2 07:01:33 nativespace-cdp sshd[17927]: Connection closed by 159.100.136.21 port 44492 [preauth]
Oct  2 07:06:33 nativespace-cdp sshd[19232]: Connection closed by 159.100.136.21 port 54874 [preauth]
Oct  2 07:09:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 07:09:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:11 nativespace-cdp sudo[19618]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 07:09:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:11 nativespace-cdp sudo[19621]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:11 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 07:09:11 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:12 nativespace-cdp sudo[19624]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 07:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:12 nativespace-cdp sudo[19629]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 07:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:13 nativespace-cdp sudo[19633]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 07:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:13 nativespace-cdp sudo[19645]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 07:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:13 nativespace-cdp sudo[19648]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 07:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:13 nativespace-cdp sudo[19651]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 07:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:13 nativespace-cdp sudo[19654]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 07:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:13 nativespace-cdp sudo[19657]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 07:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:13 nativespace-cdp sudo[19660]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 07:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:16 nativespace-cdp sudo[19668]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 07:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:16 nativespace-cdp sudo[19673]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=theblack user-2=hodgesonweb user-3=spectrum user-4=jarvisin user-5=leereyn1 user-6=stephani user-7=still user-8=agproduc user-9=maflemin user-10=lbscrmod user-11=athenare user-12=connect9 user-13=vantagep user-14=markward user-15=booff user-16=foundation user-17=ulsukarm user-18=ptkxhsbt user-19=dickemery123 user-20=martsblo user-21=magichat user-22=lbhyisi user-23=hhdugcor user-24=sarafoundation user-25=atestord user-26=strathar user-27=brmrjxl user-28=lakesan1 user-29=musorguk user-30=megacards user-31=wilsonsw user-32=carsinyo user-33=fetch user-34=hubmaster user-35=elecleis user-36=gilpin user-37=milloyco user-38=thqkgnbz user-39=connectedshoppin user-40=ianrayne user-41=accooper user-42=opaiscyx user-43=coursemc user-44=firstres user-45=seftvta user-46=jonhartl user-47=ultbcrra
Oct  2 07:09:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=southlon user-49=highlegh user-50=firstred user-51=costestimatorco user-52=firstrel user-53=clarkass user-54=alexadmin user-55=skyfirec user-56=nativene user-57=askhform user-58=stuartge user-59=innovat1 user-60=battlere user-61=oneoarco user-62=firstre2 user-63=vivienn1 user-64=brighto1 user-65=nstriton user-66=bemadonn user-67=ggaaorgu user-68=belle user-69=newstoda user-70=bedfords user-71=nsceres user-72=burydropin user-73=fawcettd user-74=dhyana user-75=eatspam user-76=darkstar user-77=beauty user-78=asandcoc user-79=sibtoncc user-80=steve user-81=zebrapho user-82=bwppodcast user-83=paulmca1 user-84=pugwash user-85=howardon user-86=cwsocial user-87=reliable user-88=ninejimm user-89=cambria1 user-90=cathski user-91=courseme user-92=eugincou user-93=hirefootballgame user-94=philmcph user-95=ctedorgu user-96=firstre5 user-97=donnychicago user-98=steakbridieme user-99=lkpier user-100=health2045
Oct  2 07:09:16 nativespace-cdp sudo: wp-toolkit : (command continued) user-101=fortunaz user-102=foods user-103=leftie user-104=nscdp user-105=tigerlet user-106=barbersh user-107=hidden user-108=nomistakes user-109=isleofwi user-110=smrszyqg user-111=onlycont user-112=attlebor user-113=lucy user-114=romaldki user-115=branko user-116=hodgsonmail user-117=outdoorc user-118=ranxterc user-119=jennimil user-120=tomandle user-121=careers user-122=nbhavers user-123=david user-124=mcdermos user-125=chrisdal user-126=nvihkvu user-127=cath user-128=sketchy user-129=havantho user-130=what user-131=oubpgvbx user-132=tstardom user-133=design user-134=kategilpin user-135=ladburyp user-136=dancinggardener user-137=stagingerris user-138=boldover user-139=nove user-140=sosevalu user-141=crrtipdl user-142=bakery feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  2 07:09:16 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 07:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:16 nativespace-cdp sudo[19678]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 07:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:16 nativespace-cdp sudo[19687]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BVWgwCmBJ6P8mkWb.~
Oct  2 07:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:16 nativespace-cdp sudo[19690]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BVWgwCmBJ6P8mkWb.~'
Oct  2 07:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:16 nativespace-cdp sudo[19693]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-BVWgwCmBJ6P8mkWb.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 07:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:16 nativespace-cdp sudo[19697]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 07:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:16 nativespace-cdp sudo[19701]: pam_unix(sudo:session): session closed for user root
Oct  2 07:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 07:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 07:09:18 nativespace-cdp sudo[19721]: pam_unix(sudo:session): session closed for user root
Oct  2 07:11:33 nativespace-cdp sshd[20332]: Connection closed by 159.100.136.21 port 36652 [preauth]
Oct  2 07:16:33 nativespace-cdp sshd[21344]: Connection closed by 159.100.136.21 port 46916 [preauth]
Oct  2 07:21:33 nativespace-cdp sshd[22631]: Connection closed by 159.100.136.21 port 56896 [preauth]
Oct  2 07:26:33 nativespace-cdp sshd[23589]: Connection closed by 159.100.136.21 port 38934 [preauth]
Oct  2 07:31:33 nativespace-cdp sshd[27644]: Connection closed by 159.100.136.21 port 48988 [preauth]
Oct  2 07:36:33 nativespace-cdp sshd[28890]: Connection closed by 159.100.136.21 port 59296 [preauth]
Oct  2 07:41:33 nativespace-cdp sshd[29824]: Connection closed by 159.100.136.21 port 41026 [preauth]
Oct  2 07:46:33 nativespace-cdp sshd[30945]: Connection closed by 159.100.136.21 port 51252 [preauth]
Oct  2 07:51:33 nativespace-cdp sshd[32264]: Connection closed by 159.100.136.21 port 33032 [preauth]
Oct  2 07:56:33 nativespace-cdp sshd[908]: Connection closed by 159.100.136.21 port 43334 [preauth]
Oct  2 08:01:33 nativespace-cdp sshd[2229]: Connection closed by 159.100.136.21 port 53342 [preauth]
Oct  2 08:06:33 nativespace-cdp sshd[3644]: Connection closed by 159.100.136.21 port 35446 [preauth]
Oct  2 08:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 08:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:13 nativespace-cdp sudo[4105]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 08:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:13 nativespace-cdp sudo[4109]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 08:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:14 nativespace-cdp sudo[4112]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 08:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:14 nativespace-cdp sudo[4116]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 08:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:16 nativespace-cdp sudo[4120]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 08:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:16 nativespace-cdp sudo[4129]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 08:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:16 nativespace-cdp sudo[4132]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 08:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:16 nativespace-cdp sudo[4135]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 08:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:16 nativespace-cdp sudo[4138]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 08:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:16 nativespace-cdp sudo[4141]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 08:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:16 nativespace-cdp sudo[4145]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 08:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:18 nativespace-cdp sudo[4156]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 08:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:18 nativespace-cdp sudo[4161]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=belle user-2=ggaaorgu user-3=newstoda user-4=bemadonn user-5=bedfords user-6=firstre2 user-7=vivienn1 user-8=battlere user-9=oneoarco user-10=brighto1 user-11=nstriton user-12=nativene user-13=innovat1 user-14=askhform user-15=stuartge user-16=alexadmin user-17=skyfirec user-18=firstred user-19=southlon user-20=highlegh user-21=firstrel user-22=clarkass user-23=costestimatorco user-24=coursemc user-25=opaiscyx user-26=seftvta user-27=jonhartl user-28=ultbcrra user-29=firstres user-30=connectedshoppin user-31=thqkgnbz user-32=accooper user-33=ianrayne user-34=hubmaster user-35=carsinyo user-36=fetch user-37=gilpin user-38=milloyco user-39=elecleis user-40=musorguk user-41=megacards user-42=wilsonsw user-43=strathar user-44=sarafoundation user-45=atestord user-46=brmrjxl user-47=lakesan1
Oct  2 08:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=magichat user-49=lbhyisi user-50=hhdugcor user-51=dickemery123 user-52=ptkxhsbt user-53=martsblo user-54=ulsukarm user-55=athenare user-56=connect9 user-57=vantagep user-58=maflemin user-59=lbscrmod user-60=booff user-61=markward user-62=foundation user-63=stephani user-64=leereyn1 user-65=still user-66=agproduc user-67=spectrum user-68=theblack user-69=hodgesonweb user-70=jarvisin user-71=bakery user-72=sosevalu user-73=crrtipdl user-74=boldover user-75=nove user-76=design user-77=ladburyp user-78=dancinggardener user-79=stagingerris user-80=kategilpin user-81=sketchy user-82=cath user-83=havantho user-84=nvihkvu user-85=oubpgvbx user-86=tstardom user-87=what user-88=careers user-89=nbhavers user-90=david user-91=chrisdal user-92=mcdermos user-93=jennimil user-94=tomandle user-95=romaldki user-96=hodgsonmail user-97=outdoorc user-98=ranxterc user-99=branko user-100=onlycont user-101=attlebor
Oct  2 08:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=lucy user-103=hidden user-104=nomistakes user-105=tigerlet user-106=barbersh user-107=smrszyqg user-108=isleofwi user-109=lkpier user-110=philmcph user-111=ctedorgu user-112=firstre5 user-113=steakbridieme user-114=donnychicago user-115=nscdp user-116=fortunaz user-117=health2045 user-118=foods user-119=leftie user-120=eugincou user-121=courseme user-122=hirefootballgame user-123=howardon user-124=paulmca1 user-125=pugwash user-126=cwsocial user-127=cathski user-128=cambria1 user-129=reliable user-130=ninejimm user-131=steve user-132=bwppodcast user-133=zebrapho user-134=sibtoncc user-135=asandcoc user-136=dhyana user-137=beauty user-138=eatspam user-139=darkstar user-140=nsceres user-141=burydropin user-142=fawcettd feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  2 08:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 08:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:19 nativespace-cdp sudo[4167]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 08:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:19 nativespace-cdp sudo[4173]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-efLYvN2qVKI0m9zN.~
Oct  2 08:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:19 nativespace-cdp sudo[4176]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-efLYvN2qVKI0m9zN.~'
Oct  2 08:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:19 nativespace-cdp sudo[4179]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-efLYvN2qVKI0m9zN.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 08:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:19 nativespace-cdp sudo[4183]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 08:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:19 nativespace-cdp sudo[4186]: pam_unix(sudo:session): session closed for user root
Oct  2 08:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 08:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 08:09:24 nativespace-cdp sudo[4212]: pam_unix(sudo:session): session closed for user root
Oct  2 08:11:33 nativespace-cdp sshd[4777]: Connection closed by 159.100.136.21 port 45428 [preauth]
Oct  2 08:16:33 nativespace-cdp sshd[5873]: Connection closed by 159.100.136.21 port 55656 [preauth]
Oct  2 08:21:33 nativespace-cdp sshd[7202]: Connection closed by 159.100.136.21 port 37430 [preauth]
Oct  2 08:26:33 nativespace-cdp sshd[8292]: Connection closed by 159.100.136.21 port 47704 [preauth]
Oct  2 08:31:52 nativespace-cdp sshd[9510]: Connection closed by 159.100.136.21 port 57780 [preauth]
Oct  2 08:36:33 nativespace-cdp sshd[10581]: Connection closed by 159.100.136.21 port 39490 [preauth]
Oct  2 08:41:33 nativespace-cdp sshd[11876]: Connection closed by 159.100.136.21 port 49458 [preauth]
Oct  2 08:46:33 nativespace-cdp sshd[13123]: Connection closed by 159.100.136.21 port 59724 [preauth]
Oct  2 08:51:33 nativespace-cdp sshd[14643]: Connection closed by 159.100.136.21 port 41538 [preauth]
Oct  2 08:56:33 nativespace-cdp sshd[15874]: Connection closed by 159.100.136.21 port 51806 [preauth]
Oct  2 08:57:49 nativespace-cdp sshd[16141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.245.79  user=root
Oct  2 08:57:49 nativespace-cdp sshd[16141]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 08:57:50 nativespace-cdp sshd[16141]: Failed password for root from 182.16.245.79 port 39190 ssh2
Oct  2 08:57:51 nativespace-cdp sshd[16141]: Received disconnect from 182.16.245.79 port 39190:11: Bye Bye [preauth]
Oct  2 08:57:51 nativespace-cdp sshd[16141]: Disconnected from 182.16.245.79 port 39190 [preauth]
Oct  2 09:01:33 nativespace-cdp sshd[17292]: Connection closed by 159.100.136.21 port 33616 [preauth]
Oct  2 09:02:05 nativespace-cdp sshd[17386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.49.152.14  user=root
Oct  2 09:02:05 nativespace-cdp sshd[17386]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:02:08 nativespace-cdp sshd[17386]: Failed password for root from 187.49.152.14 port 58106 ssh2
Oct  2 09:02:08 nativespace-cdp sshd[17386]: Received disconnect from 187.49.152.14 port 58106:11: Bye Bye [preauth]
Oct  2 09:02:08 nativespace-cdp sshd[17386]: Disconnected from 187.49.152.14 port 58106 [preauth]
Oct  2 09:03:32 nativespace-cdp sshd[17644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.204.238  user=root
Oct  2 09:03:32 nativespace-cdp sshd[17644]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:03:34 nativespace-cdp sshd[17644]: Failed password for root from 167.99.204.238 port 47748 ssh2
Oct  2 09:03:34 nativespace-cdp sshd[17644]: Received disconnect from 167.99.204.238 port 47748:11: Bye Bye [preauth]
Oct  2 09:03:34 nativespace-cdp sshd[17644]: Disconnected from 167.99.204.238 port 47748 [preauth]
Oct  2 09:03:38 nativespace-cdp sshd[17658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.103.16  user=root
Oct  2 09:03:38 nativespace-cdp sshd[17658]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:03:41 nativespace-cdp sshd[17658]: Failed password for root from 51.91.103.16 port 51116 ssh2
Oct  2 09:03:41 nativespace-cdp sshd[17658]: Received disconnect from 51.91.103.16 port 51116:11: Bye Bye [preauth]
Oct  2 09:03:41 nativespace-cdp sshd[17658]: Disconnected from 51.91.103.16 port 51116 [preauth]
Oct  2 09:04:09 nativespace-cdp sshd[17813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.245.79  user=root
Oct  2 09:04:09 nativespace-cdp sshd[17813]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:04:11 nativespace-cdp sshd[17813]: Failed password for root from 182.16.245.79 port 44692 ssh2
Oct  2 09:04:12 nativespace-cdp sshd[17813]: Received disconnect from 182.16.245.79 port 44692:11: Bye Bye [preauth]
Oct  2 09:04:12 nativespace-cdp sshd[17813]: Disconnected from 182.16.245.79 port 44692 [preauth]
Oct  2 09:04:27 nativespace-cdp sshd[17879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.204.238  user=root
Oct  2 09:04:27 nativespace-cdp sshd[17879]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:04:28 nativespace-cdp sshd[17885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.103.16  user=root
Oct  2 09:04:28 nativespace-cdp sshd[17885]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:04:29 nativespace-cdp sshd[17879]: Failed password for root from 167.99.204.238 port 48374 ssh2
Oct  2 09:04:29 nativespace-cdp sshd[17879]: Received disconnect from 167.99.204.238 port 48374:11: Bye Bye [preauth]
Oct  2 09:04:29 nativespace-cdp sshd[17879]: Disconnected from 167.99.204.238 port 48374 [preauth]
Oct  2 09:04:31 nativespace-cdp sshd[17885]: Failed password for root from 51.91.103.16 port 35570 ssh2
Oct  2 09:04:31 nativespace-cdp sshd[17885]: Received disconnect from 51.91.103.16 port 35570:11: Bye Bye [preauth]
Oct  2 09:04:31 nativespace-cdp sshd[17885]: Disconnected from 51.91.103.16 port 35570 [preauth]
Oct  2 09:04:42 nativespace-cdp sshd[17922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.49.152.14  user=root
Oct  2 09:04:42 nativespace-cdp sshd[17922]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:04:44 nativespace-cdp sshd[17922]: Failed password for root from 187.49.152.14 port 57416 ssh2
Oct  2 09:04:44 nativespace-cdp sshd[17927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.78.105  user=root
Oct  2 09:04:44 nativespace-cdp sshd[17927]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:04:45 nativespace-cdp sshd[17922]: Received disconnect from 187.49.152.14 port 57416:11: Bye Bye [preauth]
Oct  2 09:04:45 nativespace-cdp sshd[17922]: Disconnected from 187.49.152.14 port 57416 [preauth]
Oct  2 09:04:47 nativespace-cdp sshd[17927]: Failed password for root from 27.112.78.105 port 53686 ssh2
Oct  2 09:04:47 nativespace-cdp sshd[17927]: Received disconnect from 27.112.78.105 port 53686:11: Bye Bye [preauth]
Oct  2 09:04:47 nativespace-cdp sshd[17927]: Disconnected from 27.112.78.105 port 53686 [preauth]
Oct  2 09:04:58 nativespace-cdp sshd[17977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.245.79  user=root
Oct  2 09:04:58 nativespace-cdp sshd[17977]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:05:00 nativespace-cdp sshd[17977]: Failed password for root from 182.16.245.79 port 57816 ssh2
Oct  2 09:05:04 nativespace-cdp sshd[18129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.204.238  user=root
Oct  2 09:05:04 nativespace-cdp sshd[18129]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:05:06 nativespace-cdp sshd[18129]: Failed password for root from 167.99.204.238 port 40830 ssh2
Oct  2 09:05:06 nativespace-cdp sshd[18129]: Received disconnect from 167.99.204.238 port 40830:11: Bye Bye [preauth]
Oct  2 09:05:06 nativespace-cdp sshd[18129]: Disconnected from 167.99.204.238 port 40830 [preauth]
Oct  2 09:05:10 nativespace-cdp sshd[18175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.103.16  user=root
Oct  2 09:05:10 nativespace-cdp sshd[18175]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:05:12 nativespace-cdp sshd[18175]: Failed password for root from 51.91.103.16 port 46592 ssh2
Oct  2 09:05:12 nativespace-cdp sshd[18175]: Received disconnect from 51.91.103.16 port 46592:11: Bye Bye [preauth]
Oct  2 09:05:12 nativespace-cdp sshd[18175]: Disconnected from 51.91.103.16 port 46592 [preauth]
Oct  2 09:05:30 nativespace-cdp sshd[18401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.49.152.14  user=root
Oct  2 09:05:30 nativespace-cdp sshd[18401]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:05:32 nativespace-cdp sshd[18401]: Failed password for root from 187.49.152.14 port 41790 ssh2
Oct  2 09:05:32 nativespace-cdp sshd[18401]: Received disconnect from 187.49.152.14 port 41790:11: Bye Bye [preauth]
Oct  2 09:05:32 nativespace-cdp sshd[18401]: Disconnected from 187.49.152.14 port 41790 [preauth]
Oct  2 09:06:06 nativespace-cdp sshd[18728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.78.105  user=root
Oct  2 09:06:06 nativespace-cdp sshd[18728]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:06:08 nativespace-cdp sshd[18728]: Failed password for root from 27.112.78.105 port 34092 ssh2
Oct  2 09:06:08 nativespace-cdp sshd[18728]: Received disconnect from 27.112.78.105 port 34092:11: Bye Bye [preauth]
Oct  2 09:06:08 nativespace-cdp sshd[18728]: Disconnected from 27.112.78.105 port 34092 [preauth]
Oct  2 09:06:33 nativespace-cdp sshd[18850]: Connection closed by 159.100.136.21 port 44024 [preauth]
Oct  2 09:06:54 nativespace-cdp sshd[18920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.78.105  user=root
Oct  2 09:06:54 nativespace-cdp sshd[18920]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 09:06:57 nativespace-cdp sshd[18920]: Failed password for root from 27.112.78.105 port 44836 ssh2
Oct  2 09:06:57 nativespace-cdp sshd[18920]: Received disconnect from 27.112.78.105 port 44836:11: Bye Bye [preauth]
Oct  2 09:06:57 nativespace-cdp sshd[18920]: Disconnected from 27.112.78.105 port 44836 [preauth]
Oct  2 09:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 09:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:31 nativespace-cdp sudo[19488]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 09:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:31 nativespace-cdp sudo[19491]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 09:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:35 nativespace-cdp sudo[19494]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:35 nativespace-cdp sudo[19504]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 09:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:38 nativespace-cdp sudo[19507]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:38 nativespace-cdp sudo[19525]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:38 nativespace-cdp sudo[19528]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:38 nativespace-cdp sudo[19531]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:38 nativespace-cdp sudo[19536]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:38 nativespace-cdp sudo[19540]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 09:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:38 nativespace-cdp sudo[19543]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 09:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:41 nativespace-cdp sudo[19555]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:41 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 09:09:41 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:42 nativespace-cdp sudo[19560]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=foods user-2=leftie user-3=fortunaz user-4=health2045 user-5=nscdp user-6=steakbridieme user-7=firstre5 user-8=donnychicago user-9=ctedorgu user-10=philmcph user-11=lkpier user-12=isleofwi user-13=smrszyqg user-14=barbersh user-15=tigerlet user-16=nomistakes user-17=hidden user-18=ninejimm user-19=reliable user-20=cathski user-21=cambria1 user-22=cwsocial user-23=paulmca1 user-24=pugwash user-25=howardon user-26=hirefootballgame user-27=courseme user-28=eugincou user-29=asandcoc user-30=sibtoncc user-31=zebrapho user-32=bwppodcast user-33=steve user-34=fawcettd user-35=burydropin user-36=nsceres user-37=darkstar user-38=eatspam user-39=beauty user-40=dhyana user-41=nove user-42=boldover user-43=crrtipdl user-44=sosevalu user-45=bakery user-46=what user-47=tstardom user-48=oubpgvbx
Oct  2 09:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=nvihkvu user-50=havantho user-51=cath user-52=sketchy user-53=kategilpin user-54=dancinggardener user-55=stagingerris user-56=ladburyp user-57=design user-58=tomandle user-59=jennimil user-60=mcdermos user-61=chrisdal user-62=david user-63=nbhavers user-64=careers user-65=lucy user-66=attlebor user-67=onlycont user-68=branko user-69=outdoorc user-70=hodgsonmail user-71=ranxterc user-72=romaldki user-73=brmrjxl user-74=lakesan1 user-75=atestord user-76=sarafoundation user-77=strathar user-78=wilsonsw user-79=megacards user-80=musorguk user-81=martsblo user-82=ptkxhsbt user-83=dickemery123 user-84=hhdugcor user-85=lbhyisi user-86=magichat user-87=booff user-88=markward user-89=foundation user-90=lbscrmod user-91=maflemin user-92=vantagep user-93=athenare user-94=connect9 user-95=ulsukarm user-96=jarvisin user-97=hodgesonweb user-98=theblack user-99=spectrum user-100=agproduc user-101=still user-102=leereyn1
Oct  2 09:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=stephani user-104=nstriton user-105=brighto1 user-106=oneoarco user-107=battlere user-108=vivienn1 user-109=firstre2 user-110=bedfords user-111=bemadonn user-112=newstoda user-113=belle user-114=ggaaorgu user-115=alexadmin user-116=skyfirec user-117=stuartge user-118=askhform user-119=innovat1 user-120=nativene user-121=firstres user-122=ultbcrra user-123=jonhartl user-124=seftvta user-125=opaiscyx user-126=coursemc user-127=costestimatorco user-128=firstrel user-129=clarkass user-130=highlegh user-131=southlon user-132=firstred user-133=elecleis user-134=gilpin user-135=milloyco user-136=fetch user-137=carsinyo user-138=hubmaster user-139=ianrayne user-140=accooper user-141=thqkgnbz user-142=connectedshoppin feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 09:09:42 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 09:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:43 nativespace-cdp sudo[19568]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:44 nativespace-cdp sudo[19577]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3uiMjjPUK6kPLyws.~
Oct  2 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:44 nativespace-cdp sudo[19581]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3uiMjjPUK6kPLyws.~'
Oct  2 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:44 nativespace-cdp sudo[19584]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-3uiMjjPUK6kPLyws.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:44 nativespace-cdp sudo[19588]: pam_unix(sudo:session): session closed for user root
Oct  2 09:09:44 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 09:09:44 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:09:44 nativespace-cdp sudo[19595]: pam_unix(sudo:session): session closed for user root
Oct  2 09:10:00 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 09:10:00 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 09:10:03 nativespace-cdp sudo[19652]: pam_unix(sudo:session): session closed for user root
Oct  2 09:11:33 nativespace-cdp sshd[20169]: Connection closed by 159.100.136.21 port 54042 [preauth]
Oct  2 09:16:33 nativespace-cdp sshd[21374]: Connection closed by 159.100.136.21 port 36062 [preauth]
Oct  2 09:21:33 nativespace-cdp sshd[22734]: Connection closed by 159.100.136.21 port 46092 [preauth]
Oct  2 09:26:33 nativespace-cdp sshd[23965]: Connection closed by 159.100.136.21 port 56426 [preauth]
Oct  2 09:31:33 nativespace-cdp sshd[25281]: Connection closed by 159.100.136.21 port 38272 [preauth]
Oct  2 09:36:33 nativespace-cdp sshd[26467]: Connection closed by 159.100.136.21 port 48624 [preauth]
Oct  2 09:41:33 nativespace-cdp sshd[27748]: Connection closed by 159.100.136.21 port 58642 [preauth]
Oct  2 09:46:33 nativespace-cdp sshd[28966]: Connection closed by 159.100.136.21 port 40652 [preauth]
Oct  2 09:51:33 nativespace-cdp sshd[30308]: Connection closed by 159.100.136.21 port 50698 [preauth]
Oct  2 09:56:33 nativespace-cdp sshd[31481]: Connection closed by 159.100.136.21 port 60896 [preauth]
Oct  2 10:01:33 nativespace-cdp sshd[434]: Connection closed by 159.100.136.21 port 42694 [preauth]
Oct  2 10:06:33 nativespace-cdp sshd[1888]: Connection closed by 159.100.136.21 port 53028 [preauth]
Oct  2 10:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 10:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:12 nativespace-cdp sudo[2473]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 10:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:12 nativespace-cdp sudo[2477]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 10:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:13 nativespace-cdp sudo[2480]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 10:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:13 nativespace-cdp sudo[2489]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 10:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:15 nativespace-cdp sudo[2492]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 10:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:15 nativespace-cdp sudo[2504]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 10:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:15 nativespace-cdp sudo[2507]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 10:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:15 nativespace-cdp sudo[2511]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 10:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:15 nativespace-cdp sudo[2514]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 10:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:15 nativespace-cdp sudo[2517]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 10:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:15 nativespace-cdp sudo[2520]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 10:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:18 nativespace-cdp sudo[2529]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 10:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:18 nativespace-cdp sudo[2534]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=coursemc user-2=opaiscyx user-3=firstres user-4=jonhartl user-5=seftvta user-6=ultbcrra user-7=southlon user-8=highlegh user-9=firstred user-10=costestimatorco user-11=clarkass user-12=firstrel user-13=carsinyo user-14=fetch user-15=hubmaster user-16=elecleis user-17=milloyco user-18=gilpin user-19=thqkgnbz user-20=connectedshoppin user-21=ianrayne user-22=accooper user-23=battlere user-24=oneoarco user-25=firstre2 user-26=vivienn1 user-27=brighto1 user-28=nstriton user-29=bemadonn user-30=ggaaorgu user-31=belle user-32=newstoda user-33=bedfords user-34=skyfirec user-35=alexadmin user-36=nativene user-37=stuartge user-38=askhform user-39=innovat1 user-40=maflemin user-41=lbscrmod user-42=connect9 user-43=athenare user-44=vantagep user-45=booff user-46=markward user-47=foundation user-48=ulsukarm
Oct  2 10:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=theblack user-50=hodgesonweb user-51=spectrum user-52=jarvisin user-53=leereyn1 user-54=stephani user-55=still user-56=agproduc user-57=sarafoundation user-58=atestord user-59=strathar user-60=lakesan1 user-61=brmrjxl user-62=musorguk user-63=megacards user-64=wilsonsw user-65=ptkxhsbt user-66=dickemery123 user-67=martsblo user-68=magichat user-69=lbhyisi user-70=hhdugcor user-71=jennimil user-72=tomandle user-73=careers user-74=nbhavers user-75=david user-76=mcdermos user-77=chrisdal user-78=onlycont user-79=attlebor user-80=lucy user-81=romaldki user-82=branko user-83=ranxterc user-84=hodgsonmail user-85=outdoorc user-86=boldover user-87=nove user-88=sosevalu user-89=crrtipdl user-90=bakery user-91=nvihkvu user-92=sketchy user-93=cath user-94=havantho user-95=what user-96=tstardom user-97=oubpgvbx user-98=design user-99=kategilpin user-100=ladburyp user-101=dancinggardener user-102=stagingerris
Oct  2 10:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=asandcoc user-104=sibtoncc user-105=steve user-106=zebrapho user-107=bwppodcast user-108=nsceres user-109=burydropin user-110=fawcettd user-111=dhyana user-112=eatspam user-113=darkstar user-114=beauty user-115=ctedorgu user-116=philmcph user-117=firstre5 user-118=donnychicago user-119=steakbridieme user-120=lkpier user-121=health2045 user-122=fortunaz user-123=foods user-124=leftie user-125=nscdp user-126=tigerlet user-127=barbersh user-128=hidden user-129=nomistakes user-130=smrszyqg user-131=isleofwi user-132=paulmca1 user-133=howardon user-134=pugwash user-135=cwsocial user-136=reliable user-137=ninejimm user-138=cambria1 user-139=cathski user-140=courseme user-141=eugincou user-142=hirefootballgame feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 10:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 10:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:19 nativespace-cdp sudo[2539]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 10:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:19 nativespace-cdp sudo[2546]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PZCiYS2s3dFDjmbI.~
Oct  2 10:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:19 nativespace-cdp sudo[2549]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PZCiYS2s3dFDjmbI.~'
Oct  2 10:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:19 nativespace-cdp sudo[2552]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PZCiYS2s3dFDjmbI.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 10:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:19 nativespace-cdp sudo[2556]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 10:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:19 nativespace-cdp sudo[2559]: pam_unix(sudo:session): session closed for user root
Oct  2 10:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 10:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 10:09:21 nativespace-cdp sudo[2578]: pam_unix(sudo:session): session closed for user root
Oct  2 10:11:33 nativespace-cdp sshd[3209]: Connection closed by 159.100.136.21 port 34804 [preauth]
Oct  2 10:16:33 nativespace-cdp sshd[4396]: Connection closed by 159.100.136.21 port 45040 [preauth]
Oct  2 10:21:33 nativespace-cdp sshd[5730]: Connection closed by 159.100.136.21 port 55008 [preauth]
Oct  2 10:26:33 nativespace-cdp sshd[6928]: Connection closed by 159.100.136.21 port 37076 [preauth]
Oct  2 10:31:33 nativespace-cdp sshd[8442]: Connection closed by 159.100.136.21 port 45822 [preauth]
Oct  2 10:36:33 nativespace-cdp sshd[9761]: Connection closed by 159.100.136.21 port 56122 [preauth]
Oct  2 10:41:33 nativespace-cdp sshd[11354]: Connection closed by 159.100.136.21 port 37876 [preauth]
Oct  2 10:46:33 nativespace-cdp sshd[12833]: Connection closed by 159.100.136.21 port 48130 [preauth]
Oct  2 10:51:33 nativespace-cdp sshd[14286]: Connection closed by 159.100.136.21 port 58192 [preauth]
Oct  2 10:56:33 nativespace-cdp sshd[15915]: Connection closed by 159.100.136.21 port 40240 [preauth]
Oct  2 11:01:33 nativespace-cdp sshd[17340]: Connection closed by 159.100.136.21 port 50242 [preauth]
Oct  2 11:06:33 nativespace-cdp sshd[18584]: Connection closed by 159.100.136.21 port 60662 [preauth]
Oct  2 11:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 11:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:19 nativespace-cdp sudo[19370]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 11:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:19 nativespace-cdp sudo[19373]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 11:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:21 nativespace-cdp sudo[19376]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 11:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:21 nativespace-cdp sudo[19383]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 11:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:24 nativespace-cdp sudo[19386]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:24 nativespace-cdp sudo[19410]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:24 nativespace-cdp sudo[19413]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:24 nativespace-cdp sudo[19416]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:24 nativespace-cdp sudo[19419]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:24 nativespace-cdp sudo[19422]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 11:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:24 nativespace-cdp sudo[19426]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 11:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:26 nativespace-cdp sudo[19434]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 11:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:27 nativespace-cdp sudo[19442]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=still user-2=agproduc user-3=stephani user-4=leereyn1 user-5=jarvisin user-6=spectrum user-7=hodgesonweb user-8=theblack user-9=ulsukarm user-10=booff user-11=markward user-12=foundation user-13=athenare user-14=connect9 user-15=vantagep user-16=maflemin user-17=lbscrmod user-18=lbhyisi user-19=hhdugcor user-20=magichat user-21=martsblo user-22=dickemery123 user-23=ptkxhsbt user-24=wilsonsw user-25=musorguk user-26=megacards user-27=brmrjxl user-28=lakesan1 user-29=strathar user-30=sarafoundation user-31=atestord user-32=accooper user-33=ianrayne user-34=connectedshoppin user-35=thqkgnbz user-36=milloyco user-37=gilpin user-38=elecleis user-39=hubmaster user-40=carsinyo user-41=fetch user-42=clarkass user-43=firstrel user-44=costestimatorco user-45=firstred user-46=southlon user-47=highlegh
Oct  2 11:09:27 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=jonhartl user-49=seftvta user-50=ultbcrra user-51=firstres user-52=coursemc user-53=opaiscyx user-54=innovat1 user-55=stuartge user-56=askhform user-57=nativene user-58=skyfirec user-59=alexadmin user-60=bedfords user-61=belle user-62=ggaaorgu user-63=newstoda user-64=bemadonn user-65=brighto1 user-66=nstriton user-67=firstre2 user-68=vivienn1 user-69=battlere user-70=oneoarco user-71=beauty user-72=eatspam user-73=darkstar user-74=dhyana user-75=burydropin user-76=fawcettd user-77=nsceres user-78=bwppodcast user-79=zebrapho user-80=steve user-81=sibtoncc user-82=asandcoc user-83=hirefootballgame user-84=eugincou user-85=courseme user-86=cambria1 user-87=cathski user-88=reliable user-89=ninejimm user-90=pugwash user-91=paulmca1 user-92=howardon user-93=cwsocial user-94=isleofwi user-95=smrszyqg user-96=hidden user-97=nomistakes user-98=tigerlet user-99=barbersh user-100=nscdp user-101=health2045
Oct  2 11:09:27 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=fortunaz user-103=leftie user-104=foods user-105=lkpier user-106=philmcph user-107=ctedorgu user-108=firstre5 user-109=steakbridieme user-110=donnychicago user-111=hodgsonmail user-112=outdoorc user-113=ranxterc user-114=branko user-115=romaldki user-116=attlebor user-117=lucy user-118=onlycont user-119=chrisdal user-120=mcdermos user-121=careers user-122=nbhavers user-123=david user-124=tomandle user-125=jennimil user-126=ladburyp user-127=dancinggardener user-128=stagingerris user-129=kategilpin user-130=design user-131=tstardom user-132=oubpgvbx user-133=what user-134=cath user-135=sketchy user-136=havantho user-137=nvihkvu user-138=bakery user-139=sosevalu user-140=crrtipdl user-141=nove user-142=boldover feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 11:09:27 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 11:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:28 nativespace-cdp sudo[19448]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status onlycont
Oct  2 11:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:30 nativespace-cdp sudo[19465]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=onlycont ; COMMAND=/bin/cagefs_enter.proxied test -e /home/onlycont/wordpress-backups
Oct  2 11:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user onlycont by (uid=0)
Oct  2 11:09:30 nativespace-cdp sudo[19473]: pam_unix(sudo:session): session closed for user onlycont
Oct  2 11:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status oneoarco
Oct  2 11:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:31 nativespace-cdp sudo[19484]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Oct  2 11:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 11:09:31 nativespace-cdp sudo[19491]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 11:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status lkpier
Oct  2 11:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:32 nativespace-cdp sudo[19509]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:32 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=lkpier ; COMMAND=/bin/cagefs_enter.proxied test -e /home/lkpier/wordpress-backups
Oct  2 11:09:32 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user lkpier by (uid=0)
Oct  2 11:09:32 nativespace-cdp sudo[19514]: pam_unix(sudo:session): session closed for user lkpier
Oct  2 11:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status bwppodcast
Oct  2 11:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:33 nativespace-cdp sudo[19525]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=bwppodcast ; COMMAND=/bin/cagefs_enter.proxied test -e /home/bwppodcast/wordpress-backups
Oct  2 11:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user bwppodcast by (uid=0)
Oct  2 11:09:34 nativespace-cdp sudo[19531]: pam_unix(sudo:session): session closed for user bwppodcast
Oct  2 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=oneoarco ; COMMAND=/bin/cagefs_enter.proxied test -e /home/oneoarco/wordpress-backups
Oct  2 11:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user oneoarco by (uid=0)
Oct  2 11:09:34 nativespace-cdp sudo[19545]: pam_unix(sudo:session): session closed for user oneoarco
Oct  2 11:09:34 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --user-status fortunaz
Oct  2 11:09:34 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:35 nativespace-cdp sudo[19556]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=fortunaz ; COMMAND=/bin/cagefs_enter.proxied test -e /home/fortunaz/wordpress-backups
Oct  2 11:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user fortunaz by (uid=0)
Oct  2 11:09:35 nativespace-cdp sudo[19561]: pam_unix(sudo:session): session closed for user fortunaz
Oct  2 11:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /var/cpanel/licenseid_credentials.json
Oct  2 11:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:35 nativespace-cdp sudo[19573]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 11:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:35 nativespace-cdp sudo[19576]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_shared_ip --output=json
Oct  2 11:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:52 nativespace-cdp sudo[20465]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:52 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_public_ip ip=212.53.87.131 --output=json
Oct  2 11:09:52 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:52 nativespace-cdp sudo[20470]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 11:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:53 nativespace-cdp sudo[20484]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:53 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-guSKJRluvYrsxwPZ.~
Oct  2 11:09:53 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:53 nativespace-cdp sudo[20487]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-guSKJRluvYrsxwPZ.~'
Oct  2 11:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:54 nativespace-cdp sudo[20490]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-guSKJRluvYrsxwPZ.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 11:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:54 nativespace-cdp sudo[20494]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:54 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 11:09:54 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:54 nativespace-cdp sudo[20497]: pam_unix(sudo:session): session closed for user root
Oct  2 11:09:55 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 11:09:55 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 11:09:55 nativespace-cdp sudo[20512]: pam_unix(sudo:session): session closed for user root
Oct  2 11:11:33 nativespace-cdp sshd[20954]: Connection closed by 159.100.136.21 port 42458 [preauth]
Oct  2 11:16:33 nativespace-cdp sshd[22128]: Connection closed by 159.100.136.21 port 52758 [preauth]
Oct  2 11:21:33 nativespace-cdp sshd[23518]: Connection closed by 159.100.136.21 port 34594 [preauth]
Oct  2 11:26:33 nativespace-cdp sshd[24754]: Connection closed by 159.100.136.21 port 44900 [preauth]
Oct  2 11:31:33 nativespace-cdp sshd[25997]: Connection closed by 159.100.136.21 port 55024 [preauth]
Oct  2 11:36:33 nativespace-cdp sshd[27347]: Connection closed by 159.100.136.21 port 37136 [preauth]
Oct  2 11:41:33 nativespace-cdp sshd[28693]: Connection closed by 159.100.136.21 port 47204 [preauth]
Oct  2 11:46:33 nativespace-cdp sshd[29970]: Connection closed by 159.100.136.21 port 57440 [preauth]
Oct  2 11:51:33 nativespace-cdp sshd[31398]: Connection closed by 159.100.136.21 port 39278 [preauth]
Oct  2 11:56:33 nativespace-cdp sshd[32606]: Connection closed by 159.100.136.21 port 49638 [preauth]
Oct  2 12:01:33 nativespace-cdp sshd[1522]: Connection closed by 159.100.136.21 port 59650 [preauth]
Oct  2 12:06:33 nativespace-cdp sshd[2990]: Connection closed by 159.100.136.21 port 41806 [preauth]
Oct  2 12:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 12:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:12 nativespace-cdp sudo[3659]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 12:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:12 nativespace-cdp sudo[3662]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 12:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:13 nativespace-cdp sudo[3665]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 12:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:13 nativespace-cdp sudo[3670]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 12:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:15 nativespace-cdp sudo[3673]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 12:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:15 nativespace-cdp sudo[3687]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 12:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:15 nativespace-cdp sudo[3690]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 12:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:15 nativespace-cdp sudo[3694]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 12:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:15 nativespace-cdp sudo[3697]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 12:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:15 nativespace-cdp sudo[3700]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 12:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:16 nativespace-cdp sudo[3703]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 12:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:18 nativespace-cdp sudo[3714]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 12:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:18 nativespace-cdp sudo[3719]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=costestimatorco user-2=firstrel user-3=clarkass user-4=southlon user-5=highlegh user-6=firstred user-7=firstres user-8=jonhartl user-9=seftvta user-10=ultbcrra user-11=opaiscyx user-12=coursemc user-13=ianrayne user-14=accooper user-15=thqkgnbz user-16=connectedshoppin user-17=elecleis user-18=milloyco user-19=gilpin user-20=carsinyo user-21=fetch user-22=hubmaster user-23=bedfords user-24=bemadonn user-25=belle user-26=ggaaorgu user-27=newstoda user-28=brighto1 user-29=nstriton user-30=battlere user-31=oneoarco user-32=firstre2 user-33=vivienn1 user-34=stuartge user-35=askhform user-36=innovat1 user-37=nativene user-38=alexadmin user-39=skyfirec user-40=ulsukarm user-41=booff user-42=foundation user-43=markward user-44=maflemin user-45=lbscrmod user-46=athenare user-47=connect9 user-48=vantagep
Oct  2 12:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-49=still user-50=agproduc user-51=leereyn1 user-52=stephani user-53=jarvisin user-54=theblack user-55=hodgesonweb user-56=spectrum user-57=wilsonsw user-58=musorguk user-59=megacards user-60=lakesan1 user-61=brmrjxl user-62=sarafoundation user-63=atestord user-64=strathar user-65=lbhyisi user-66=hhdugcor user-67=magichat user-68=martsblo user-69=ptkxhsbt user-70=dickemery123 user-71=mcdermos user-72=chrisdal user-73=nbhavers user-74=careers user-75=david user-76=tomandle user-77=jennimil user-78=branko user-79=hodgsonmail user-80=ranxterc user-81=outdoorc user-82=romaldki user-83=attlebor user-84=lucy user-85=onlycont user-86=sosevalu user-87=crrtipdl user-88=bakery user-89=nove user-90=boldover user-91=kategilpin user-92=ladburyp user-93=stagingerris user-94=dancinggardener user-95=design user-96=what user-97=oubpgvbx user-98=tstardom user-99=nvihkvu user-100=cath user-101=sketchy user-102=havantho
Oct  2 12:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=zebrapho user-104=bwppodcast user-105=steve user-106=sibtoncc user-107=asandcoc user-108=eatspam user-109=darkstar user-110=beauty user-111=dhyana user-112=burydropin user-113=fawcettd user-114=nsceres user-115=isleofwi user-116=smrszyqg user-117=barbersh user-118=tigerlet user-119=hidden user-120=nomistakes user-121=health2045 user-122=fortunaz user-123=foods user-124=leftie user-125=nscdp user-126=philmcph user-127=ctedorgu user-128=donnychicago user-129=firstre5 user-130=steakbridieme user-131=lkpier user-132=hirefootballgame user-133=courseme user-134=eugincou user-135=ninejimm user-136=reliable user-137=cambria1 user-138=cathski user-139=paulmca1 user-140=howardon user-141=pugwash user-142=cwsocial feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 12:09:18 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 12:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:19 nativespace-cdp sudo[3724]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 12:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:20 nativespace-cdp sudo[3733]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PnmclulqHllOPdz2.~
Oct  2 12:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:20 nativespace-cdp sudo[3736]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PnmclulqHllOPdz2.~'
Oct  2 12:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:20 nativespace-cdp sudo[3739]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-PnmclulqHllOPdz2.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 12:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:20 nativespace-cdp sudo[3743]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 12:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:20 nativespace-cdp sudo[3746]: pam_unix(sudo:session): session closed for user root
Oct  2 12:09:30 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 12:09:30 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 12:09:30 nativespace-cdp sudo[3797]: pam_unix(sudo:session): session closed for user root
Oct  2 12:11:33 nativespace-cdp sshd[4413]: Connection closed by 159.100.136.21 port 51858 [preauth]
Oct  2 12:16:33 nativespace-cdp sshd[5726]: Connection closed by 159.100.136.21 port 33934 [preauth]
Oct  2 12:21:33 nativespace-cdp sshd[7081]: Connection closed by 159.100.136.21 port 43936 [preauth]
Oct  2 12:26:33 nativespace-cdp sshd[8456]: Connection closed by 159.100.136.21 port 54294 [preauth]
Oct  2 12:31:33 nativespace-cdp sshd[9745]: Connection closed by 159.100.136.21 port 35640 [preauth]
Oct  2 12:36:33 nativespace-cdp sshd[11244]: Connection closed by 159.100.136.21 port 45960 [preauth]
Oct  2 12:41:33 nativespace-cdp sshd[12730]: Connection closed by 159.100.136.21 port 56014 [preauth]
Oct  2 12:46:33 nativespace-cdp sshd[14326]: Connection closed by 159.100.136.21 port 38046 [preauth]
Oct  2 12:51:33 nativespace-cdp sshd[16052]: Connection closed by 159.100.136.21 port 48116 [preauth]
Oct  2 12:56:33 nativespace-cdp sshd[17351]: Connection closed by 159.100.136.21 port 58436 [preauth]
Oct  2 13:01:33 nativespace-cdp sshd[18660]: Connection closed by 159.100.136.21 port 40256 [preauth]
Oct  2 13:06:33 nativespace-cdp sshd[20130]: Connection closed by 159.100.136.21 port 50626 [preauth]
Oct  2 13:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 13:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:17 nativespace-cdp sudo[21093]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 13:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:17 nativespace-cdp sudo[21098]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 13:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:20 nativespace-cdp sudo[21101]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 13:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:20 nativespace-cdp sudo[21111]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 13:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:22 nativespace-cdp sudo[21115]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 13:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:23 nativespace-cdp sudo[21127]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 13:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:23 nativespace-cdp sudo[21131]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 13:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:23 nativespace-cdp sudo[21134]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 13:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:23 nativespace-cdp sudo[21138]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 13:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:23 nativespace-cdp sudo[21142]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 13:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:23 nativespace-cdp sudo[21145]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 13:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:25 nativespace-cdp sudo[21164]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 13:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:26 nativespace-cdp sudo[21170]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=carsinyo user-2=fetch user-3=hubmaster user-4=elecleis user-5=milloyco user-6=gilpin user-7=thqkgnbz user-8=connectedshoppin user-9=ianrayne user-10=accooper user-11=opaiscyx user-12=coursemc user-13=firstres user-14=seftvta user-15=jonhartl user-16=ultbcrra user-17=southlon user-18=highlegh user-19=firstred user-20=costestimatorco user-21=clarkass user-22=firstrel user-23=alexadmin user-24=skyfirec user-25=nativene user-26=askhform user-27=stuartge user-28=innovat1 user-29=battlere user-30=oneoarco user-31=firstre2 user-32=vivienn1 user-33=brighto1 user-34=nstriton user-35=bemadonn user-36=ggaaorgu user-37=belle user-38=newstoda user-39=bedfords user-40=hodgesonweb user-41=theblack user-42=spectrum user-43=jarvisin user-44=leereyn1 user-45=stephani user-46=still user-47=agproduc
Oct  2 13:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=maflemin user-49=lbscrmod user-50=athenare user-51=connect9 user-52=vantagep user-53=booff user-54=markward user-55=foundation user-56=ulsukarm user-57=ptkxhsbt user-58=dickemery123 user-59=martsblo user-60=magichat user-61=lbhyisi user-62=hhdugcor user-63=sarafoundation user-64=atestord user-65=strathar user-66=lakesan1 user-67=brmrjxl user-68=musorguk user-69=megacards user-70=wilsonsw user-71=onlycont user-72=attlebor user-73=lucy user-74=romaldki user-75=branko user-76=outdoorc user-77=hodgsonmail user-78=ranxterc user-79=jennimil user-80=tomandle user-81=careers user-82=nbhavers user-83=david user-84=mcdermos user-85=chrisdal user-86=nvihkvu user-87=sketchy user-88=cath user-89=havantho user-90=what user-91=tstardom user-92=oubpgvbx user-93=design user-94=kategilpin user-95=ladburyp user-96=dancinggardener user-97=stagingerris user-98=boldover user-99=nove user-100=sosevalu user-101=crrtipdl
Oct  2 13:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=bakery user-103=nsceres user-104=burydropin user-105=fawcettd user-106=dhyana user-107=eatspam user-108=darkstar user-109=beauty user-110=sibtoncc user-111=asandcoc user-112=steve user-113=zebrapho user-114=bwppodcast user-115=paulmca1 user-116=pugwash user-117=howardon user-118=cwsocial user-119=ninejimm user-120=reliable user-121=cambria1 user-122=cathski user-123=courseme user-124=eugincou user-125=hirefootballgame user-126=ctedorgu user-127=philmcph user-128=donnychicago user-129=firstre5 user-130=steakbridieme user-131=lkpier user-132=fortunaz user-133=health2045 user-134=foods user-135=leftie user-136=nscdp user-137=tigerlet user-138=barbersh user-139=hidden user-140=nomistakes user-141=isleofwi user-142=smrszyqg feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  2 13:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 13:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:26 nativespace-cdp sudo[21174]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 13:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:27 nativespace-cdp sudo[21186]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TQ6cnGCrTzW1ZzZi.~
Oct  2 13:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:27 nativespace-cdp sudo[21189]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TQ6cnGCrTzW1ZzZi.~'
Oct  2 13:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:27 nativespace-cdp sudo[21193]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-TQ6cnGCrTzW1ZzZi.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 13:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:27 nativespace-cdp sudo[21197]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 13:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:27 nativespace-cdp sudo[21200]: pam_unix(sudo:session): session closed for user root
Oct  2 13:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 13:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 13:09:42 nativespace-cdp sudo[21394]: pam_unix(sudo:session): session closed for user root
Oct  2 13:11:13 nativespace-cdp sshd[22010]: Did not receive identification string from 167.94.145.105 port 53774
Oct  2 13:11:31 nativespace-cdp sshd[22052]: Connection closed by 167.94.145.105 port 58224 [preauth]
Oct  2 13:11:33 nativespace-cdp sshd[22122]: Connection closed by 159.100.136.21 port 59812 [preauth]
Oct  2 13:16:38 nativespace-cdp sshd[23765]: Did not receive identification string from 159.100.136.21 port 41816
Oct  2 13:21:33 nativespace-cdp sshd[26425]: Connection closed by 159.100.136.21 port 51838 [preauth]
Oct  2 13:26:33 nativespace-cdp sshd[30209]: Connection closed by 159.100.136.21 port 33894 [preauth]
Oct  2 13:31:33 nativespace-cdp sshd[1653]: Connection closed by 159.100.136.21 port 43968 [preauth]
Oct  2 13:36:33 nativespace-cdp sshd[3248]: Connection closed by 159.100.136.21 port 54268 [preauth]
Oct  2 13:41:33 nativespace-cdp sshd[4482]: Connection closed by 159.100.136.21 port 35274 [preauth]
Oct  2 13:46:33 nativespace-cdp sshd[5708]: Connection closed by 159.100.136.21 port 45548 [preauth]
Oct  2 13:48:52 nativespace-cdp sshd[6228]: Accepted publickey for root from 185.67.178.249 port 51734 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Oct  2 13:48:52 nativespace-cdp sshd[6228]: pam_unix(sshd:session): session opened for user root by (uid=0)
Oct  2 13:51:33 nativespace-cdp sshd[7123]: Connection closed by 159.100.136.21 port 55626 [preauth]
Oct  2 13:56:33 nativespace-cdp sshd[8569]: Connection closed by 159.100.136.21 port 37332 [preauth]
Oct  2 14:01:33 nativespace-cdp sshd[9874]: Connection closed by 159.100.136.21 port 46344 [preauth]
Oct  2 14:06:33 nativespace-cdp sshd[11574]: Connection closed by 159.100.136.21 port 56710 [preauth]
Oct  2 14:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 14:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:19 nativespace-cdp sudo[12259]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 14:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:19 nativespace-cdp sudo[12262]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 14:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:20 nativespace-cdp sudo[12265]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 14:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:20 nativespace-cdp sudo[12275]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 14:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:23 nativespace-cdp sudo[12279]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 14:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:23 nativespace-cdp sudo[12292]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 14:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:23 nativespace-cdp sudo[12296]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 14:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:23 nativespace-cdp sudo[12299]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 14:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:23 nativespace-cdp sudo[12302]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 14:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:23 nativespace-cdp sudo[12305]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 14:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:23 nativespace-cdp sudo[12308]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 14:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:25 nativespace-cdp sudo[12321]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 14:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:26 nativespace-cdp sudo[12325]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=hubmaster user-2=carsinyo user-3=fetch user-4=gilpin user-5=milloyco user-6=elecleis user-7=connectedshoppin user-8=thqkgnbz user-9=accooper user-10=ianrayne user-11=coursemc user-12=opaiscyx user-13=seftvta user-14=jonhartl user-15=ultbcrra user-16=firstres user-17=firstred user-18=southlon user-19=highlegh user-20=clarkass user-21=firstrel user-22=costestimatorco user-23=alexadmin user-24=skyfirec user-25=nativene user-26=innovat1 user-27=stuartge user-28=askhform user-29=firstre2 user-30=vivienn1 user-31=battlere user-32=oneoarco user-33=brighto1 user-34=nstriton user-35=belle user-36=ggaaorgu user-37=newstoda user-38=bemadonn user-39=bedfords user-40=spectrum user-41=theblack user-42=hodgesonweb user-43=jarvisin user-44=stephani user-45=leereyn1 user-46=still user-47=agproduc
Oct  2 14:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=athenare user-49=connect9 user-50=vantagep user-51=maflemin user-52=lbscrmod user-53=booff user-54=markward user-55=foundation user-56=ulsukarm user-57=dickemery123 user-58=ptkxhsbt user-59=martsblo user-60=magichat user-61=lbhyisi user-62=hhdugcor user-63=strathar user-64=sarafoundation user-65=atestord user-66=brmrjxl user-67=lakesan1 user-68=musorguk user-69=megacards user-70=wilsonsw user-71=onlycont user-72=attlebor user-73=lucy user-74=romaldki user-75=ranxterc user-76=hodgsonmail user-77=outdoorc user-78=branko user-79=jennimil user-80=tomandle user-81=nbhavers user-82=careers user-83=david user-84=chrisdal user-85=mcdermos user-86=sketchy user-87=cath user-88=havantho user-89=nvihkvu user-90=oubpgvbx user-91=tstardom user-92=what user-93=design user-94=ladburyp user-95=dancinggardener user-96=stagingerris user-97=kategilpin user-98=boldover user-99=nove user-100=bakery user-101=sosevalu
Oct  2 14:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=crrtipdl user-103=nsceres user-104=burydropin user-105=fawcettd user-106=dhyana user-107=beauty user-108=eatspam user-109=darkstar user-110=sibtoncc user-111=asandcoc user-112=steve user-113=bwppodcast user-114=zebrapho user-115=howardon user-116=paulmca1 user-117=pugwash user-118=cwsocial user-119=cathski user-120=cambria1 user-121=ninejimm user-122=reliable user-123=eugincou user-124=courseme user-125=hirefootballgame user-126=lkpier user-127=ctedorgu user-128=philmcph user-129=steakbridieme user-130=firstre5 user-131=donnychicago user-132=nscdp user-133=health2045 user-134=fortunaz user-135=leftie user-136=foods user-137=hidden user-138=nomistakes user-139=tigerlet user-140=barbersh user-141=smrszyqg user-142=isleofwi feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  2 14:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 14:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:27 nativespace-cdp sudo[12330]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 14:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:27 nativespace-cdp sudo[12335]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SFK2hc6g517UFx5J.~
Oct  2 14:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:27 nativespace-cdp sudo[12338]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SFK2hc6g517UFx5J.~'
Oct  2 14:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:27 nativespace-cdp sudo[12341]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-SFK2hc6g517UFx5J.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 14:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:27 nativespace-cdp sudo[12347]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 14:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:27 nativespace-cdp sudo[12350]: pam_unix(sudo:session): session closed for user root
Oct  2 14:09:39 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 14:09:39 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 14:09:39 nativespace-cdp sudo[12410]: pam_unix(sudo:session): session closed for user root
Oct  2 14:11:33 nativespace-cdp sshd[12966]: Connection closed by 159.100.136.21 port 38534 [preauth]
Oct  2 14:16:33 nativespace-cdp sshd[14215]: Connection closed by 159.100.136.21 port 48770 [preauth]
Oct  2 14:21:33 nativespace-cdp sshd[15722]: Connection closed by 159.100.136.21 port 58788 [preauth]
Oct  2 14:26:33 nativespace-cdp sshd[16838]: Connection closed by 159.100.136.21 port 40874 [preauth]
Oct  2 14:31:33 nativespace-cdp sshd[18067]: Connection closed by 159.100.136.21 port 50988 [preauth]
Oct  2 14:36:34 nativespace-cdp sshd[19507]: Connection closed by 159.100.136.21 port 33118 [preauth]
Oct  2 14:41:33 nativespace-cdp sshd[20807]: Connection closed by 159.100.136.21 port 43122 [preauth]
Oct  2 14:46:33 nativespace-cdp sshd[21998]: Connection closed by 159.100.136.21 port 53420 [preauth]
Oct  2 14:51:33 nativespace-cdp sshd[23398]: Connection closed by 159.100.136.21 port 35248 [preauth]
Oct  2 14:56:33 nativespace-cdp sshd[24463]: Connection closed by 159.100.136.21 port 45560 [preauth]
Oct  2 15:01:33 nativespace-cdp sshd[25639]: Connection closed by 159.100.136.21 port 55604 [preauth]
Oct  2 15:06:33 nativespace-cdp sshd[26738]: Connection closed by 159.100.136.21 port 37772 [preauth]
Oct  2 15:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 15:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:12 nativespace-cdp sudo[27414]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 15:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:12 nativespace-cdp sudo[27417]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 15:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:12 nativespace-cdp sudo[27421]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 15:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:12 nativespace-cdp sudo[27428]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 15:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:15 nativespace-cdp sudo[27431]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 15:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:15 nativespace-cdp sudo[27444]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 15:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:15 nativespace-cdp sudo[27447]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 15:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:15 nativespace-cdp sudo[27450]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 15:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:15 nativespace-cdp sudo[27453]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 15:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:15 nativespace-cdp sudo[27457]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 15:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:15 nativespace-cdp sudo[27460]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 15:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:17 nativespace-cdp sudo[27470]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 15:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:17 nativespace-cdp sudo[27475]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ulsukarm user-2=foundation user-3=booff user-4=markward user-5=vantagep user-6=connect9 user-7=athenare user-8=lbscrmod user-9=maflemin user-10=agproduc user-11=still user-12=stephani user-13=leereyn1 user-14=jarvisin user-15=spectrum user-16=theblack user-17=hodgesonweb user-18=wilsonsw user-19=megacards user-20=musorguk user-21=lakesan1 user-22=brmrjxl user-23=strathar user-24=atestord user-25=sarafoundation user-26=hhdugcor user-27=lbhyisi user-28=magichat user-29=martsblo user-30=dickemery123 user-31=ptkxhsbt user-32=clarkass user-33=firstrel user-34=costestimatorco user-35=firstred user-36=highlegh user-37=southlon user-38=ultbcrra user-39=jonhartl user-40=seftvta user-41=firstres user-42=coursemc user-43=opaiscyx user-44=accooper user-45=ianrayne user-46=connectedshoppin user-47=thqkgnbz
Oct  2 15:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=gilpin user-49=milloyco user-50=elecleis user-51=hubmaster user-52=fetch user-53=carsinyo user-54=bedfords user-55=newstoda user-56=ggaaorgu user-57=belle user-58=bemadonn user-59=nstriton user-60=brighto1 user-61=vivienn1 user-62=firstre2 user-63=oneoarco user-64=battlere user-65=innovat1 user-66=stuartge user-67=askhform user-68=nativene user-69=skyfirec user-70=alexadmin user-71=bwppodcast user-72=zebrapho user-73=steve user-74=sibtoncc user-75=asandcoc user-76=beauty user-77=darkstar user-78=eatspam user-79=dhyana user-80=fawcettd user-81=burydropin user-82=nsceres user-83=smrszyqg user-84=isleofwi user-85=nomistakes user-86=hidden user-87=tigerlet user-88=barbersh user-89=nscdp user-90=foods user-91=leftie user-92=health2045 user-93=fortunaz user-94=lkpier user-95=steakbridieme user-96=firstre5 user-97=donnychicago user-98=philmcph user-99=ctedorgu user-100=hirefootballgame user-101=eugincou
Oct  2 15:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=courseme user-103=cathski user-104=cambria1 user-105=reliable user-106=ninejimm user-107=cwsocial user-108=paulmca1 user-109=pugwash user-110=howardon user-111=chrisdal user-112=mcdermos user-113=david user-114=nbhavers user-115=careers user-116=tomandle user-117=jennimil user-118=hodgsonmail user-119=outdoorc user-120=ranxterc user-121=branko user-122=romaldki user-123=lucy user-124=attlebor user-125=onlycont user-126=bakery user-127=crrtipdl user-128=sosevalu user-129=nove user-130=boldover user-131=stagingerris user-132=dancinggardener user-133=ladburyp user-134=kategilpin user-135=design user-136=tstardom user-137=oubpgvbx user-138=what user-139=havantho user-140=cath user-141=sketchy user-142=nvihkvu feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 15:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 15:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:18 nativespace-cdp sudo[27482]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 15:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:18 nativespace-cdp sudo[27487]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6EJi5cXF7gkmbA8o.~
Oct  2 15:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:18 nativespace-cdp sudo[27491]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6EJi5cXF7gkmbA8o.~'
Oct  2 15:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:18 nativespace-cdp sudo[27494]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-6EJi5cXF7gkmbA8o.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 15:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:18 nativespace-cdp sudo[27499]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 15:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:18 nativespace-cdp sudo[27502]: pam_unix(sudo:session): session closed for user root
Oct  2 15:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 15:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 15:09:19 nativespace-cdp sudo[27524]: pam_unix(sudo:session): session closed for user root
Oct  2 15:11:33 nativespace-cdp sshd[28136]: Connection closed by 159.100.136.21 port 47806 [preauth]
Oct  2 15:16:33 nativespace-cdp sshd[29190]: Connection closed by 159.100.136.21 port 58062 [preauth]
Oct  2 15:21:33 nativespace-cdp sshd[30397]: Connection closed by 159.100.136.21 port 39882 [preauth]
Oct  2 15:26:33 nativespace-cdp sshd[31457]: Connection closed by 159.100.136.21 port 50194 [preauth]
Oct  2 15:31:33 nativespace-cdp sshd[359]: Connection closed by 159.100.136.21 port 60290 [preauth]
Oct  2 15:36:33 nativespace-cdp sshd[1629]: Connection closed by 159.100.136.21 port 42418 [preauth]
Oct  2 15:41:33 nativespace-cdp sshd[2764]: Connection closed by 159.100.136.21 port 52446 [preauth]
Oct  2 15:46:33 nativespace-cdp sshd[3887]: Connection closed by 159.100.136.21 port 34506 [preauth]
Oct  2 15:51:33 nativespace-cdp sshd[5035]: Connection closed by 159.100.136.21 port 44566 [preauth]
Oct  2 15:56:33 nativespace-cdp sshd[6193]: Connection closed by 159.100.136.21 port 54904 [preauth]
Oct  2 16:01:33 nativespace-cdp sshd[7570]: Connection closed by 159.100.136.21 port 36700 [preauth]
Oct  2 16:06:33 nativespace-cdp sshd[8838]: Connection closed by 159.100.136.21 port 47064 [preauth]
Oct  2 16:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 16:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:12 nativespace-cdp sudo[12299]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 16:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:12 nativespace-cdp sudo[12306]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 16:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:13 nativespace-cdp sudo[12313]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 16:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:13 nativespace-cdp sudo[12379]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 16:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:15 nativespace-cdp sudo[12386]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 16:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:15 nativespace-cdp sudo[12523]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 16:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:15 nativespace-cdp sudo[12528]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 16:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:15 nativespace-cdp sudo[12534]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 16:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:15 nativespace-cdp sudo[12540]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 16:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:15 nativespace-cdp sudo[12546]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:15 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 16:09:15 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:15 nativespace-cdp sudo[12559]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 16:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:17 nativespace-cdp sudo[12705]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 16:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:17 nativespace-cdp sudo[12720]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=jarvisin user-2=hodgesonweb user-3=theblack user-4=spectrum user-5=still user-6=agproduc user-7=leereyn1 user-8=stephani user-9=booff user-10=foundation user-11=markward user-12=maflemin user-13=lbscrmod user-14=connect9 user-15=athenare user-16=vantagep user-17=ulsukarm user-18=martsblo user-19=ptkxhsbt user-20=dickemery123 user-21=lbhyisi user-22=hhdugcor user-23=magichat user-24=lakesan1 user-25=brmrjxl user-26=sarafoundation user-27=atestord user-28=strathar user-29=wilsonsw user-30=musorguk user-31=megacards user-32=elecleis user-33=milloyco user-34=gilpin user-35=carsinyo user-36=fetch user-37=hubmaster user-38=ianrayne user-39=accooper user-40=thqkgnbz user-41=connectedshoppin user-42=firstres user-43=seftvta user-44=jonhartl user-45=ultbcrra user-46=coursemc user-47=opaiscyx
Oct  2 16:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=costestimatorco user-49=firstrel user-50=clarkass user-51=southlon user-52=highlegh user-53=firstred user-54=skyfirec user-55=alexadmin user-56=stuartge user-57=askhform user-58=innovat1 user-59=nativene user-60=brighto1 user-61=nstriton user-62=battlere user-63=oneoarco user-64=firstre2 user-65=vivienn1 user-66=bedfords user-67=bemadonn user-68=belle user-69=ggaaorgu user-70=newstoda user-71=burydropin user-72=fawcettd user-73=nsceres user-74=eatspam user-75=darkstar user-76=beauty user-77=dhyana user-78=asandcoc user-79=sibtoncc user-80=zebrapho user-81=bwppodcast user-82=steve user-83=reliable user-84=ninejimm user-85=cathski user-86=cambria1 user-87=paulmca1 user-88=pugwash user-89=howardon user-90=cwsocial user-91=hirefootballgame user-92=courseme user-93=eugincou user-94=fortunaz user-95=health2045 user-96=leftie user-97=foods user-98=nscdp user-99=philmcph user-100=ctedorgu user-101=firstre5
Oct  2 16:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=steakbridieme user-103=donnychicago user-104=lkpier user-105=smrszyqg user-106=isleofwi user-107=barbersh user-108=tigerlet user-109=hidden user-110=nomistakes user-111=attlebor user-112=lucy user-113=onlycont user-114=branko user-115=hodgsonmail user-116=outdoorc user-117=ranxterc user-118=romaldki user-119=tomandle user-120=jennimil user-121=mcdermos user-122=chrisdal user-123=nbhavers user-124=careers user-125=david user-126=what user-127=tstardom user-128=oubpgvbx user-129=nvihkvu user-130=cath user-131=sketchy user-132=havantho user-133=kategilpin user-134=ladburyp user-135=dancinggardener user-136=stagingerris user-137=design user-138=nove user-139=boldover user-140=sosevalu user-141=crrtipdl user-142=bakery feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  2 16:09:17 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 16:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:18 nativespace-cdp sudo[12731]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 16:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:18 nativespace-cdp sudo[12776]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UU5lcRkkrP8vAaIj.~
Oct  2 16:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:18 nativespace-cdp sudo[12782]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UU5lcRkkrP8vAaIj.~'
Oct  2 16:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:18 nativespace-cdp sudo[12787]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-UU5lcRkkrP8vAaIj.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 16:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:18 nativespace-cdp sudo[12794]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 16:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:18 nativespace-cdp sudo[12801]: pam_unix(sudo:session): session closed for user root
Oct  2 16:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 16:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 16:09:20 nativespace-cdp sudo[12975]: pam_unix(sudo:session): session closed for user root
Oct  2 16:11:33 nativespace-cdp sshd[20112]: Connection closed by 159.100.136.21 port 57116 [preauth]
Oct  2 16:16:33 nativespace-cdp sshd[30041]: Connection closed by 159.100.136.21 port 39176 [preauth]
Oct  2 16:21:33 nativespace-cdp sshd[5363]: Connection closed by 159.100.136.21 port 49168 [preauth]
Oct  2 16:26:33 nativespace-cdp sshd[8617]: Connection closed by 159.100.136.21 port 59504 [preauth]
Oct  2 16:31:33 nativespace-cdp sshd[10088]: Connection closed by 159.100.136.21 port 41406 [preauth]
Oct  2 16:36:33 nativespace-cdp sshd[11356]: Connection closed by 159.100.136.21 port 51748 [preauth]
Oct  2 16:40:28 nativespace-cdp sshd[12454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.43.141.77  user=root
Oct  2 16:40:28 nativespace-cdp sshd[12454]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:40:30 nativespace-cdp sshd[12454]: Failed password for root from 179.43.141.77 port 59190 ssh2
Oct  2 16:40:30 nativespace-cdp sshd[12454]: Received disconnect from 179.43.141.77 port 59190:11: Bye Bye [preauth]
Oct  2 16:40:30 nativespace-cdp sshd[12454]: Disconnected from 179.43.141.77 port 59190 [preauth]
Oct  2 16:40:56 nativespace-cdp sshd[12595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.227.85.49  user=root
Oct  2 16:40:56 nativespace-cdp sshd[12595]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:40:58 nativespace-cdp sshd[12595]: Failed password for root from 212.227.85.49 port 40574 ssh2
Oct  2 16:40:58 nativespace-cdp sshd[12595]: Received disconnect from 212.227.85.49 port 40574:11: Bye Bye [preauth]
Oct  2 16:40:58 nativespace-cdp sshd[12595]: Disconnected from 212.227.85.49 port 40574 [preauth]
Oct  2 16:41:33 nativespace-cdp sshd[12716]: Connection closed by 159.100.136.21 port 33568 [preauth]
Oct  2 16:43:04 nativespace-cdp sshd[12975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.118.138.165  user=root
Oct  2 16:43:04 nativespace-cdp sshd[12975]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:43:05 nativespace-cdp sshd[12975]: Failed password for root from 74.118.138.165 port 43038 ssh2
Oct  2 16:43:06 nativespace-cdp sshd[12975]: Received disconnect from 74.118.138.165 port 43038:11: Bye Bye [preauth]
Oct  2 16:43:06 nativespace-cdp sshd[12975]: Disconnected from 74.118.138.165 port 43038 [preauth]
Oct  2 16:43:32 nativespace-cdp sshd[13134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.98.76.172  user=root
Oct  2 16:43:32 nativespace-cdp sshd[13134]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:43:33 nativespace-cdp sshd[13134]: Failed password for root from 203.98.76.172 port 42256 ssh2
Oct  2 16:43:34 nativespace-cdp sshd[13134]: Received disconnect from 203.98.76.172 port 42256:11: Bye Bye [preauth]
Oct  2 16:43:34 nativespace-cdp sshd[13134]: Disconnected from 203.98.76.172 port 42256 [preauth]
Oct  2 16:43:52 nativespace-cdp sshd[13193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.43.141.77  user=root
Oct  2 16:43:52 nativespace-cdp sshd[13193]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:43:54 nativespace-cdp sshd[13193]: Failed password for root from 179.43.141.77 port 59324 ssh2
Oct  2 16:43:54 nativespace-cdp sshd[13193]: Received disconnect from 179.43.141.77 port 59324:11: Bye Bye [preauth]
Oct  2 16:43:54 nativespace-cdp sshd[13193]: Disconnected from 179.43.141.77 port 59324 [preauth]
Oct  2 16:44:16 nativespace-cdp sshd[13266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.118.138.165  user=root
Oct  2 16:44:16 nativespace-cdp sshd[13266]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:44:18 nativespace-cdp sshd[13266]: Failed password for root from 74.118.138.165 port 60330 ssh2
Oct  2 16:44:18 nativespace-cdp sshd[13266]: Received disconnect from 74.118.138.165 port 60330:11: Bye Bye [preauth]
Oct  2 16:44:18 nativespace-cdp sshd[13266]: Disconnected from 74.118.138.165 port 60330 [preauth]
Oct  2 16:44:18 nativespace-cdp sshd[13272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.227.85.49  user=root
Oct  2 16:44:18 nativespace-cdp sshd[13272]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:44:21 nativespace-cdp sshd[13272]: Failed password for root from 212.227.85.49 port 49338 ssh2
Oct  2 16:44:21 nativespace-cdp sshd[13272]: Received disconnect from 212.227.85.49 port 49338:11: Bye Bye [preauth]
Oct  2 16:44:21 nativespace-cdp sshd[13272]: Disconnected from 212.227.85.49 port 49338 [preauth]
Oct  2 16:44:28 nativespace-cdp sshd[13303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.43.141.77  user=root
Oct  2 16:44:28 nativespace-cdp sshd[13303]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:44:30 nativespace-cdp sshd[13303]: Failed password for root from 179.43.141.77 port 59360 ssh2
Oct  2 16:44:30 nativespace-cdp sshd[13303]: Received disconnect from 179.43.141.77 port 59360:11: Bye Bye [preauth]
Oct  2 16:44:30 nativespace-cdp sshd[13303]: Disconnected from 179.43.141.77 port 59360 [preauth]
Oct  2 16:44:53 nativespace-cdp sshd[13390]: Invalid user ubuntu from 203.98.76.172 port 35886
Oct  2 16:44:53 nativespace-cdp sshd[13390]: input_userauth_request: invalid user ubuntu [preauth]
Oct  2 16:44:53 nativespace-cdp sshd[13390]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 16:44:53 nativespace-cdp sshd[13390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.98.76.172
Oct  2 16:44:55 nativespace-cdp sshd[13390]: Failed password for invalid user ubuntu from 203.98.76.172 port 35886 ssh2
Oct  2 16:44:55 nativespace-cdp sshd[13390]: Received disconnect from 203.98.76.172 port 35886:11: Bye Bye [preauth]
Oct  2 16:44:55 nativespace-cdp sshd[13390]: Disconnected from 203.98.76.172 port 35886 [preauth]
Oct  2 16:44:55 nativespace-cdp sshd[13397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.118.138.165  user=root
Oct  2 16:44:55 nativespace-cdp sshd[13397]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:44:57 nativespace-cdp sshd[13397]: Failed password for root from 74.118.138.165 port 45226 ssh2
Oct  2 16:44:57 nativespace-cdp sshd[13397]: Received disconnect from 74.118.138.165 port 45226:11: Bye Bye [preauth]
Oct  2 16:44:57 nativespace-cdp sshd[13397]: Disconnected from 74.118.138.165 port 45226 [preauth]
Oct  2 16:44:59 nativespace-cdp sshd[13416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.227.85.49  user=root
Oct  2 16:44:59 nativespace-cdp sshd[13416]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:45:00 nativespace-cdp sshd[13416]: Failed password for root from 212.227.85.49 port 55526 ssh2
Oct  2 16:45:01 nativespace-cdp sshd[13416]: Received disconnect from 212.227.85.49 port 55526:11: Bye Bye [preauth]
Oct  2 16:45:01 nativespace-cdp sshd[13416]: Disconnected from 212.227.85.49 port 55526 [preauth]
Oct  2 16:45:38 nativespace-cdp sshd[13762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.98.76.172  user=root
Oct  2 16:45:38 nativespace-cdp sshd[13762]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 16:45:40 nativespace-cdp sshd[13762]: Failed password for root from 203.98.76.172 port 34566 ssh2
Oct  2 16:45:40 nativespace-cdp sshd[13762]: Received disconnect from 203.98.76.172 port 34566:11: Bye Bye [preauth]
Oct  2 16:45:40 nativespace-cdp sshd[13762]: Disconnected from 203.98.76.172 port 34566 [preauth]
Oct  2 16:46:33 nativespace-cdp sshd[13994]: Connection closed by 159.100.136.21 port 43836 [preauth]
Oct  2 16:51:33 nativespace-cdp sshd[15362]: Connection closed by 159.100.136.21 port 53922 [preauth]
Oct  2 16:56:33 nativespace-cdp sshd[16764]: Connection closed by 159.100.136.21 port 36036 [preauth]
Oct  2 17:01:33 nativespace-cdp sshd[18488]: Connection closed by 159.100.136.21 port 45918 [preauth]
Oct  2 17:06:33 nativespace-cdp sshd[19902]: Connection closed by 159.100.136.21 port 56336 [preauth]
Oct  2 17:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 17:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:28 nativespace-cdp sudo[20568]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 17:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:28 nativespace-cdp sudo[20571]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 17:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:29 nativespace-cdp sudo[20574]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 17:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:29 nativespace-cdp sudo[20585]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 17:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:33 nativespace-cdp sudo[20588]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 17:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:33 nativespace-cdp sudo[20603]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 17:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:33 nativespace-cdp sudo[20606]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 17:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:33 nativespace-cdp sudo[20610]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 17:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:33 nativespace-cdp sudo[20613]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 17:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:33 nativespace-cdp sudo[20616]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:33 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 17:09:33 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:33 nativespace-cdp sudo[20619]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 17:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:35 nativespace-cdp sudo[20631]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:35 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 17:09:35 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:36 nativespace-cdp sudo[20637]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:36 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=careers user-2=nbhavers user-3=david user-4=mcdermos user-5=chrisdal user-6=jennimil user-7=tomandle user-8=romaldki user-9=branko user-10=hodgsonmail user-11=ranxterc user-12=outdoorc user-13=onlycont user-14=attlebor user-15=lucy user-16=sosevalu user-17=crrtipdl user-18=bakery user-19=boldover user-20=nove user-21=design user-22=kategilpin user-23=ladburyp user-24=dancinggardener user-25=stagingerris user-26=nvihkvu user-27=sketchy user-28=cath user-29=havantho user-30=what user-31=oubpgvbx user-32=tstardom user-33=steve user-34=zebrapho user-35=bwppodcast user-36=sibtoncc user-37=asandcoc user-38=dhyana user-39=eatspam user-40=darkstar user-41=beauty user-42=nsceres user-43=burydropin user-44=fawcettd user-45=barbersh user-46=tigerlet user-47=hidden user-48=nomistakes user-49=isleofwi
Oct  2 17:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=smrszyqg user-51=ctedorgu user-52=philmcph user-53=firstre5 user-54=steakbridieme user-55=donnychicago user-56=lkpier user-57=fortunaz user-58=health2045 user-59=leftie user-60=foods user-61=nscdp user-62=courseme user-63=eugincou user-64=hirefootballgame user-65=paulmca1 user-66=pugwash user-67=howardon user-68=cwsocial user-69=ninejimm user-70=reliable user-71=cathski user-72=cambria1 user-73=southlon user-74=highlegh user-75=firstred user-76=costestimatorco user-77=firstrel user-78=clarkass user-79=opaiscyx user-80=coursemc user-81=firstres user-82=jonhartl user-83=seftvta user-84=ultbcrra user-85=thqkgnbz user-86=connectedshoppin user-87=ianrayne user-88=accooper user-89=carsinyo user-90=fetch user-91=hubmaster user-92=elecleis user-93=gilpin user-94=milloyco user-95=bemadonn user-96=belle user-97=ggaaorgu user-98=newstoda user-99=bedfords user-100=battlere user-101=oneoarco user-102=firstre2
Oct  2 17:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=vivienn1 user-104=brighto1 user-105=nstriton user-106=nativene user-107=askhform user-108=stuartge user-109=innovat1 user-110=skyfirec user-111=alexadmin user-112=ulsukarm user-113=maflemin user-114=lbscrmod user-115=athenare user-116=connect9 user-117=vantagep user-118=foundation user-119=booff user-120=markward user-121=leereyn1 user-122=stephani user-123=still user-124=agproduc user-125=hodgesonweb user-126=theblack user-127=spectrum user-128=jarvisin user-129=musorguk user-130=megacards user-131=wilsonsw user-132=sarafoundation user-133=atestord user-134=strathar user-135=brmrjxl user-136=lakesan1 user-137=magichat user-138=lbhyisi user-139=hhdugcor user-140=ptkxhsbt user-141=dickemery123 user-142=martsblo feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 17:09:36 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 17:09:36 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:37 nativespace-cdp sudo[20647]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 17:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:38 nativespace-cdp sudo[20654]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qj3NjFcBH1hOpA4U.~
Oct  2 17:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:38 nativespace-cdp sudo[20657]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qj3NjFcBH1hOpA4U.~'
Oct  2 17:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:38 nativespace-cdp sudo[20660]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-qj3NjFcBH1hOpA4U.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 17:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:38 nativespace-cdp sudo[20666]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:38 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 17:09:38 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:38 nativespace-cdp sudo[20669]: pam_unix(sudo:session): session closed for user root
Oct  2 17:09:50 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 17:09:50 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 17:09:50 nativespace-cdp sudo[20723]: pam_unix(sudo:session): session closed for user root
Oct  2 17:11:33 nativespace-cdp sshd[21197]: Connection closed by 159.100.136.21 port 38128 [preauth]
Oct  2 17:16:33 nativespace-cdp sshd[22392]: Connection closed by 159.100.136.21 port 48434 [preauth]
Oct  2 17:21:33 nativespace-cdp sshd[23638]: Connection closed by 159.100.136.21 port 58464 [preauth]
Oct  2 17:26:33 nativespace-cdp sshd[24843]: Connection closed by 159.100.136.21 port 40592 [preauth]
Oct  2 17:31:33 nativespace-cdp sshd[26128]: Connection closed by 159.100.136.21 port 50678 [preauth]
Oct  2 17:36:33 nativespace-cdp sshd[27370]: Connection closed by 159.100.136.21 port 32818 [preauth]
Oct  2 17:41:33 nativespace-cdp sshd[28723]: Connection closed by 159.100.136.21 port 42340 [preauth]
Oct  2 17:46:33 nativespace-cdp sshd[30193]: Connection closed by 159.100.136.21 port 52606 [preauth]
Oct  2 17:51:33 nativespace-cdp sshd[31418]: Connection closed by 159.100.136.21 port 34460 [preauth]
Oct  2 17:56:33 nativespace-cdp sshd[32524]: Connection closed by 159.100.136.21 port 44786 [preauth]
Oct  2 18:01:33 nativespace-cdp sshd[1299]: Connection closed by 159.100.136.21 port 54868 [preauth]
Oct  2 18:06:33 nativespace-cdp sshd[2507]: Connection closed by 159.100.136.21 port 37000 [preauth]
Oct  2 18:09:17 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 18:09:17 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:17 nativespace-cdp sudo[3121]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 18:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:18 nativespace-cdp sudo[3124]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 18:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:18 nativespace-cdp sudo[3127]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 18:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:18 nativespace-cdp sudo[3132]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 18:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:23 nativespace-cdp sudo[3136]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:23 nativespace-cdp sudo[3171]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:23 nativespace-cdp sudo[3174]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:23 nativespace-cdp sudo[3177]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:23 nativespace-cdp sudo[3180]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 18:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:23 nativespace-cdp sudo[3183]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 18:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:24 nativespace-cdp sudo[3187]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 18:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:26 nativespace-cdp sudo[3199]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 18:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:26 nativespace-cdp sudo[3210]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=mcdermos user-2=chrisdal user-3=david user-4=nbhavers user-5=careers user-6=tomandle user-7=jennimil user-8=branko user-9=hodgsonmail user-10=ranxterc user-11=outdoorc user-12=romaldki user-13=lucy user-14=attlebor user-15=onlycont user-16=crrtipdl user-17=sosevalu user-18=bakery user-19=nove user-20=boldover user-21=kategilpin user-22=dancinggardener user-23=stagingerris user-24=ladburyp user-25=design user-26=what user-27=oubpgvbx user-28=tstardom user-29=nvihkvu user-30=havantho user-31=sketchy user-32=cath user-33=zebrapho user-34=bwppodcast user-35=steve user-36=sibtoncc user-37=asandcoc user-38=darkstar user-39=eatspam user-40=beauty user-41=dhyana user-42=fawcettd user-43=burydropin user-44=nsceres user-45=smrszyqg user-46=isleofwi user-47=barbersh user-48=tigerlet user-49=nomistakes
Oct  2 18:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=hidden user-51=leftie user-52=foods user-53=fortunaz user-54=health2045 user-55=nscdp user-56=firstre5 user-57=steakbridieme user-58=donnychicago user-59=ctedorgu user-60=philmcph user-61=lkpier user-62=hirefootballgame user-63=courseme user-64=eugincou user-65=ninejimm user-66=reliable user-67=cambria1 user-68=cathski user-69=cwsocial user-70=pugwash user-71=paulmca1 user-72=howardon user-73=costestimatorco user-74=firstrel user-75=clarkass user-76=highlegh user-77=southlon user-78=firstred user-79=firstres user-80=ultbcrra user-81=seftvta user-82=jonhartl user-83=opaiscyx user-84=coursemc user-85=ianrayne user-86=accooper user-87=thqkgnbz user-88=connectedshoppin user-89=elecleis user-90=milloyco user-91=gilpin user-92=fetch user-93=carsinyo user-94=hubmaster user-95=bedfords user-96=bemadonn user-97=newstoda user-98=ggaaorgu user-99=belle user-100=nstriton user-101=brighto1 user-102=oneoarco
Oct  2 18:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-103=battlere user-104=vivienn1 user-105=firstre2 user-106=stuartge user-107=askhform user-108=innovat1 user-109=nativene user-110=skyfirec user-111=alexadmin user-112=ulsukarm user-113=markward user-114=booff user-115=foundation user-116=lbscrmod user-117=maflemin user-118=vantagep user-119=athenare user-120=connect9 user-121=agproduc user-122=still user-123=leereyn1 user-124=stephani user-125=jarvisin user-126=hodgesonweb user-127=theblack user-128=spectrum user-129=wilsonsw user-130=megacards user-131=musorguk user-132=brmrjxl user-133=lakesan1 user-134=atestord user-135=sarafoundation user-136=strathar user-137=hhdugcor user-138=lbhyisi user-139=magichat user-140=martsblo user-141=ptkxhsbt user-142=dickemery123 feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 18:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 18:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:28 nativespace-cdp sudo[3217]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 18:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:28 nativespace-cdp sudo[3226]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Y7URMHixOCFKSU35.~
Oct  2 18:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:29 nativespace-cdp sudo[3229]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Y7URMHixOCFKSU35.~'
Oct  2 18:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:29 nativespace-cdp sudo[3233]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-Y7URMHixOCFKSU35.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 18:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:29 nativespace-cdp sudo[3238]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:29 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 18:09:29 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:29 nativespace-cdp sudo[3241]: pam_unix(sudo:session): session closed for user root
Oct  2 18:09:31 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 18:09:31 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 18:09:31 nativespace-cdp sudo[3264]: pam_unix(sudo:session): session closed for user root
Oct  2 18:11:33 nativespace-cdp sshd[3841]: Connection closed by 159.100.136.21 port 47066 [preauth]
Oct  2 18:16:33 nativespace-cdp sshd[5036]: Connection closed by 159.100.136.21 port 57364 [preauth]
Oct  2 18:17:31 nativespace-cdp sshd[5223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.221.48.115  user=root
Oct  2 18:17:31 nativespace-cdp sshd[5223]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:17:33 nativespace-cdp sshd[5223]: Failed password for root from 85.221.48.115 port 50566 ssh2
Oct  2 18:17:33 nativespace-cdp sshd[5223]: Received disconnect from 85.221.48.115 port 50566:11: Bye Bye [preauth]
Oct  2 18:17:33 nativespace-cdp sshd[5223]: Disconnected from 85.221.48.115 port 50566 [preauth]
Oct  2 18:17:53 nativespace-cdp sshd[5297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.58.227.139  user=root
Oct  2 18:17:53 nativespace-cdp sshd[5297]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:17:55 nativespace-cdp sshd[5297]: Failed password for root from 5.58.227.139 port 41414 ssh2
Oct  2 18:17:55 nativespace-cdp sshd[5297]: Received disconnect from 5.58.227.139 port 41414:11: Bye Bye [preauth]
Oct  2 18:17:55 nativespace-cdp sshd[5297]: Disconnected from 5.58.227.139 port 41414 [preauth]
Oct  2 18:19:14 nativespace-cdp sshd[5621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.221.48.115  user=root
Oct  2 18:19:14 nativespace-cdp sshd[5621]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:19:16 nativespace-cdp sshd[5621]: Failed password for root from 85.221.48.115 port 43766 ssh2
Oct  2 18:19:16 nativespace-cdp sshd[5621]: Received disconnect from 85.221.48.115 port 43766:11: Bye Bye [preauth]
Oct  2 18:19:16 nativespace-cdp sshd[5621]: Disconnected from 85.221.48.115 port 43766 [preauth]
Oct  2 18:19:35 nativespace-cdp sshd[5672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.58.227.139  user=root
Oct  2 18:19:35 nativespace-cdp sshd[5672]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:19:38 nativespace-cdp sshd[5672]: Failed password for root from 5.58.227.139 port 55864 ssh2
Oct  2 18:19:38 nativespace-cdp sshd[5672]: Received disconnect from 5.58.227.139 port 55864:11: Bye Bye [preauth]
Oct  2 18:19:38 nativespace-cdp sshd[5672]: Disconnected from 5.58.227.139 port 55864 [preauth]
Oct  2 18:19:55 nativespace-cdp sshd[5729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.221.48.115  user=root
Oct  2 18:19:55 nativespace-cdp sshd[5729]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:19:56 nativespace-cdp sshd[5729]: Failed password for root from 85.221.48.115 port 56466 ssh2
Oct  2 18:19:56 nativespace-cdp sshd[5729]: Received disconnect from 85.221.48.115 port 56466:11: Bye Bye [preauth]
Oct  2 18:19:56 nativespace-cdp sshd[5729]: Disconnected from 85.221.48.115 port 56466 [preauth]
Oct  2 18:20:13 nativespace-cdp sshd[5922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.58.227.139  user=root
Oct  2 18:20:13 nativespace-cdp sshd[5922]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:20:15 nativespace-cdp sshd[5922]: Failed password for root from 5.58.227.139 port 50080 ssh2
Oct  2 18:20:15 nativespace-cdp sshd[5922]: Received disconnect from 5.58.227.139 port 50080:11: Bye Bye [preauth]
Oct  2 18:20:15 nativespace-cdp sshd[5922]: Disconnected from 5.58.227.139 port 50080 [preauth]
Oct  2 18:21:33 nativespace-cdp sshd[6378]: Connection closed by 159.100.136.21 port 39152 [preauth]
Oct  2 18:26:33 nativespace-cdp sshd[7559]: Connection closed by 159.100.136.21 port 49516 [preauth]
Oct  2 18:31:33 nativespace-cdp sshd[8807]: Connection closed by 159.100.136.21 port 58754 [preauth]
Oct  2 18:36:05 nativespace-cdp sshd[9888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.103.253.62  user=root
Oct  2 18:36:05 nativespace-cdp sshd[9888]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:36:07 nativespace-cdp sshd[9888]: Failed password for root from 91.103.253.62 port 37970 ssh2
Oct  2 18:36:07 nativespace-cdp sshd[9888]: Received disconnect from 91.103.253.62 port 37970:11: Bye Bye [preauth]
Oct  2 18:36:07 nativespace-cdp sshd[9888]: Disconnected from 91.103.253.62 port 37970 [preauth]
Oct  2 18:36:33 nativespace-cdp sshd[9958]: Connection closed by 159.100.136.21 port 40890 [preauth]
Oct  2 18:36:55 nativespace-cdp sshd[10027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.245.130  user=root
Oct  2 18:36:55 nativespace-cdp sshd[10027]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:36:57 nativespace-cdp sshd[10027]: Failed password for root from 47.90.245.130 port 35602 ssh2
Oct  2 18:36:57 nativespace-cdp sshd[10027]: Received disconnect from 47.90.245.130 port 35602:11: Bye Bye [preauth]
Oct  2 18:36:57 nativespace-cdp sshd[10027]: Disconnected from 47.90.245.130 port 35602 [preauth]
Oct  2 18:40:30 nativespace-cdp sshd[10994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.103.253.62  user=root
Oct  2 18:40:30 nativespace-cdp sshd[10994]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:40:33 nativespace-cdp sshd[10994]: Failed password for root from 91.103.253.62 port 34502 ssh2
Oct  2 18:40:33 nativespace-cdp sshd[10994]: Received disconnect from 91.103.253.62 port 34502:11: Bye Bye [preauth]
Oct  2 18:40:33 nativespace-cdp sshd[10994]: Disconnected from 91.103.253.62 port 34502 [preauth]
Oct  2 18:41:11 nativespace-cdp sshd[11131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.103.253.62  user=root
Oct  2 18:41:11 nativespace-cdp sshd[11131]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:41:13 nativespace-cdp sshd[11131]: Failed password for root from 91.103.253.62 port 50682 ssh2
Oct  2 18:41:13 nativespace-cdp sshd[11131]: Received disconnect from 91.103.253.62 port 50682:11: Bye Bye [preauth]
Oct  2 18:41:13 nativespace-cdp sshd[11131]: Disconnected from 91.103.253.62 port 50682 [preauth]
Oct  2 18:41:33 nativespace-cdp sshd[11222]: Connection closed by 159.100.136.21 port 50928 [preauth]
Oct  2 18:42:52 nativespace-cdp sshd[11426]: Invalid user ubuntu from 47.90.245.130 port 51928
Oct  2 18:42:52 nativespace-cdp sshd[11426]: input_userauth_request: invalid user ubuntu [preauth]
Oct  2 18:42:52 nativespace-cdp sshd[11426]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 18:42:52 nativespace-cdp sshd[11426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.245.130
Oct  2 18:42:54 nativespace-cdp sshd[11426]: Failed password for invalid user ubuntu from 47.90.245.130 port 51928 ssh2
Oct  2 18:42:54 nativespace-cdp sshd[11426]: Received disconnect from 47.90.245.130 port 51928:11: Bye Bye [preauth]
Oct  2 18:42:54 nativespace-cdp sshd[11426]: Disconnected from 47.90.245.130 port 51928 [preauth]
Oct  2 18:43:36 nativespace-cdp sshd[11545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.90.245.130  user=root
Oct  2 18:43:36 nativespace-cdp sshd[11545]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 18:43:38 nativespace-cdp sshd[11545]: Failed password for root from 47.90.245.130 port 37236 ssh2
Oct  2 18:43:38 nativespace-cdp sshd[11545]: Received disconnect from 47.90.245.130 port 37236:11: Bye Bye [preauth]
Oct  2 18:43:38 nativespace-cdp sshd[11545]: Disconnected from 47.90.245.130 port 37236 [preauth]
Oct  2 18:46:33 nativespace-cdp sshd[12385]: Connection closed by 159.100.136.21 port 32994 [preauth]
Oct  2 18:51:33 nativespace-cdp sshd[13585]: Connection closed by 159.100.136.21 port 43052 [preauth]
Oct  2 18:56:33 nativespace-cdp sshd[14748]: Connection closed by 159.100.136.21 port 53412 [preauth]
Oct  2 19:01:33 nativespace-cdp sshd[15995]: Connection closed by 159.100.136.21 port 35218 [preauth]
Oct  2 19:06:33 nativespace-cdp sshd[17313]: Connection closed by 159.100.136.21 port 45608 [preauth]
Oct  2 19:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 19:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:18 nativespace-cdp sudo[17955]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 19:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:18 nativespace-cdp sudo[17958]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 19:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:19 nativespace-cdp sudo[17962]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 19:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:19 nativespace-cdp sudo[17968]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 19:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:22 nativespace-cdp sudo[17971]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 19:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:22 nativespace-cdp sudo[17985]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 19:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:22 nativespace-cdp sudo[17988]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 19:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:22 nativespace-cdp sudo[17991]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 19:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:22 nativespace-cdp sudo[17994]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 19:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:22 nativespace-cdp sudo[17997]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 19:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:22 nativespace-cdp sudo[18001]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 19:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:24 nativespace-cdp sudo[18011]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 19:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:25 nativespace-cdp sudo[18015]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=tstardom user-2=oubpgvbx user-3=what user-4=havantho user-5=sketchy user-6=cath user-7=nvihkvu user-8=dancinggardener user-9=stagingerris user-10=ladburyp user-11=kategilpin user-12=design user-13=nove user-14=boldover user-15=bakery user-16=crrtipdl user-17=sosevalu user-18=lucy user-19=attlebor user-20=onlycont user-21=outdoorc user-22=hodgsonmail user-23=ranxterc user-24=branko user-25=romaldki user-26=tomandle user-27=jennimil user-28=chrisdal user-29=mcdermos user-30=david user-31=nbhavers user-32=careers user-33=cathski user-34=cambria1 user-35=ninejimm user-36=reliable user-37=cwsocial user-38=howardon user-39=paulmca1 user-40=pugwash user-41=hirefootballgame user-42=eugincou user-43=courseme user-44=nscdp user-45=foods user-46=leftie user-47=fortunaz user-48=health2045 user-49=lkpier
Oct  2 19:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-50=firstre5 user-51=donnychicago user-52=steakbridieme user-53=philmcph user-54=ctedorgu user-55=smrszyqg user-56=isleofwi user-57=nomistakes user-58=hidden user-59=barbersh user-60=tigerlet user-61=fawcettd user-62=burydropin user-63=nsceres user-64=beauty user-65=darkstar user-66=eatspam user-67=dhyana user-68=sibtoncc user-69=asandcoc user-70=bwppodcast user-71=zebrapho user-72=steve user-73=alexadmin user-74=skyfirec user-75=innovat1 user-76=askhform user-77=stuartge user-78=nativene user-79=nstriton user-80=brighto1 user-81=vivienn1 user-82=firstre2 user-83=oneoarco user-84=battlere user-85=bedfords user-86=newstoda user-87=belle user-88=ggaaorgu user-89=bemadonn user-90=milloyco user-91=gilpin user-92=elecleis user-93=hubmaster user-94=fetch user-95=carsinyo user-96=accooper user-97=ianrayne user-98=connectedshoppin user-99=thqkgnbz user-100=ultbcrra user-101=jonhartl user-102=seftvta user-103=firstres
Oct  2 19:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) user-104=opaiscyx user-105=coursemc user-106=clarkass user-107=firstrel user-108=costestimatorco user-109=firstred user-110=highlegh user-111=southlon user-112=martsblo user-113=dickemery123 user-114=ptkxhsbt user-115=hhdugcor user-116=lbhyisi user-117=magichat user-118=brmrjxl user-119=lakesan1 user-120=strathar user-121=atestord user-122=sarafoundation user-123=wilsonsw user-124=megacards user-125=musorguk user-126=jarvisin user-127=spectrum user-128=theblack user-129=hodgesonweb user-130=agproduc user-131=still user-132=stephani user-133=leereyn1 user-134=markward user-135=booff user-136=foundation user-137=vantagep user-138=athenare user-139=connect9 user-140=lbscrmod user-141=maflemin user-142=ulsukarm feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect feature-10=sslinstall
Oct  2 19:09:25 nativespace-cdp sudo: wp-toolkit : (command continued) feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 19:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:26 nativespace-cdp sudo[18019]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 19:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:26 nativespace-cdp sudo[18028]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9vzdcl4sdUzH2skG.~
Oct  2 19:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:26 nativespace-cdp sudo[18031]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9vzdcl4sdUzH2skG.~'
Oct  2 19:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:26 nativespace-cdp sudo[18035]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-9vzdcl4sdUzH2skG.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 19:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:26 nativespace-cdp sudo[18039]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 19:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:26 nativespace-cdp sudo[18042]: pam_unix(sudo:session): session closed for user root
Oct  2 19:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 19:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 19:09:28 nativespace-cdp sudo[18060]: pam_unix(sudo:session): session closed for user root
Oct  2 19:11:33 nativespace-cdp sshd[18721]: Connection closed by 159.100.136.21 port 55624 [preauth]
Oct  2 19:16:33 nativespace-cdp sshd[20031]: Connection closed by 159.100.136.21 port 37640 [preauth]
Oct  2 19:18:42 nativespace-cdp sshd[20449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.229.126.13  user=root
Oct  2 19:18:42 nativespace-cdp sshd[20449]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 19:18:44 nativespace-cdp sshd[20449]: Failed password for root from 103.229.126.13 port 39736 ssh2
Oct  2 19:18:44 nativespace-cdp sshd[20449]: Received disconnect from 103.229.126.13 port 39736:11: Bye Bye [preauth]
Oct  2 19:18:44 nativespace-cdp sshd[20449]: Disconnected from 103.229.126.13 port 39736 [preauth]
Oct  2 19:21:07 nativespace-cdp sshd[21218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.229.126.13  user=root
Oct  2 19:21:07 nativespace-cdp sshd[21218]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 19:21:10 nativespace-cdp sshd[21218]: Failed password for root from 103.229.126.13 port 57420 ssh2
Oct  2 19:21:10 nativespace-cdp sshd[21218]: Received disconnect from 103.229.126.13 port 57420:11: Bye Bye [preauth]
Oct  2 19:21:10 nativespace-cdp sshd[21218]: Disconnected from 103.229.126.13 port 57420 [preauth]
Oct  2 19:21:15 nativespace-cdp sshd[21242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.229.126.13  user=root
Oct  2 19:21:15 nativespace-cdp sshd[21242]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 19:21:17 nativespace-cdp sshd[21242]: Failed password for root from 103.229.126.13 port 57888 ssh2
Oct  2 19:21:33 nativespace-cdp sshd[21324]: Connection closed by 159.100.136.21 port 47692 [preauth]
Oct  2 19:24:22 nativespace-cdp sshd[21993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.162.161  user=root
Oct  2 19:24:22 nativespace-cdp sshd[21993]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 19:24:24 nativespace-cdp sshd[21993]: Failed password for root from 142.44.162.161 port 48440 ssh2
Oct  2 19:24:24 nativespace-cdp sshd[21993]: Received disconnect from 142.44.162.161 port 48440:11: Bye Bye [preauth]
Oct  2 19:24:24 nativespace-cdp sshd[21993]: Disconnected from 142.44.162.161 port 48440 [preauth]
Oct  2 19:25:04 nativespace-cdp sshd[22178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.162.161  user=root
Oct  2 19:25:04 nativespace-cdp sshd[22178]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 19:25:06 nativespace-cdp sshd[22178]: Failed password for root from 142.44.162.161 port 33064 ssh2
Oct  2 19:25:06 nativespace-cdp sshd[22178]: Received disconnect from 142.44.162.161 port 33064:11: Bye Bye [preauth]
Oct  2 19:25:06 nativespace-cdp sshd[22178]: Disconnected from 142.44.162.161 port 33064 [preauth]
Oct  2 19:25:24 nativespace-cdp sshd[22228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.149.199  user=root
Oct  2 19:25:24 nativespace-cdp sshd[22228]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 19:25:26 nativespace-cdp sshd[22228]: Failed password for root from 27.254.149.199 port 52072 ssh2
Oct  2 19:25:26 nativespace-cdp sshd[22228]: Received disconnect from 27.254.149.199 port 52072:11: Bye Bye [preauth]
Oct  2 19:25:26 nativespace-cdp sshd[22228]: Disconnected from 27.254.149.199 port 52072 [preauth]
Oct  2 19:25:42 nativespace-cdp sshd[22343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.162.161  user=root
Oct  2 19:25:42 nativespace-cdp sshd[22343]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 19:25:44 nativespace-cdp sshd[22343]: Failed password for root from 142.44.162.161 port 45654 ssh2
Oct  2 19:25:44 nativespace-cdp sshd[22343]: Received disconnect from 142.44.162.161 port 45654:11: Bye Bye [preauth]
Oct  2 19:25:44 nativespace-cdp sshd[22343]: Disconnected from 142.44.162.161 port 45654 [preauth]
Oct  2 19:26:33 nativespace-cdp sshd[22583]: Connection closed by 159.100.136.21 port 57770 [preauth]
Oct  2 19:27:52 nativespace-cdp sshd[22785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.149.199  user=root
Oct  2 19:27:52 nativespace-cdp sshd[22785]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 19:27:54 nativespace-cdp sshd[22785]: Failed password for root from 27.254.149.199 port 37888 ssh2
Oct  2 19:27:54 nativespace-cdp sshd[22785]: Received disconnect from 27.254.149.199 port 37888:11: Bye Bye [preauth]
Oct  2 19:27:54 nativespace-cdp sshd[22785]: Disconnected from 27.254.149.199 port 37888 [preauth]
Oct  2 19:28:41 nativespace-cdp sshd[22908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.149.199  user=root
Oct  2 19:28:41 nativespace-cdp sshd[22908]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 19:28:43 nativespace-cdp sshd[22908]: Failed password for root from 27.254.149.199 port 50382 ssh2
Oct  2 19:28:43 nativespace-cdp sshd[22908]: Received disconnect from 27.254.149.199 port 50382:11: Bye Bye [preauth]
Oct  2 19:28:43 nativespace-cdp sshd[22908]: Disconnected from 27.254.149.199 port 50382 [preauth]
Oct  2 19:30:48 nativespace-cdp sshd[23569]: Accepted publickey for root from 185.67.178.249 port 46860 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Oct  2 19:30:48 nativespace-cdp sshd[23569]: pam_unix(sshd:session): session opened for user root by (uid=0)
Oct  2 19:31:33 nativespace-cdp sshd[23747]: Connection closed by 159.100.136.21 port 39642 [preauth]
Oct  2 19:36:33 nativespace-cdp sshd[25007]: Connection closed by 159.100.136.21 port 50014 [preauth]
Oct  2 19:41:44 nativespace-cdp sshd[26224]: Connection closed by 159.100.136.21 port 60006 [preauth]
Oct  2 19:46:33 nativespace-cdp sshd[27282]: Connection closed by 159.100.136.21 port 41952 [preauth]
Oct  2 19:51:33 nativespace-cdp sshd[28510]: Connection closed by 159.100.136.21 port 52000 [preauth]
Oct  2 19:56:33 nativespace-cdp sshd[29500]: Connection closed by 159.100.136.21 port 34122 [preauth]
Oct  2 20:01:33 nativespace-cdp sshd[30779]: Connection closed by 159.100.136.21 port 44166 [preauth]
Oct  2 20:06:33 nativespace-cdp sshd[31998]: Connection closed by 159.100.136.21 port 54568 [preauth]
Oct  2 20:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 20:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:13 nativespace-cdp sudo[32474]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 20:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:13 nativespace-cdp sudo[32478]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 20:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:14 nativespace-cdp sudo[32481]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 20:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:14 nativespace-cdp sudo[32487]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:14 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 20:09:14 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:16 nativespace-cdp sudo[32491]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:16 nativespace-cdp sudo[32501]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:16 nativespace-cdp sudo[32504]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:16 nativespace-cdp sudo[32507]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:16 nativespace-cdp sudo[32511]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:16 nativespace-cdp sudo[32514]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 20:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:16 nativespace-cdp sudo[32517]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 20:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:18 nativespace-cdp sudo[32556]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 20:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:19 nativespace-cdp sudo[32563]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=skyfirec user-2=alexadmin user-3=askhform user-4=stuartge user-5=innovat1 user-6=nativene user-7=nstriton user-8=brighto1 user-9=oneoarco user-10=battlere user-11=vivienn1 user-12=firstre2 user-13=bedfords user-14=bemadonn user-15=newstoda user-16=belle user-17=ggaaorgu user-18=elecleis user-19=milloyco user-20=gilpin user-21=fetch user-22=carsinyo user-23=hubmaster user-24=ianrayne user-25=accooper user-26=thqkgnbz user-27=connectedshoppin user-28=firstres user-29=ultbcrra user-30=seftvta user-31=jonhartl user-32=coursemc user-33=opaiscyx user-34=costestimatorco user-35=firstrel user-36=clarkass user-37=highlegh user-38=southlon user-39=firstred user-40=martsblo user-41=ptkxhsbt user-42=dickemery123 user-43=hhdugcor user-44=lbhyisi user-45=magichat user-46=lakesan1 user-47=brmrjxl
Oct  2 20:09:19 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=atestord user-49=sarafoundation user-50=strathar user-51=wilsonsw user-52=megacards user-53=musorguk user-54=jarvisin user-55=theblack user-56=hodgesonweb user-57=spectrum user-58=agproduc user-59=still user-60=leereyn1 user-61=stephani user-62=markward user-63=booff user-64=foundation user-65=lbscrmod user-66=maflemin user-67=vantagep user-68=athenare user-69=connect9 user-70=ulsukarm user-71=what user-72=oubpgvbx user-73=tstardom user-74=nvihkvu user-75=havantho user-76=sketchy user-77=cath user-78=kategilpin user-79=dancinggardener user-80=stagingerris user-81=ladburyp user-82=design user-83=nove user-84=boldover user-85=crrtipdl user-86=sosevalu user-87=bakery user-88=lucy user-89=attlebor user-90=onlycont user-91=branko user-92=hodgsonmail user-93=outdoorc user-94=ranxterc user-95=romaldki user-96=tomandle user-97=jennimil user-98=mcdermos user-99=chrisdal user-100=david user-101=nbhavers
Oct  2 20:09:19 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=careers user-103=ninejimm user-104=reliable user-105=cambria1 user-106=cathski user-107=cwsocial user-108=paulmca1 user-109=pugwash user-110=howardon user-111=hirefootballgame user-112=courseme user-113=eugincou user-114=leftie user-115=foods user-116=health2045 user-117=fortunaz user-118=nscdp user-119=firstre5 user-120=donnychicago user-121=steakbridieme user-122=philmcph user-123=ctedorgu user-124=lkpier user-125=isleofwi user-126=smrszyqg user-127=barbersh user-128=tigerlet user-129=nomistakes user-130=hidden user-131=fawcettd user-132=burydropin user-133=nsceres user-134=darkstar user-135=eatspam user-136=beauty user-137=dhyana user-138=asandcoc user-139=sibtoncc user-140=zebrapho user-141=bwppodcast user-142=steve feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  2 20:09:19 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 20:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:20 nativespace-cdp sudo[32580]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 20:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:20 nativespace-cdp sudo[32644]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iXvZSEVfQg6WcDT5.~
Oct  2 20:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:20 nativespace-cdp sudo[32650]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iXvZSEVfQg6WcDT5.~'
Oct  2 20:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:20 nativespace-cdp sudo[32653]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-iXvZSEVfQg6WcDT5.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 20:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:20 nativespace-cdp sudo[32657]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 20:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:21 nativespace-cdp sudo[32660]: pam_unix(sudo:session): session closed for user root
Oct  2 20:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 20:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 20:09:22 nativespace-cdp sudo[32677]: pam_unix(sudo:session): session closed for user root
Oct  2 20:10:05 nativespace-cdp sshd[23569]: Received disconnect from 185.67.178.249 port 46860:11: Normal Shutdown
Oct  2 20:10:05 nativespace-cdp sshd[23569]: Disconnected from 185.67.178.249 port 46860
Oct  2 20:10:05 nativespace-cdp sshd[23569]: pam_unix(sshd:session): session closed for user root
Oct  2 20:11:33 nativespace-cdp sshd[801]: Connection closed by 159.100.136.21 port 36420 [preauth]
Oct  2 20:16:33 nativespace-cdp sshd[2054]: Connection closed by 159.100.136.21 port 46700 [preauth]
Oct  2 20:21:33 nativespace-cdp sshd[3443]: Connection closed by 159.100.136.21 port 56736 [preauth]
Oct  2 20:26:33 nativespace-cdp sshd[4451]: Connection closed by 159.100.136.21 port 38860 [preauth]
Oct  2 20:31:33 nativespace-cdp sshd[5670]: Connection closed by 159.100.136.21 port 48966 [preauth]
Oct  2 20:36:33 nativespace-cdp sshd[6973]: Connection closed by 159.100.136.21 port 59306 [preauth]
Oct  2 20:36:59 nativespace-cdp sshd[7028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.76.99  user=root
Oct  2 20:36:59 nativespace-cdp sshd[7028]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:37:01 nativespace-cdp sshd[7028]: Failed password for root from 146.190.76.99 port 33982 ssh2
Oct  2 20:37:01 nativespace-cdp sshd[7028]: Received disconnect from 146.190.76.99 port 33982:11: Bye Bye [preauth]
Oct  2 20:37:01 nativespace-cdp sshd[7028]: Disconnected from 146.190.76.99 port 33982 [preauth]
Oct  2 20:39:57 nativespace-cdp sshd[7629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.228.131.33  user=root
Oct  2 20:39:57 nativespace-cdp sshd[7629]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:39:59 nativespace-cdp sshd[7629]: Failed password for root from 152.228.131.33 port 36262 ssh2
Oct  2 20:39:59 nativespace-cdp sshd[7629]: Received disconnect from 152.228.131.33 port 36262:11: Bye Bye [preauth]
Oct  2 20:39:59 nativespace-cdp sshd[7629]: Disconnected from 152.228.131.33 port 36262 [preauth]
Oct  2 20:40:03 nativespace-cdp sshd[7739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.78.84.26  user=root
Oct  2 20:40:03 nativespace-cdp sshd[7739]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:40:04 nativespace-cdp sshd[7739]: Failed password for root from 181.78.84.26 port 59404 ssh2
Oct  2 20:40:04 nativespace-cdp sshd[7739]: Received disconnect from 181.78.84.26 port 59404:11: Bye Bye [preauth]
Oct  2 20:40:04 nativespace-cdp sshd[7739]: Disconnected from 181.78.84.26 port 59404 [preauth]
Oct  2 20:40:18 nativespace-cdp sshd[7836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.63.174  user=root
Oct  2 20:40:18 nativespace-cdp sshd[7836]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:40:20 nativespace-cdp sshd[7836]: Failed password for root from 68.183.63.174 port 47904 ssh2
Oct  2 20:40:20 nativespace-cdp sshd[7836]: Received disconnect from 68.183.63.174 port 47904:11: Bye Bye [preauth]
Oct  2 20:40:20 nativespace-cdp sshd[7836]: Disconnected from 68.183.63.174 port 47904 [preauth]
Oct  2 20:41:33 nativespace-cdp sshd[8025]: Connection closed by 159.100.136.21 port 41080 [preauth]
Oct  2 20:42:50 nativespace-cdp sshd[8335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.219.92  user=root
Oct  2 20:42:50 nativespace-cdp sshd[8335]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:42:53 nativespace-cdp sshd[8335]: Failed password for root from 192.3.219.92 port 48740 ssh2
Oct  2 20:42:53 nativespace-cdp sshd[8335]: Received disconnect from 192.3.219.92 port 48740:11: Bye Bye [preauth]
Oct  2 20:42:53 nativespace-cdp sshd[8335]: Disconnected from 192.3.219.92 port 48740 [preauth]
Oct  2 20:43:06 nativespace-cdp sshd[8406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.76.99  user=root
Oct  2 20:43:06 nativespace-cdp sshd[8406]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:43:08 nativespace-cdp sshd[8406]: Failed password for root from 146.190.76.99 port 36286 ssh2
Oct  2 20:43:09 nativespace-cdp sshd[8406]: Received disconnect from 146.190.76.99 port 36286:11: Bye Bye [preauth]
Oct  2 20:43:09 nativespace-cdp sshd[8406]: Disconnected from 146.190.76.99 port 36286 [preauth]
Oct  2 20:43:27 nativespace-cdp sshd[8455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.63.174  user=root
Oct  2 20:43:27 nativespace-cdp sshd[8455]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:43:29 nativespace-cdp sshd[8455]: Failed password for root from 68.183.63.174 port 48446 ssh2
Oct  2 20:43:29 nativespace-cdp sshd[8455]: Received disconnect from 68.183.63.174 port 48446:11: Bye Bye [preauth]
Oct  2 20:43:29 nativespace-cdp sshd[8455]: Disconnected from 68.183.63.174 port 48446 [preauth]
Oct  2 20:43:37 nativespace-cdp sshd[8497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.228.131.33  user=root
Oct  2 20:43:37 nativespace-cdp sshd[8497]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:43:40 nativespace-cdp sshd[8497]: Failed password for root from 152.228.131.33 port 51620 ssh2
Oct  2 20:43:40 nativespace-cdp sshd[8497]: Received disconnect from 152.228.131.33 port 51620:11: Bye Bye [preauth]
Oct  2 20:43:40 nativespace-cdp sshd[8497]: Disconnected from 152.228.131.33 port 51620 [preauth]
Oct  2 20:43:44 nativespace-cdp sshd[8515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.78.84.26  user=root
Oct  2 20:43:44 nativespace-cdp sshd[8515]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:43:45 nativespace-cdp sshd[8515]: Failed password for root from 181.78.84.26 port 49668 ssh2
Oct  2 20:43:46 nativespace-cdp sshd[8515]: Received disconnect from 181.78.84.26 port 49668:11: Bye Bye [preauth]
Oct  2 20:43:46 nativespace-cdp sshd[8515]: Disconnected from 181.78.84.26 port 49668 [preauth]
Oct  2 20:43:46 nativespace-cdp sshd[8521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.190.76.99  user=root
Oct  2 20:43:46 nativespace-cdp sshd[8521]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:43:48 nativespace-cdp sshd[8521]: Failed password for root from 146.190.76.99 port 48660 ssh2
Oct  2 20:43:48 nativespace-cdp sshd[8521]: Received disconnect from 146.190.76.99 port 48660:11: Bye Bye [preauth]
Oct  2 20:43:48 nativespace-cdp sshd[8521]: Disconnected from 146.190.76.99 port 48660 [preauth]
Oct  2 20:44:09 nativespace-cdp sshd[8617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.63.174  user=root
Oct  2 20:44:09 nativespace-cdp sshd[8617]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:44:10 nativespace-cdp sshd[8617]: Failed password for root from 68.183.63.174 port 49372 ssh2
Oct  2 20:44:10 nativespace-cdp sshd[8617]: Received disconnect from 68.183.63.174 port 49372:11: Bye Bye [preauth]
Oct  2 20:44:10 nativespace-cdp sshd[8617]: Disconnected from 68.183.63.174 port 49372 [preauth]
Oct  2 20:44:21 nativespace-cdp sshd[8681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.228.131.33  user=root
Oct  2 20:44:21 nativespace-cdp sshd[8681]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:44:22 nativespace-cdp sshd[8681]: Failed password for root from 152.228.131.33 port 50282 ssh2
Oct  2 20:44:34 nativespace-cdp sshd[8741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.78.84.26  user=root
Oct  2 20:44:34 nativespace-cdp sshd[8741]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:44:35 nativespace-cdp sshd[8745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.219.92  user=root
Oct  2 20:44:35 nativespace-cdp sshd[8745]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:44:37 nativespace-cdp sshd[8741]: Failed password for root from 181.78.84.26 port 56260 ssh2
Oct  2 20:44:37 nativespace-cdp sshd[8741]: Received disconnect from 181.78.84.26 port 56260:11: Bye Bye [preauth]
Oct  2 20:44:37 nativespace-cdp sshd[8741]: Disconnected from 181.78.84.26 port 56260 [preauth]
Oct  2 20:44:37 nativespace-cdp sshd[8745]: Failed password for root from 192.3.219.92 port 52558 ssh2
Oct  2 20:44:37 nativespace-cdp sshd[8745]: Received disconnect from 192.3.219.92 port 52558:11: Bye Bye [preauth]
Oct  2 20:44:37 nativespace-cdp sshd[8745]: Disconnected from 192.3.219.92 port 52558 [preauth]
Oct  2 20:45:25 nativespace-cdp sshd[9146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.219.92  user=root
Oct  2 20:45:25 nativespace-cdp sshd[9146]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:45:27 nativespace-cdp sshd[9146]: Failed password for root from 192.3.219.92 port 41928 ssh2
Oct  2 20:46:33 nativespace-cdp sshd[9331]: Connection closed by 159.100.136.21 port 51304 [preauth]
Oct  2 20:51:33 nativespace-cdp sshd[10672]: Connection closed by 159.100.136.21 port 33100 [preauth]
Oct  2 20:53:49 nativespace-cdp sshd[11015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.251.120.199  user=root
Oct  2 20:53:49 nativespace-cdp sshd[11015]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:53:51 nativespace-cdp sshd[11015]: Failed password for root from 60.251.120.199 port 42928 ssh2
Oct  2 20:53:52 nativespace-cdp sshd[11015]: Received disconnect from 60.251.120.199 port 42928:11: Bye Bye [preauth]
Oct  2 20:53:52 nativespace-cdp sshd[11015]: Disconnected from 60.251.120.199 port 42928 [preauth]
Oct  2 20:53:55 nativespace-cdp sshd[11032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.251.120.199  user=root
Oct  2 20:53:55 nativespace-cdp sshd[11032]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 20:53:57 nativespace-cdp sshd[11032]: Failed password for root from 60.251.120.199 port 44902 ssh2
Oct  2 20:53:57 nativespace-cdp sshd[11032]: Received disconnect from 60.251.120.199 port 44902:11: Bye Bye [preauth]
Oct  2 20:53:57 nativespace-cdp sshd[11032]: Disconnected from 60.251.120.199 port 44902 [preauth]
Oct  2 20:56:33 nativespace-cdp sshd[11765]: Connection closed by 159.100.136.21 port 43412 [preauth]
Oct  2 21:01:34 nativespace-cdp sshd[13084]: Connection closed by 159.100.136.21 port 53420 [preauth]
Oct  2 21:06:33 nativespace-cdp sshd[14350]: Connection closed by 159.100.136.21 port 35520 [preauth]
Oct  2 21:07:39 nativespace-cdp sshd[14594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.251.120.199  user=root
Oct  2 21:07:39 nativespace-cdp sshd[14594]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:07:41 nativespace-cdp sshd[14594]: Failed password for root from 60.251.120.199 port 41088 ssh2
Oct  2 21:07:42 nativespace-cdp sshd[14594]: Received disconnect from 60.251.120.199 port 41088:11: Bye Bye [preauth]
Oct  2 21:07:42 nativespace-cdp sshd[14594]: Disconnected from 60.251.120.199 port 41088 [preauth]
Oct  2 21:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 21:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:12 nativespace-cdp sudo[14896]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 21:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:12 nativespace-cdp sudo[14899]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:12 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 21:09:12 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:13 nativespace-cdp sudo[14902]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 21:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:13 nativespace-cdp sudo[14907]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:13 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 21:09:13 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:16 nativespace-cdp sudo[14911]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 21:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:16 nativespace-cdp sudo[14923]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 21:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:16 nativespace-cdp sudo[14926]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 21:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:16 nativespace-cdp sudo[14929]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 21:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:16 nativespace-cdp sudo[14932]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 21:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:16 nativespace-cdp sudo[14936]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:16 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 21:09:16 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:16 nativespace-cdp sudo[14940]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 21:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:20 nativespace-cdp sudo[14956]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 21:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:20 nativespace-cdp sudo[14963]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=ianrayne user-2=accooper user-3=thqkgnbz user-4=connectedshoppin user-5=elecleis user-6=milloyco user-7=gilpin user-8=carsinyo user-9=fetch user-10=hubmaster user-11=costestimatorco user-12=firstrel user-13=clarkass user-14=southlon user-15=highlegh user-16=firstred user-17=firstres user-18=jonhartl user-19=seftvta user-20=ultbcrra user-21=opaiscyx user-22=coursemc user-23=stuartge user-24=askhform user-25=innovat1 user-26=nativene user-27=alexadmin user-28=skyfirec user-29=bedfords user-30=bemadonn user-31=belle user-32=ggaaorgu user-33=newstoda user-34=brighto1 user-35=nstriton user-36=battlere user-37=oneoarco user-38=firstre2 user-39=vivienn1 user-40=still user-41=agproduc user-42=leereyn1 user-43=stephani user-44=jarvisin user-45=theblack user-46=hodgesonweb user-47=spectrum
Oct  2 21:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=ulsukarm user-49=markward user-50=booff user-51=foundation user-52=maflemin user-53=lbscrmod user-54=athenare user-55=connect9 user-56=vantagep user-57=lbhyisi user-58=hhdugcor user-59=magichat user-60=martsblo user-61=ptkxhsbt user-62=dickemery123 user-63=wilsonsw user-64=musorguk user-65=megacards user-66=brmrjxl user-67=lakesan1 user-68=sarafoundation user-69=atestord user-70=strathar user-71=branko user-72=hodgsonmail user-73=outdoorc user-74=ranxterc user-75=romaldki user-76=attlebor user-77=lucy user-78=onlycont user-79=mcdermos user-80=chrisdal user-81=careers user-82=nbhavers user-83=david user-84=tomandle user-85=jennimil user-86=kategilpin user-87=ladburyp user-88=dancinggardener user-89=stagingerris user-90=design user-91=what user-92=tstardom user-93=oubpgvbx user-94=nvihkvu user-95=sketchy user-96=cath user-97=havantho user-98=sosevalu user-99=crrtipdl user-100=bakery user-101=nove
Oct  2 21:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=boldover user-103=eatspam user-104=darkstar user-105=beauty user-106=dhyana user-107=burydropin user-108=fawcettd user-109=nsceres user-110=zebrapho user-111=bwppodcast user-112=steve user-113=sibtoncc user-114=asandcoc user-115=hirefootballgame user-116=courseme user-117=eugincou user-118=ninejimm user-119=reliable user-120=cambria1 user-121=cathski user-122=pugwash user-123=paulmca1 user-124=howardon user-125=cwsocial user-126=smrszyqg user-127=isleofwi user-128=tigerlet user-129=barbersh user-130=hidden user-131=nomistakes user-132=health2045 user-133=fortunaz user-134=foods user-135=leftie user-136=nscdp user-137=philmcph user-138=ctedorgu user-139=donnychicago user-140=firstre5 user-141=steakbridieme user-142=lkpier feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  2 21:09:20 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 21:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:21 nativespace-cdp sudo[14970]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 21:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:21 nativespace-cdp sudo[14976]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-i3v5vPCnqpuUZFB8.~
Oct  2 21:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:21 nativespace-cdp sudo[14979]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:21 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-i3v5vPCnqpuUZFB8.~'
Oct  2 21:09:21 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:21 nativespace-cdp sudo[14982]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-i3v5vPCnqpuUZFB8.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 21:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:22 nativespace-cdp sudo[14987]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:22 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 21:09:22 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:22 nativespace-cdp sudo[14990]: pam_unix(sudo:session): session closed for user root
Oct  2 21:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 21:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 21:09:27 nativespace-cdp sudo[15018]: pam_unix(sudo:session): session closed for user root
Oct  2 21:11:33 nativespace-cdp sshd[15842]: Connection closed by 159.100.136.21 port 45542 [preauth]
Oct  2 21:16:33 nativespace-cdp sshd[17839]: Connection closed by 159.100.136.21 port 55746 [preauth]
Oct  2 21:17:49 nativespace-cdp sshd[18041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.171.151  user=root
Oct  2 21:17:49 nativespace-cdp sshd[18041]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:17:51 nativespace-cdp sshd[18041]: Failed password for root from 164.92.171.151 port 56532 ssh2
Oct  2 21:17:51 nativespace-cdp sshd[18041]: Received disconnect from 164.92.171.151 port 56532:11: Bye Bye [preauth]
Oct  2 21:17:51 nativespace-cdp sshd[18041]: Disconnected from 164.92.171.151 port 56532 [preauth]
Oct  2 21:19:53 nativespace-cdp sshd[18515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.146.196  user=root
Oct  2 21:19:53 nativespace-cdp sshd[18515]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:19:55 nativespace-cdp sshd[18515]: Failed password for root from 159.65.146.196 port 47268 ssh2
Oct  2 21:19:56 nativespace-cdp sshd[18515]: Received disconnect from 159.65.146.196 port 47268:11: Bye Bye [preauth]
Oct  2 21:19:56 nativespace-cdp sshd[18515]: Disconnected from 159.65.146.196 port 47268 [preauth]
Oct  2 21:20:50 nativespace-cdp sshd[18812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.77.221  user=root
Oct  2 21:20:50 nativespace-cdp sshd[18812]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:20:52 nativespace-cdp sshd[18812]: Failed password for root from 128.199.77.221 port 59528 ssh2
Oct  2 21:20:52 nativespace-cdp sshd[18812]: Received disconnect from 128.199.77.221 port 59528:11: Bye Bye [preauth]
Oct  2 21:20:52 nativespace-cdp sshd[18812]: Disconnected from 128.199.77.221 port 59528 [preauth]
Oct  2 21:21:07 nativespace-cdp sshd[18926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.81.211.213  user=root
Oct  2 21:21:07 nativespace-cdp sshd[18926]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:21:09 nativespace-cdp sshd[18926]: Failed password for root from 192.81.211.213 port 33832 ssh2
Oct  2 21:21:09 nativespace-cdp sshd[18926]: Received disconnect from 192.81.211.213 port 33832:11: Bye Bye [preauth]
Oct  2 21:21:09 nativespace-cdp sshd[18926]: Disconnected from 192.81.211.213 port 33832 [preauth]
Oct  2 21:21:33 nativespace-cdp sshd[19001]: Connection closed by 159.100.136.21 port 37516 [preauth]
Oct  2 21:23:07 nativespace-cdp sshd[19278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.70.198  user=root
Oct  2 21:23:07 nativespace-cdp sshd[19278]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:23:10 nativespace-cdp sshd[19278]: Failed password for root from 36.67.70.198 port 51716 ssh2
Oct  2 21:23:10 nativespace-cdp sshd[19278]: Received disconnect from 36.67.70.198 port 51716:11: Bye Bye [preauth]
Oct  2 21:23:10 nativespace-cdp sshd[19278]: Disconnected from 36.67.70.198 port 51716 [preauth]
Oct  2 21:23:34 nativespace-cdp sshd[19356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.171.151  user=root
Oct  2 21:23:34 nativespace-cdp sshd[19356]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:23:37 nativespace-cdp sshd[19356]: Failed password for root from 164.92.171.151 port 60364 ssh2
Oct  2 21:23:37 nativespace-cdp sshd[19356]: Received disconnect from 164.92.171.151 port 60364:11: Bye Bye [preauth]
Oct  2 21:23:37 nativespace-cdp sshd[19356]: Disconnected from 164.92.171.151 port 60364 [preauth]
Oct  2 21:23:52 nativespace-cdp sshd[19404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.146.196  user=root
Oct  2 21:23:52 nativespace-cdp sshd[19404]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:23:54 nativespace-cdp sshd[19404]: Failed password for root from 159.65.146.196 port 37702 ssh2
Oct  2 21:23:54 nativespace-cdp sshd[19404]: Received disconnect from 159.65.146.196 port 37702:11: Bye Bye [preauth]
Oct  2 21:23:54 nativespace-cdp sshd[19404]: Disconnected from 159.65.146.196 port 37702 [preauth]
Oct  2 21:24:10 nativespace-cdp sshd[19463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.77.221  user=root
Oct  2 21:24:10 nativespace-cdp sshd[19463]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:24:10 nativespace-cdp sshd[19468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.171.151  user=root
Oct  2 21:24:10 nativespace-cdp sshd[19468]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:24:12 nativespace-cdp sshd[19463]: Failed password for root from 128.199.77.221 port 40546 ssh2
Oct  2 21:24:12 nativespace-cdp sshd[19468]: Failed password for root from 164.92.171.151 port 45974 ssh2
Oct  2 21:24:12 nativespace-cdp sshd[19468]: Received disconnect from 164.92.171.151 port 45974:11: Bye Bye [preauth]
Oct  2 21:24:12 nativespace-cdp sshd[19468]: Disconnected from 164.92.171.151 port 45974 [preauth]
Oct  2 21:24:12 nativespace-cdp sshd[19463]: Received disconnect from 128.199.77.221 port 40546:11: Bye Bye [preauth]
Oct  2 21:24:12 nativespace-cdp sshd[19463]: Disconnected from 128.199.77.221 port 40546 [preauth]
Oct  2 21:24:17 nativespace-cdp sshd[19508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.70.198  user=root
Oct  2 21:24:17 nativespace-cdp sshd[19508]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:24:17 nativespace-cdp sshd[19513]: Invalid user ubuntu from 192.81.211.213 port 39402
Oct  2 21:24:17 nativespace-cdp sshd[19513]: input_userauth_request: invalid user ubuntu [preauth]
Oct  2 21:24:17 nativespace-cdp sshd[19513]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 21:24:17 nativespace-cdp sshd[19513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.81.211.213
Oct  2 21:24:18 nativespace-cdp sshd[19508]: Failed password for root from 36.67.70.198 port 40914 ssh2
Oct  2 21:24:18 nativespace-cdp sshd[19508]: Received disconnect from 36.67.70.198 port 40914:11: Bye Bye [preauth]
Oct  2 21:24:18 nativespace-cdp sshd[19508]: Disconnected from 36.67.70.198 port 40914 [preauth]
Oct  2 21:24:19 nativespace-cdp sshd[19513]: Failed password for invalid user ubuntu from 192.81.211.213 port 39402 ssh2
Oct  2 21:24:19 nativespace-cdp sshd[19513]: Received disconnect from 192.81.211.213 port 39402:11: Bye Bye [preauth]
Oct  2 21:24:19 nativespace-cdp sshd[19513]: Disconnected from 192.81.211.213 port 39402 [preauth]
Oct  2 21:24:28 nativespace-cdp sshd[6228]: pam_unix(sshd:session): session closed for user root
Oct  2 21:24:34 nativespace-cdp sshd[19543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.146.196  user=root
Oct  2 21:24:34 nativespace-cdp sshd[19543]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:24:36 nativespace-cdp sshd[19543]: Failed password for root from 159.65.146.196 port 54648 ssh2
Oct  2 21:24:36 nativespace-cdp sshd[19543]: Received disconnect from 159.65.146.196 port 54648:11: Bye Bye [preauth]
Oct  2 21:24:36 nativespace-cdp sshd[19543]: Disconnected from 159.65.146.196 port 54648 [preauth]
Oct  2 21:24:54 nativespace-cdp sshd[19706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.81.211.213  user=root
Oct  2 21:24:54 nativespace-cdp sshd[19706]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:24:56 nativespace-cdp sshd[19706]: Failed password for root from 192.81.211.213 port 52288 ssh2
Oct  2 21:24:56 nativespace-cdp sshd[19706]: Received disconnect from 192.81.211.213 port 52288:11: Bye Bye [preauth]
Oct  2 21:24:56 nativespace-cdp sshd[19706]: Disconnected from 192.81.211.213 port 52288 [preauth]
Oct  2 21:24:57 nativespace-cdp sshd[19714]: Invalid user ubuntu from 128.199.77.221 port 55102
Oct  2 21:24:57 nativespace-cdp sshd[19714]: input_userauth_request: invalid user ubuntu [preauth]
Oct  2 21:24:57 nativespace-cdp sshd[19714]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 21:24:57 nativespace-cdp sshd[19714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.77.221
Oct  2 21:24:59 nativespace-cdp sshd[19714]: Failed password for invalid user ubuntu from 128.199.77.221 port 55102 ssh2
Oct  2 21:24:59 nativespace-cdp sshd[19714]: Received disconnect from 128.199.77.221 port 55102:11: Bye Bye [preauth]
Oct  2 21:24:59 nativespace-cdp sshd[19714]: Disconnected from 128.199.77.221 port 55102 [preauth]
Oct  2 21:25:05 nativespace-cdp sshd[19865]: Invalid user ubuntu from 36.67.70.198 port 53336
Oct  2 21:25:05 nativespace-cdp sshd[19865]: input_userauth_request: invalid user ubuntu [preauth]
Oct  2 21:25:05 nativespace-cdp sshd[19865]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 21:25:05 nativespace-cdp sshd[19865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.70.198
Oct  2 21:25:07 nativespace-cdp sshd[19865]: Failed password for invalid user ubuntu from 36.67.70.198 port 53336 ssh2
Oct  2 21:25:08 nativespace-cdp sshd[19865]: Received disconnect from 36.67.70.198 port 53336:11: Bye Bye [preauth]
Oct  2 21:25:08 nativespace-cdp sshd[19865]: Disconnected from 36.67.70.198 port 53336 [preauth]
Oct  2 21:26:33 nativespace-cdp sshd[20277]: Connection closed by 159.100.136.21 port 47784 [preauth]
Oct  2 21:26:54 nativespace-cdp sshd[20337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.87.166.141  user=root
Oct  2 21:26:54 nativespace-cdp sshd[20337]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:26:56 nativespace-cdp sshd[20337]: Failed password for root from 186.87.166.141 port 50104 ssh2
Oct  2 21:26:56 nativespace-cdp sshd[20337]: Received disconnect from 186.87.166.141 port 50104:11: Bye Bye [preauth]
Oct  2 21:26:56 nativespace-cdp sshd[20337]: Disconnected from 186.87.166.141 port 50104 [preauth]
Oct  2 21:31:06 nativespace-cdp sshd[21456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.87.166.141  user=root
Oct  2 21:31:06 nativespace-cdp sshd[21456]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:31:08 nativespace-cdp sshd[21456]: Failed password for root from 186.87.166.141 port 34430 ssh2
Oct  2 21:31:08 nativespace-cdp sshd[21456]: Received disconnect from 186.87.166.141 port 34430:11: Bye Bye [preauth]
Oct  2 21:31:08 nativespace-cdp sshd[21456]: Disconnected from 186.87.166.141 port 34430 [preauth]
Oct  2 21:31:33 nativespace-cdp sshd[21520]: Connection closed by 159.100.136.21 port 57870 [preauth]
Oct  2 21:31:54 nativespace-cdp sshd[21613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.87.166.141  user=root
Oct  2 21:31:54 nativespace-cdp sshd[21613]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:31:56 nativespace-cdp sshd[21613]: Failed password for root from 186.87.166.141 port 46640 ssh2
Oct  2 21:36:33 nativespace-cdp sshd[22975]: Connection closed by 159.100.136.21 port 39934 [preauth]
Oct  2 21:39:19 nativespace-cdp sshd[23455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.67.146  user=root
Oct  2 21:39:19 nativespace-cdp sshd[23455]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:39:21 nativespace-cdp sshd[23455]: Failed password for root from 104.131.67.146 port 56492 ssh2
Oct  2 21:39:21 nativespace-cdp sshd[23455]: Received disconnect from 104.131.67.146 port 56492:11: Bye Bye [preauth]
Oct  2 21:39:21 nativespace-cdp sshd[23455]: Disconnected from 104.131.67.146 port 56492 [preauth]
Oct  2 21:40:19 nativespace-cdp sshd[23814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.61.151  user=root
Oct  2 21:40:19 nativespace-cdp sshd[23814]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:40:21 nativespace-cdp sshd[23814]: Failed password for root from 151.80.61.151 port 40892 ssh2
Oct  2 21:40:21 nativespace-cdp sshd[23814]: Received disconnect from 151.80.61.151 port 40892:11: Bye Bye [preauth]
Oct  2 21:40:21 nativespace-cdp sshd[23814]: Disconnected from 151.80.61.151 port 40892 [preauth]
Oct  2 21:41:33 nativespace-cdp sshd[24041]: Connection closed by 159.100.136.21 port 49924 [preauth]
Oct  2 21:41:43 nativespace-cdp sshd[24070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.174.115.172  user=root
Oct  2 21:41:43 nativespace-cdp sshd[24070]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:41:46 nativespace-cdp sshd[24070]: Failed password for root from 103.174.115.172 port 56404 ssh2
Oct  2 21:41:46 nativespace-cdp sshd[24070]: Received disconnect from 103.174.115.172 port 56404:11: Bye Bye [preauth]
Oct  2 21:41:46 nativespace-cdp sshd[24070]: Disconnected from 103.174.115.172 port 56404 [preauth]
Oct  2 21:42:57 nativespace-cdp sshd[24269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.89.49  user=root
Oct  2 21:42:57 nativespace-cdp sshd[24269]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:42:58 nativespace-cdp sshd[24274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.147.159.91  user=root
Oct  2 21:42:58 nativespace-cdp sshd[24274]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:42:59 nativespace-cdp sshd[24269]: Failed password for root from 164.92.89.49 port 41258 ssh2
Oct  2 21:42:59 nativespace-cdp sshd[24269]: Received disconnect from 164.92.89.49 port 41258:11: Bye Bye [preauth]
Oct  2 21:42:59 nativespace-cdp sshd[24269]: Disconnected from 164.92.89.49 port 41258 [preauth]
Oct  2 21:43:00 nativespace-cdp sshd[24274]: Failed password for root from 103.147.159.91 port 47090 ssh2
Oct  2 21:43:00 nativespace-cdp sshd[24274]: Received disconnect from 103.147.159.91 port 47090:11: Bye Bye [preauth]
Oct  2 21:43:00 nativespace-cdp sshd[24274]: Disconnected from 103.147.159.91 port 47090 [preauth]
Oct  2 21:44:06 nativespace-cdp sshd[24490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.83.169  user=root
Oct  2 21:44:06 nativespace-cdp sshd[24490]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:44:08 nativespace-cdp sshd[24490]: Failed password for root from 187.72.83.169 port 38766 ssh2
Oct  2 21:44:08 nativespace-cdp sshd[24490]: Received disconnect from 187.72.83.169 port 38766:11: Bye Bye [preauth]
Oct  2 21:44:08 nativespace-cdp sshd[24490]: Disconnected from 187.72.83.169 port 38766 [preauth]
Oct  2 21:44:33 nativespace-cdp sshd[24576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.61.151  user=root
Oct  2 21:44:33 nativespace-cdp sshd[24576]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:44:35 nativespace-cdp sshd[24576]: Failed password for root from 151.80.61.151 port 41090 ssh2
Oct  2 21:44:35 nativespace-cdp sshd[24576]: Received disconnect from 151.80.61.151 port 41090:11: Bye Bye [preauth]
Oct  2 21:44:35 nativespace-cdp sshd[24576]: Disconnected from 151.80.61.151 port 41090 [preauth]
Oct  2 21:44:37 nativespace-cdp sshd[24586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.237.162.20  user=root
Oct  2 21:44:37 nativespace-cdp sshd[24586]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:44:39 nativespace-cdp sshd[24586]: Failed password for root from 1.237.162.20 port 53820 ssh2
Oct  2 21:44:39 nativespace-cdp sshd[24586]: Received disconnect from 1.237.162.20 port 53820:11: Bye Bye [preauth]
Oct  2 21:44:39 nativespace-cdp sshd[24586]: Disconnected from 1.237.162.20 port 53820 [preauth]
Oct  2 21:44:47 nativespace-cdp sshd[24614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.67.146  user=root
Oct  2 21:44:47 nativespace-cdp sshd[24614]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:44:48 nativespace-cdp sshd[24614]: Failed password for root from 104.131.67.146 port 40162 ssh2
Oct  2 21:44:48 nativespace-cdp sshd[24614]: Received disconnect from 104.131.67.146 port 40162:11: Bye Bye [preauth]
Oct  2 21:44:48 nativespace-cdp sshd[24614]: Disconnected from 104.131.67.146 port 40162 [preauth]
Oct  2 21:44:51 nativespace-cdp sshd[24622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.89.49  user=root
Oct  2 21:44:51 nativespace-cdp sshd[24622]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:44:54 nativespace-cdp sshd[24622]: Failed password for root from 164.92.89.49 port 43642 ssh2
Oct  2 21:44:54 nativespace-cdp sshd[24622]: Received disconnect from 164.92.89.49 port 43642:11: Bye Bye [preauth]
Oct  2 21:44:54 nativespace-cdp sshd[24622]: Disconnected from 164.92.89.49 port 43642 [preauth]
Oct  2 21:45:09 nativespace-cdp sshd[24898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.61.151  user=root
Oct  2 21:45:09 nativespace-cdp sshd[24898]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:45:12 nativespace-cdp sshd[24898]: Failed password for root from 151.80.61.151 port 41144 ssh2
Oct  2 21:45:24 nativespace-cdp sshd[24967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.237.162.20  user=root
Oct  2 21:45:24 nativespace-cdp sshd[24967]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:45:26 nativespace-cdp sshd[24976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.67.146  user=root
Oct  2 21:45:26 nativespace-cdp sshd[24976]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:45:26 nativespace-cdp sshd[24967]: Failed password for root from 1.237.162.20 port 51572 ssh2
Oct  2 21:45:26 nativespace-cdp sshd[24967]: Received disconnect from 1.237.162.20 port 51572:11: Bye Bye [preauth]
Oct  2 21:45:26 nativespace-cdp sshd[24967]: Disconnected from 1.237.162.20 port 51572 [preauth]
Oct  2 21:45:26 nativespace-cdp sshd[24973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.83.169  user=root
Oct  2 21:45:26 nativespace-cdp sshd[24973]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:45:28 nativespace-cdp sshd[24976]: Failed password for root from 104.131.67.146 port 35622 ssh2
Oct  2 21:45:28 nativespace-cdp sshd[24976]: Received disconnect from 104.131.67.146 port 35622:11: Bye Bye [preauth]
Oct  2 21:45:28 nativespace-cdp sshd[24976]: Disconnected from 104.131.67.146 port 35622 [preauth]
Oct  2 21:45:28 nativespace-cdp sshd[24973]: Failed password for root from 187.72.83.169 port 55020 ssh2
Oct  2 21:45:29 nativespace-cdp sshd[24973]: Received disconnect from 187.72.83.169 port 55020:11: Bye Bye [preauth]
Oct  2 21:45:29 nativespace-cdp sshd[24973]: Disconnected from 187.72.83.169 port 55020 [preauth]
Oct  2 21:45:32 nativespace-cdp sshd[25016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.89.49  user=root
Oct  2 21:45:32 nativespace-cdp sshd[25016]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:45:34 nativespace-cdp sshd[25016]: Failed password for root from 164.92.89.49 port 57378 ssh2
Oct  2 21:45:35 nativespace-cdp sshd[25016]: Received disconnect from 164.92.89.49 port 57378:11: Bye Bye [preauth]
Oct  2 21:45:35 nativespace-cdp sshd[25016]: Disconnected from 164.92.89.49 port 57378 [preauth]
Oct  2 21:46:11 nativespace-cdp sshd[25183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.237.162.20  user=root
Oct  2 21:46:11 nativespace-cdp sshd[25183]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:46:13 nativespace-cdp sshd[25183]: Failed password for root from 1.237.162.20 port 59638 ssh2
Oct  2 21:46:13 nativespace-cdp sshd[25183]: Received disconnect from 1.237.162.20 port 59638:11: Bye Bye [preauth]
Oct  2 21:46:13 nativespace-cdp sshd[25183]: Disconnected from 1.237.162.20 port 59638 [preauth]
Oct  2 21:46:16 nativespace-cdp sshd[25196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.83.169  user=root
Oct  2 21:46:16 nativespace-cdp sshd[25196]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:46:18 nativespace-cdp sshd[25196]: Failed password for root from 187.72.83.169 port 39242 ssh2
Oct  2 21:46:18 nativespace-cdp sshd[25196]: Received disconnect from 187.72.83.169 port 39242:11: Bye Bye [preauth]
Oct  2 21:46:18 nativespace-cdp sshd[25196]: Disconnected from 187.72.83.169 port 39242 [preauth]
Oct  2 21:46:27 nativespace-cdp sshd[25268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.88.74  user=root
Oct  2 21:46:27 nativespace-cdp sshd[25268]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:46:30 nativespace-cdp sshd[25268]: Failed password for root from 137.184.88.74 port 40930 ssh2
Oct  2 21:46:30 nativespace-cdp sshd[25268]: Received disconnect from 137.184.88.74 port 40930:11: Bye Bye [preauth]
Oct  2 21:46:30 nativespace-cdp sshd[25268]: Disconnected from 137.184.88.74 port 40930 [preauth]
Oct  2 21:46:33 nativespace-cdp sshd[25282]: Connection closed by 159.100.136.21 port 60164 [preauth]
Oct  2 21:48:21 nativespace-cdp sshd[25555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.88.74  user=root
Oct  2 21:48:21 nativespace-cdp sshd[25555]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:48:23 nativespace-cdp sshd[25555]: Failed password for root from 137.184.88.74 port 40534 ssh2
Oct  2 21:48:24 nativespace-cdp sshd[25555]: Received disconnect from 137.184.88.74 port 40534:11: Bye Bye [preauth]
Oct  2 21:48:24 nativespace-cdp sshd[25555]: Disconnected from 137.184.88.74 port 40534 [preauth]
Oct  2 21:48:59 nativespace-cdp sshd[25658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.88.74  user=root
Oct  2 21:48:59 nativespace-cdp sshd[25658]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 21:49:01 nativespace-cdp sshd[25658]: Failed password for root from 137.184.88.74 port 37666 ssh2
Oct  2 21:49:01 nativespace-cdp sshd[25658]: Received disconnect from 137.184.88.74 port 37666:11: Bye Bye [preauth]
Oct  2 21:49:01 nativespace-cdp sshd[25658]: Disconnected from 137.184.88.74 port 37666 [preauth]
Oct  2 21:51:33 nativespace-cdp sshd[26566]: Connection closed by 159.100.136.21 port 41974 [preauth]
Oct  2 21:56:33 nativespace-cdp sshd[27600]: Connection closed by 159.100.136.21 port 52316 [preauth]
Oct  2 22:01:33 nativespace-cdp sshd[29019]: Connection closed by 159.100.136.21 port 34094 [preauth]
Oct  2 22:03:47 nativespace-cdp sshd[29404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.39.69  user=root
Oct  2 22:03:47 nativespace-cdp sshd[29404]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:03:49 nativespace-cdp sshd[29404]: Failed password for root from 103.31.39.69 port 34796 ssh2
Oct  2 22:03:49 nativespace-cdp sshd[29404]: Received disconnect from 103.31.39.69 port 34796:11: Bye Bye [preauth]
Oct  2 22:03:49 nativespace-cdp sshd[29404]: Disconnected from 103.31.39.69 port 34796 [preauth]
Oct  2 22:04:41 nativespace-cdp sshd[29596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.20.68.81  user=root
Oct  2 22:04:41 nativespace-cdp sshd[29596]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:04:43 nativespace-cdp sshd[29596]: Failed password for root from 196.20.68.81 port 39476 ssh2
Oct  2 22:04:43 nativespace-cdp sshd[29596]: Received disconnect from 196.20.68.81 port 39476:11: Bye Bye [preauth]
Oct  2 22:04:43 nativespace-cdp sshd[29596]: Disconnected from 196.20.68.81 port 39476 [preauth]
Oct  2 22:06:04 nativespace-cdp sshd[30195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.196  user=root
Oct  2 22:06:04 nativespace-cdp sshd[30195]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:06:06 nativespace-cdp sshd[30195]: Failed password for root from 171.22.31.196 port 55032 ssh2
Oct  2 22:06:06 nativespace-cdp sshd[30195]: Received disconnect from 171.22.31.196 port 55032:11: Bye Bye [preauth]
Oct  2 22:06:06 nativespace-cdp sshd[30195]: Disconnected from 171.22.31.196 port 55032 [preauth]
Oct  2 22:06:33 nativespace-cdp sshd[30259]: Connection closed by 159.100.136.21 port 44446 [preauth]
Oct  2 22:08:10 nativespace-cdp sshd[30594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.158.34  user=root
Oct  2 22:08:10 nativespace-cdp sshd[30594]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:08:12 nativespace-cdp sshd[30594]: Failed password for root from 51.77.158.34 port 45140 ssh2
Oct  2 22:08:12 nativespace-cdp sshd[30594]: Received disconnect from 51.77.158.34 port 45140:11: Bye Bye [preauth]
Oct  2 22:08:12 nativespace-cdp sshd[30594]: Disconnected from 51.77.158.34 port 45140 [preauth]
Oct  2 22:08:44 nativespace-cdp sshd[30694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.196  user=root
Oct  2 22:08:44 nativespace-cdp sshd[30694]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:08:46 nativespace-cdp sshd[30694]: Failed password for root from 171.22.31.196 port 54774 ssh2
Oct  2 22:08:46 nativespace-cdp sshd[30694]: Received disconnect from 171.22.31.196 port 54774:11: Bye Bye [preauth]
Oct  2 22:08:46 nativespace-cdp sshd[30694]: Disconnected from 171.22.31.196 port 54774 [preauth]
Oct  2 22:08:50 nativespace-cdp sshd[30705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.108.60.101  user=root
Oct  2 22:08:50 nativespace-cdp sshd[30705]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:08:53 nativespace-cdp sshd[30705]: Failed password for root from 190.108.60.101 port 55742 ssh2
Oct  2 22:08:53 nativespace-cdp sshd[30705]: Received disconnect from 190.108.60.101 port 55742:11: Bye Bye [preauth]
Oct  2 22:08:53 nativespace-cdp sshd[30705]: Disconnected from 190.108.60.101 port 55742 [preauth]
Oct  2 22:08:59 nativespace-cdp sshd[30743]: Invalid user mysql1 from 196.20.68.81 port 53990
Oct  2 22:08:59 nativespace-cdp sshd[30743]: input_userauth_request: invalid user mysql1 [preauth]
Oct  2 22:08:59 nativespace-cdp sshd[30743]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 22:08:59 nativespace-cdp sshd[30743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.20.68.81
Oct  2 22:09:00 nativespace-cdp sshd[30760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.158.34  user=root
Oct  2 22:09:00 nativespace-cdp sshd[30760]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:09:01 nativespace-cdp sshd[30743]: Failed password for invalid user mysql1 from 196.20.68.81 port 53990 ssh2
Oct  2 22:09:01 nativespace-cdp sshd[30743]: Received disconnect from 196.20.68.81 port 53990:11: Bye Bye [preauth]
Oct  2 22:09:01 nativespace-cdp sshd[30743]: Disconnected from 196.20.68.81 port 53990 [preauth]
Oct  2 22:09:03 nativespace-cdp sshd[30760]: Failed password for root from 51.77.158.34 port 52964 ssh2
Oct  2 22:09:03 nativespace-cdp sshd[30760]: Received disconnect from 51.77.158.34 port 52964:11: Bye Bye [preauth]
Oct  2 22:09:03 nativespace-cdp sshd[30760]: Disconnected from 51.77.158.34 port 52964 [preauth]
Oct  2 22:09:18 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/cagefs/exclude/wptoolkituserlist
Oct  2 22:09:18 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:19 nativespace-cdp sudo[30843]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/exclude/wptoolkituserlist
Oct  2 22:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:19 nativespace-cdp sudo[30847]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:19 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cagefsctl --cagefs-status
Oct  2 22:09:19 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:20 nativespace-cdp sudo[30850]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /etc/cagefs/cagefs.mp
Oct  2 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:20 nativespace-cdp sudo[30859]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:20 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 package_manager_get_package_info package-0=lve-wrappers --output=json
Oct  2 22:09:20 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:21 nativespace-cdp sshd[30866]: Invalid user mysql1 from 171.22.31.196 port 53256
Oct  2 22:09:21 nativespace-cdp sshd[30866]: input_userauth_request: invalid user mysql1 [preauth]
Oct  2 22:09:21 nativespace-cdp sshd[30866]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 22:09:21 nativespace-cdp sshd[30866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.22.31.196
Oct  2 22:09:22 nativespace-cdp sshd[30866]: Failed password for invalid user mysql1 from 171.22.31.196 port 53256 ssh2
Oct  2 22:09:22 nativespace-cdp sshd[30866]: Received disconnect from 171.22.31.196 port 53256:11: Bye Bye [preauth]
Oct  2 22:09:22 nativespace-cdp sshd[30866]: Disconnected from 171.22.31.196 port 53256 [preauth]
Oct  2 22:09:23 nativespace-cdp sudo[30863]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:23 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /opt/psa
Oct  2 22:09:23 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:23 nativespace-cdp sudo[30902]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/psa
Oct  2 22:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:24 nativespace-cdp sudo[30905]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/psa
Oct  2 22:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:24 nativespace-cdp sudo[30908]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /usr/local/cpanel
Oct  2 22:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:24 nativespace-cdp sudo[30912]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/cat /usr/local/cpanel/version
Oct  2 22:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:24 nativespace-cdp sudo[30916]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:24 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c readlink /usr/local/cpanel/server.type
Oct  2 22:09:24 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:24 nativespace-cdp sudo[30919]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:25 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_domain_info --output=json
Oct  2 22:09:25 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:26 nativespace-cdp sudo[30929]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 listaccts --output=json
Oct  2 22:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:26 nativespace-cdp sudo[30935]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:26 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_users_features_settings user-1=nativene user-2=innovat1 user-3=askhform user-4=stuartge user-5=skyfirec user-6=alexadmin user-7=belle user-8=ggaaorgu user-9=newstoda user-10=bemadonn user-11=bedfords user-12=firstre2 user-13=vivienn1 user-14=battlere user-15=oneoarco user-16=brighto1 user-17=nstriton user-18=connectedshoppin user-19=thqkgnbz user-20=accooper user-21=ianrayne user-22=hubmaster user-23=carsinyo user-24=fetch user-25=gilpin user-26=milloyco user-27=elecleis user-28=firstred user-29=southlon user-30=highlegh user-31=firstrel user-32=clarkass user-33=costestimatorco user-34=coursemc user-35=opaiscyx user-36=seftvta user-37=jonhartl user-38=ultbcrra user-39=firstres user-40=magichat user-41=lbhyisi user-42=hhdugcor user-43=dickemery123 user-44=ptkxhsbt user-45=martsblo user-46=musorguk user-47=megacards
Oct  2 22:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-48=wilsonsw user-49=strathar user-50=sarafoundation user-51=atestord user-52=brmrjxl user-53=lakesan1 user-54=stephani user-55=leereyn1 user-56=still user-57=agproduc user-58=spectrum user-59=theblack user-60=hodgesonweb user-61=jarvisin user-62=ulsukarm user-63=athenare user-64=connect9 user-65=vantagep user-66=maflemin user-67=lbscrmod user-68=foundation user-69=booff user-70=markward user-71=design user-72=ladburyp user-73=stagingerris user-74=dancinggardener user-75=kategilpin user-76=sketchy user-77=cath user-78=havantho user-79=nvihkvu user-80=tstardom user-81=oubpgvbx user-82=what user-83=bakery user-84=sosevalu user-85=crrtipdl user-86=boldover user-87=nove user-88=romaldki user-89=hodgsonmail user-90=outdoorc user-91=ranxterc user-92=branko user-93=onlycont user-94=attlebor user-95=lucy user-96=nbhavers user-97=careers user-98=david user-99=chrisdal user-100=mcdermos user-101=jennimil
Oct  2 22:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) user-102=tomandle user-103=eugincou user-104=courseme user-105=hirefootballgame user-106=paulmca1 user-107=pugwash user-108=howardon user-109=cwsocial user-110=cambria1 user-111=cathski user-112=ninejimm user-113=reliable user-114=hidden user-115=nomistakes user-116=barbersh user-117=tigerlet user-118=isleofwi user-119=smrszyqg user-120=lkpier user-121=philmcph user-122=ctedorgu user-123=donnychicago user-124=firstre5 user-125=steakbridieme user-126=nscdp user-127=fortunaz user-128=health2045 user-129=leftie user-130=foods user-131=dhyana user-132=beauty user-133=eatspam user-134=darkstar user-135=nsceres user-136=burydropin user-137=fawcettd user-138=steve user-139=bwppodcast user-140=zebrapho user-141=asandcoc user-142=sibtoncc feature-1=filemanager feature-2=backup feature-3=cron feature-4=phpmyadmin feature-5=mysql feature-6=multiphp feature-7=addondomains feature-8=subdomains feature-9=webprotect
Oct  2 22:09:26 nativespace-cdp sudo: wp-toolkit : (command continued) feature-10=sslinstall feature-11=wp-toolkit feature-12=wp-toolkit-deluxe feature-13=lvephpsel --output=json
Oct  2 22:09:26 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:27 nativespace-cdp sudo[30940]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -f /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 22:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:27 nativespace-cdp sudo[30948]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/test -e /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tTUL4GMe3FNUE721.~
Oct  2 22:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:27 nativespace-cdp sudo[30951]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c cat > '/etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tTUL4GMe3FNUE721.~'
Oct  2 22:09:27 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:27 nativespace-cdp sudo[30954]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:27 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/mv /etc/logrotate.d/wp-toolkit-action-logs-wpt-tmp-tTUL4GMe3FNUE721.~ /etc/logrotate.d/wp-toolkit-action-logs.~
Oct  2 22:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:28 nativespace-cdp sudo[30958]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c mv '/etc/logrotate.d/wp-toolkit-action-logs.~' /etc/logrotate.d/wp-toolkit-action-logs
Oct  2 22:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:28 nativespace-cdp sudo[30961]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:28 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_licenses --output=json
Oct  2 22:09:28 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:28 nativespace-cdp sudo[30964]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:38 nativespace-cdp sshd[30999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.158.34  user=root
Oct  2 22:09:38 nativespace-cdp sshd[30999]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:09:40 nativespace-cdp sshd[31009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.20.68.81  user=root
Oct  2 22:09:40 nativespace-cdp sshd[31009]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:09:41 nativespace-cdp sshd[30999]: Failed password for root from 51.77.158.34 port 47052 ssh2
Oct  2 22:09:41 nativespace-cdp sshd[30999]: Received disconnect from 51.77.158.34 port 47052:11: Bye Bye [preauth]
Oct  2 22:09:41 nativespace-cdp sshd[30999]: Disconnected from 51.77.158.34 port 47052 [preauth]
Oct  2 22:09:41 nativespace-cdp sshd[31009]: Failed password for root from 196.20.68.81 port 38302 ssh2
Oct  2 22:09:41 nativespace-cdp sshd[31009]: Received disconnect from 196.20.68.81 port 38302:11: Bye Bye [preauth]
Oct  2 22:09:41 nativespace-cdp sshd[31009]: Disconnected from 196.20.68.81 port 38302 [preauth]
Oct  2 22:09:42 nativespace-cdp sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=root ; COMMAND=/bin/sh -c whmapi1 get_tweaksetting key=server_locale --output=json
Oct  2 22:09:42 nativespace-cdp sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Oct  2 22:09:42 nativespace-cdp sudo[31073]: pam_unix(sudo:session): session closed for user root
Oct  2 22:09:56 nativespace-cdp sshd[31117]: Invalid user mysql1 from 190.108.60.101 port 42174
Oct  2 22:09:56 nativespace-cdp sshd[31117]: input_userauth_request: invalid user mysql1 [preauth]
Oct  2 22:09:56 nativespace-cdp sshd[31117]: pam_unix(sshd:auth): check pass; user unknown
Oct  2 22:09:56 nativespace-cdp sshd[31117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.108.60.101
Oct  2 22:09:58 nativespace-cdp sshd[31117]: Failed password for invalid user mysql1 from 190.108.60.101 port 42174 ssh2
Oct  2 22:09:59 nativespace-cdp sshd[31117]: Received disconnect from 190.108.60.101 port 42174:11: Bye Bye [preauth]
Oct  2 22:09:59 nativespace-cdp sshd[31117]: Disconnected from 190.108.60.101 port 42174 [preauth]
Oct  2 22:10:42 nativespace-cdp sshd[31415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.39.69  user=root
Oct  2 22:10:42 nativespace-cdp sshd[31415]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:10:44 nativespace-cdp sshd[31415]: Failed password for root from 103.31.39.69 port 57680 ssh2
Oct  2 22:10:44 nativespace-cdp sshd[31415]: Received disconnect from 103.31.39.69 port 57680:11: Bye Bye [preauth]
Oct  2 22:10:44 nativespace-cdp sshd[31415]: Disconnected from 103.31.39.69 port 57680 [preauth]
Oct  2 22:10:50 nativespace-cdp sshd[31467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.108.60.101  user=root
Oct  2 22:10:50 nativespace-cdp sshd[31467]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:10:51 nativespace-cdp sshd[31467]: Failed password for root from 190.108.60.101 port 55296 ssh2
Oct  2 22:10:52 nativespace-cdp sshd[31467]: Received disconnect from 190.108.60.101 port 55296:11: Bye Bye [preauth]
Oct  2 22:10:52 nativespace-cdp sshd[31467]: Disconnected from 190.108.60.101 port 55296 [preauth]
Oct  2 22:11:24 nativespace-cdp sshd[31636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.39.69  user=root
Oct  2 22:11:24 nativespace-cdp sshd[31636]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Oct  2 22:11:26 nativespace-cdp sshd[31636]: Failed password for root from 103.31.39.69 port 46992 ssh2
Oct  2 22:11:26 nativespace-cdp sshd[31636]: Received disconnect from 103.31.39.69 port 46992:11: Bye Bye [preauth]
Oct  2 22:11:26 nativespace-cdp sshd[31636]: Disconnected from 103.31.39.69 port 46992 [preauth]
Oct  2 22:11:33 nativespace-cdp sshd[31690]: Connection closed by 159.100.136.21 port 54466 [preauth]
Oct  2 22:16:33 nativespace-cdp sshd[467]: Connection closed by 159.100.136.21 port 36512 [preauth]
Oct  2 22:20:09 nativespace-cdp sshd[1414]: Accepted publickey for root from 185.67.178.249 port 53204 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Oct  2 22:20:09 nativespace-cdp sshd[1414]: pam_unix(sshd:session): session opened for user root by (uid=0)
Oct  2 22:21:33 nativespace-cdp sshd[1793]: Connection closed by 159.100.136.21 port 46492 [preauth]
Oct  2 22:26:33 nativespace-cdp sshd[2980]: Connection closed by 159.100.136.21 port 56798 [preauth]
Oct  2 22:31:33 nativespace-cdp sshd[4304]: Connection closed by 159.100.136.21 port 38646 [preauth]
Oct  2 22:36:26 nativespace-cdp sshd[5593]: Accepted publickey for root from 185.67.178.249 port 51432 ssh2: RSA SHA256:KEtFTfDjAxzMWDlrWpkMCiEi4xCNzI/HgmmS90Zuo/g
Oct  2 22:36:26 nativespace-cdp sshd[5593]: pam_unix(sshd:session): session opened for user root by (uid=0)
Oct  2 22:36:33 nativespace-cdp sshd[5651]: Connection closed by 159.100.136.21 port 48966 [preauth]
